Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a9e5468-acac-34c4-a1eb-dccb1eefc724.roa
File: 7a9e5468-acac-34c4-a1eb-dccb1eefc724.roa (raw, json)
Hash identifier: yvMNe077sdpb8B2rWAap6dukWfG92GgGqg0rI0zzPZ0=
Subject key identifier: FC:35:C0:63:14:C1:E7:3B:F2:F8:38:44:BA:4F:DE:1A:82:0F:93:EC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848E0069D85F9C7702F61EF29A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a9e5468-acac-34c4-a1eb-dccb1eefc724.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 21342
IP address blocks: 23.40.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:9d:85:f9:c7:70:2f:61:ef:29:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=450f17fc-3d0c-4ef9-ba75-99ab5f885bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:99:74:a4:22:76:98:5f:2b:84:5a:e5:ac:d2:
a8:8a:cc:8a:f6:bf:75:06:a7:00:6d:e5:d8:55:38:
51:80:cf:65:f9:e9:fb:24:9c:af:17:ab:0a:60:8c:
c6:7d:97:e1:4f:81:db:15:4b:5d:b6:e8:c4:8a:f6:
02:5e:28:73:51:14:b0:45:40:ab:97:3b:44:5a:54:
dc:e7:23:d7:d4:56:10:5e:0c:f5:36:ba:a4:79:2a:
21:2b:74:69:69:15:90:72:84:68:25:c5:18:63:3d:
54:2e:62:47:9d:c7:3d:3b:18:81:dd:a9:da:3b:a6:
62:7e:40:0f:bd:2c:da:7e:15:e8:81:0c:fa:92:b5:
4a:f9:fa:dd:5e:49:f4:5e:4b:6c:ab:1a:32:d6:98:
fa:fe:55:4d:57:2d:94:c5:3e:b8:cf:c2:86:5a:b0:
3c:be:80:15:a4:cc:05:e5:83:91:29:c1:f6:e7:d0:
b6:78:5e:47:05:26:93:93:09:df:bd:20:cd:50:c7:
44:d4:ec:61:87:bf:6a:f7:3e:9d:2c:8d:e4:d1:4b:
e5:60:ba:2e:47:f2:ae:a8:1b:c8:da:9f:a0:8c:5c:
f2:e9:58:58:66:7e:74:c3:f1:4f:93:aa:e5:8a:01:
98:cb:7c:b7:ad:2c:e5:c1:db:e9:8e:f9:b8:f9:d0:
f0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:35:C0:63:14:C1:E7:3B:F2:F8:38:44:BA:4F:DE:1A:82:0F:93:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a9e5468-acac-34c4-a1eb-dccb1eefc724.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.40.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:11:64:c5:ef:3f:98:cd:50:b1:a3:9a:e6:cd:84:8e:78:06:
bc:12:80:f8:ac:66:ac:78:96:3d:d7:d9:3a:1a:ac:52:98:b2:
92:20:91:c3:5f:c3:1c:2e:f0:88:ec:ac:66:1b:82:b8:0b:01:
92:cc:51:1e:8c:f7:6c:9a:07:f5:7a:a2:20:a8:87:a1:19:92:
f1:7a:77:24:08:96:f3:61:14:ef:73:88:44:ae:18:16:4e:ef:
7f:c4:4a:1a:1b:c9:44:5d:c9:e2:7e:73:0b:b4:d6:a6:85:39:
53:c3:8e:64:22:b0:3c:55:0b:ea:44:95:d6:aa:86:bf:a6:7b:
b1:a5:f7:5e:e2:58:01:4a:49:c8:1b:9e:9e:38:44:00:f7:e6:
aa:23:bc:1b:de:da:23:07:ab:0f:0e:1b:a6:6d:9b:6f:bb:c8:
47:cc:6d:6a:56:1f:1d:fb:ca:1a:99:51:01:a9:8b:30:8c:a0:
b2:9c:75:54:ca:a5:c1:b9:98:6f:04:08:a1:f6:e0:2e:01:fa:
d8:be:08:af:45:b1:35:2b:3a:67:6d:b4:0e:0d:23:5b:7a:b5:
29:3e:75:9e:89:07:c0:1c:7a:7a:05:72:10:ae:c9:0e:c7:04:
f0:48:e9:c0:0b:16:49:29:83:6a:f7:be:42:a4:d4:04:84:c1:
06:92:2a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:59:54 2025 by rpki-client