Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c33c59d-5b47-3e9a-8ead-99ee46f4c240.roa
File: 7c33c59d-5b47-3e9a-8ead-99ee46f4c240.roa (raw, json)
Hash identifier: WfITRqmkG8Lm6nT1rqEyWG8+5az6WPBgbMZdaoMiYEo=
Subject key identifier: 33:2E:77:30:89:C1:2E:07:37:44:D2:0F:16:1F:27:63:28:05:78:73
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848BA564563A399314C36373B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c33c59d-5b47-3e9a-8ead-99ee46f4c240.roa
Signing time: Fri 31 Jan 2025 14:00:51 +0000
ROA not before: Fri 31 Jan 2025 14:00:51 +0000
ROA not after: Thu 01 May 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.208.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ba:56:45:63:a3:99:31:4c:36:37:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : May 1 13:00:51 2025 GMT
Subject: CN=49456cd4-98d5-4aa3-9acb-e941f63d0c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:24:d1:f9:75:cf:7e:23:2e:6b:9e:9a:3b:32:
da:12:05:3f:68:d9:af:6d:ef:6d:a7:af:15:a6:47:
64:52:d3:2e:ae:29:44:54:20:e4:4e:eb:9f:b1:dd:
86:02:01:f6:6b:f3:1f:d0:78:55:f3:49:9f:fe:87:
3c:d7:95:e7:7c:e3:e1:cf:8b:c2:36:0b:aa:5c:3b:
94:e9:7f:02:75:82:53:5c:a6:92:b8:dd:04:6e:9c:
25:38:e2:aa:13:41:a2:70:00:9a:cb:43:fd:21:de:
80:58:87:0d:cc:9d:61:08:4c:98:26:c8:fa:b1:25:
a6:0a:41:9c:72:c5:c4:3e:d3:6d:c2:35:6b:19:6f:
35:ef:59:f8:0d:e4:5c:e4:ac:ac:eb:49:3c:3f:35:
ac:30:4c:98:18:c0:62:a0:6c:f4:3d:83:65:99:5d:
48:59:1c:fd:af:0a:68:55:80:f8:aa:7b:8f:a6:49:
48:8a:ed:f4:f9:13:41:ec:3a:f4:b9:3a:a5:8f:08:
4a:fa:ca:37:3f:ef:dc:d9:e6:bd:7a:2f:b6:2f:8e:
9f:6b:ec:94:04:26:8c:d8:da:7a:26:1e:80:42:bb:
25:6d:fa:b3:11:5a:63:f0:fd:58:e0:8f:56:5f:80:
ed:3d:ef:03:24:dd:93:ac:90:c9:ee:ea:d9:f6:55:
09:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2E:77:30:89:C1:2E:07:37:44:D2:0F:16:1F:27:63:28:05:78:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c33c59d-5b47-3e9a-8ead-99ee46f4c240.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.208.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:ae:88:64:ba:e8:8f:9b:7b:fb:ef:55:cb:71:a5:a5:42:15:
56:74:93:6d:2c:b4:68:17:25:12:b3:10:94:69:17:86:b5:09:
a8:c7:1c:a1:3c:de:c5:2a:eb:77:b9:3c:7f:04:39:ef:4a:e8:
35:9b:68:e5:7f:a1:a3:52:6a:b9:eb:66:9e:75:9a:03:70:0a:
2f:30:8d:0a:55:7a:5f:ae:23:f2:99:47:60:0d:e9:5a:c3:f3:
3d:c2:12:ba:f3:1a:61:20:65:05:01:47:41:4c:3a:c3:f1:74:
e1:18:80:4a:f5:32:ba:49:99:31:fe:53:23:1b:d6:e4:62:55:
cf:67:a8:b4:63:dc:c4:4c:0b:42:da:42:3c:90:02:b3:9b:57:
1e:d8:2e:74:30:ab:97:66:07:bb:b9:17:82:0d:e2:ef:73:a8:
8c:e9:23:4f:97:e1:a8:2b:ab:11:65:45:38:cf:5e:7f:28:ad:
6a:52:1d:23:e2:a2:d6:9e:9f:de:ca:1d:27:15:0c:ef:92:70:
d9:4e:2e:3f:63:08:44:7c:a6:00:a1:5b:30:49:58:c6:10:7d:
57:e4:ec:c8:67:22:46:a5:26:24:e8:3b:17:bd:18:50:0a:21:
bb:fd:92:f3:d8:b7:ee:c5:40:5e:a6:e9:df:ed:70:4e:40:0c:
08:a8:ce:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:42 2025 by rpki-client