Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/757b771b-262a-39f2-a806-aa1921662ac6.roa
File: 757b771b-262a-39f2-a806-aa1921662ac6.roa (raw, json)
Hash identifier: XOz6aakk7zHDSjWmeuvByqSi4XPdxsEkCjom6xGwW2Q=
Subject key identifier: 14:24:C5:2D:52:9E:85:EA:E9:9A:07:F5:87:07:75:4A:81:CD:B9:82
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858491ED6F4771700418399759D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/757b771b-262a-39f2-a806-aa1921662ac6.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.73.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:f4:77:17:00:41:83:99:75:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=d394b141-93a3-4eb0-9b77-2517ed509c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b2:55:57:69:9e:b4:9c:e3:68:83:5f:34:3b:
8d:2d:bf:a1:10:15:94:3c:fa:3f:9c:c9:4a:35:3f:
c8:45:49:56:89:42:c6:59:4d:84:c1:0a:be:6c:92:
35:93:31:d3:4a:e6:84:12:2e:6f:ea:c3:74:15:b4:
73:2e:09:38:77:d2:ea:54:f9:b6:28:57:1a:46:48:
22:dc:46:a6:86:63:63:b4:ae:0d:68:75:2c:4b:53:
e6:7c:aa:32:e2:b3:12:7d:fe:11:47:25:ef:d8:54:
62:17:3d:1e:5e:54:b5:3d:75:8c:7d:a2:c6:bf:56:
f6:71:73:d9:94:22:98:25:ff:22:a3:10:7a:e9:5f:
71:89:0a:75:96:73:45:53:23:5c:e2:8d:43:82:f8:
e9:5c:7b:1f:42:3d:79:e3:f2:80:5e:56:e5:11:d3:
d8:1e:e7:ad:e8:5e:42:e6:41:fe:3b:70:33:d7:89:
5e:eb:b1:a8:52:cd:39:16:c9:76:f2:5e:c3:7c:c8:
7e:da:b1:b2:18:49:ed:9d:f7:3a:16:d3:53:1e:57:
1f:46:67:f1:e4:53:d3:2a:20:f4:59:4d:de:1c:8d:
5b:d1:43:b1:d9:42:2e:56:62:62:ab:57:74:b0:81:
56:d7:a7:3b:89:93:fe:a0:94:58:5e:02:e1:94:74:
e2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:24:C5:2D:52:9E:85:EA:E9:9A:07:F5:87:07:75:4A:81:CD:B9:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/757b771b-262a-39f2-a806-aa1921662ac6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.73.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:ee:91:f2:14:69:0e:89:94:1e:a1:e1:38:3a:24:29:01:44:
d3:8e:50:f5:af:10:ed:5f:8b:1e:be:e2:33:bb:5a:7f:e8:df:
06:c9:6b:4a:37:1e:73:ba:d4:0f:fc:a1:d5:f8:35:08:fe:29:
ac:49:5d:11:66:9f:2f:ce:08:56:d7:ee:31:46:1f:15:62:25:
d3:ab:8a:68:15:5d:7a:13:73:3d:14:a3:3a:ce:72:95:a8:f3:
76:58:9b:a6:5e:27:3d:79:12:5e:14:79:d2:54:c5:b7:ba:b1:
0d:12:6f:eb:c1:cd:73:f3:d7:db:f8:20:cf:fe:91:5d:72:0a:
29:39:26:80:46:29:56:2d:df:e8:6e:ed:56:6d:52:cd:68:c3:
af:3a:bf:a2:b7:62:52:b3:a1:9e:89:b7:09:00:26:02:38:0c:
39:75:00:2f:a4:b6:10:74:9e:8b:c8:85:13:65:7d:0f:c2:f0:
ba:7c:bc:bb:a8:c6:fd:27:0d:d1:dc:2b:70:f1:1f:12:2d:91:
34:f2:da:e8:83:2c:1c:17:f0:e8:b0:8f:00:31:c6:db:ca:60:
89:c9:66:64:14:f1:29:cd:f0:8f:be:75:82:c1:73:c2:b3:32:
29:5f:c9:4b:7d:9d:45:a4:06:08:38:53:27:5d:10:be:d2:de:
72:e1:3e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:34:46 2025 by rpki-client