Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7dc1f74d-8588-393d-a48c-67ab7bc61f0c.roa
File: 7dc1f74d-8588-393d-a48c-67ab7bc61f0c.roa (raw, json)
Hash identifier: r8RIx9aUFGGUcuMwGBRYRT7ubxXFl1N5nh/OBQFYUYg=
Subject key identifier: 48:E4:6B:A3:FA:4C:1E:D6:40:B3:9E:7B:6F:C3:14:93:0C:68:C0:F9
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858488F10857798238FD29DDC9C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7dc1f74d-8588-393d-a48c-67ab7bc61f0c.roa
Signing time: Thu 16 Jan 2025 02:00:39 +0000
ROA not before: Thu 16 Jan 2025 02:00:39 +0000
ROA not after: Wed 16 Apr 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.62.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8f:10:85:77:98:23:8f:d2:9d:dc:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 16 02:00:39 2025 GMT
Not After : Apr 16 01:00:39 2025 GMT
Subject: CN=2905dd87-698e-4f26-97b7-10a479876b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7a:0b:fb:a3:96:51:25:4e:b2:3d:e5:44:8f:
57:d4:eb:9b:4c:aa:4b:67:15:31:e7:3f:7b:64:5d:
b9:65:9e:da:81:dd:fd:d9:da:1e:4c:b2:0b:70:ce:
23:b4:57:e7:39:01:ac:fe:f9:af:24:b3:19:56:bd:
41:0c:c3:ec:6b:a5:ad:17:a3:f5:cc:b8:56:40:bb:
65:09:e0:b5:f1:94:f3:4c:b4:e4:b2:07:dc:f6:c2:
df:08:3f:bc:47:61:03:9c:79:ac:31:8e:c0:81:e5:
2e:31:f5:1c:50:e9:05:a6:90:03:36:9f:1c:cf:fb:
7c:6d:62:4a:f9:6f:28:39:92:f5:b3:3e:cd:c1:58:
d5:5f:17:cb:d0:9f:3b:0b:fd:88:e3:36:3c:ef:8c:
67:d3:5e:38:59:a0:09:dc:0e:e1:da:59:90:82:fb:
90:1c:97:79:d0:43:81:e7:85:8e:ed:c1:5b:bb:81:
dc:d8:86:91:2b:06:1a:db:e2:28:45:eb:15:43:9d:
03:87:db:b9:44:a6:3d:5c:4d:2d:24:4d:d6:5a:76:
88:3d:0e:6a:85:32:84:52:d2:f8:45:78:40:13:23:
64:eb:02:30:64:cf:3f:ff:32:de:29:8a:02:c7:1f:
88:0a:e8:08:06:58:9a:a8:a1:b0:44:a0:00:fc:66:
84:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E4:6B:A3:FA:4C:1E:D6:40:B3:9E:7B:6F:C3:14:93:0C:68:C0:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7dc1f74d-8588-393d-a48c-67ab7bc61f0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.62.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:17:32:4e:11:a8:88:84:f5:82:f5:ed:82:d3:2a:74:f4:20:
a4:8e:09:b9:f6:6f:16:f2:36:51:0b:19:b4:95:b7:1b:62:f3:
db:56:2d:2b:35:31:fa:bc:07:e2:27:86:07:c9:80:2a:3b:48:
7a:62:40:4f:cd:11:f2:89:7b:28:08:2e:ae:4d:54:50:c9:a6:
47:03:ce:6c:27:50:7d:33:30:3a:0b:f4:b8:c6:b7:4d:91:2c:
b5:25:24:a8:d1:df:cc:d3:e5:b5:34:32:09:db:23:12:ab:b0:
f7:88:18:42:e6:72:74:9a:7a:0f:ef:dc:27:6e:b4:18:20:e9:
be:65:54:e8:d4:ec:f0:eb:b0:b3:17:df:32:58:59:0b:b6:e3:
8e:80:78:9d:53:42:66:bc:9c:1b:94:ad:13:db:93:6d:21:fa:
4c:8b:ff:2f:a6:58:f1:78:58:aa:40:19:3c:59:14:8b:a4:69:
1d:6e:e4:8a:7a:2a:28:41:04:51:e6:1a:ef:3a:a9:b3:4a:b7:
65:14:6d:f1:bb:e3:26:e5:3b:30:e3:3a:13:d8:66:1d:12:84:
11:80:b2:10:54:59:f2:00:2a:70:4f:64:b2:b5:6e:ab:74:dc:
8b:2b:6a:30:a1:30:bd:4c:85:b8:57:1e:c4:47:f0:3b:7b:50:
3d:54:e7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:00:03 2025 by rpki-client