Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/81c74125-a1b0-304e-8026-6e2d5bd84579.roa
File: 81c74125-a1b0-304e-8026-6e2d5bd84579.roa (raw, json)
Hash identifier: MQzMcciYt8uhvouavj9EJlMibJ6QUZdJLZUpaot7E6U=
Subject key identifier: 08:B2:A2:7C:16:0F:58:B0:28:B7:DE:9B:BC:DC:F0:DA:A3:55:8F:5F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858489340BA575952A04911BFC760
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/81c74125-a1b0-304e-8026-6e2d5bd84579.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 20940
IP address blocks: 23.217.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:ba:57:59:52:a0:49:11:bf:c7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=9a47ef03-7647-4f24-b471-8d4b6cdbc195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4c:0a:37:3f:f0:bc:3f:d9:d2:59:e3:d2:54:
dd:c4:6d:ae:82:c7:ed:6d:07:87:4c:5e:98:53:14:
2f:14:97:1b:42:34:3b:7b:16:50:f9:31:59:8e:78:
2d:41:05:bb:58:7b:39:bd:f1:7c:b3:5c:e4:60:0f:
37:a2:9c:b3:04:06:4b:45:13:39:26:84:35:fb:5e:
6d:3d:09:16:f7:a6:b1:1b:c1:cf:c2:d8:db:e6:a9:
2e:3e:1a:54:9d:24:47:5e:8a:ff:9e:46:e8:a5:0a:
da:ba:a0:72:65:e4:43:70:97:b3:f1:9b:03:10:62:
2e:5b:38:2c:28:66:94:15:b0:4f:ca:42:a5:79:7c:
72:a7:43:43:8d:92:67:e1:30:8c:a9:f4:74:b3:e7:
f1:33:fa:d4:d0:65:12:fb:b1:67:6a:99:b1:f5:40:
64:26:3c:49:d2:ee:36:ee:99:b5:83:f5:56:70:40:
8a:b0:fd:9e:43:1f:f4:ca:f8:d4:fc:1e:28:ef:bf:
33:52:bb:77:b3:fc:08:b9:ce:8e:74:ea:7b:d8:1b:
3a:c2:f2:8e:db:e8:03:b2:a7:22:3d:fd:0c:3c:f6:
dc:05:59:72:dc:82:ac:d2:93:48:61:b1:0c:85:67:
20:95:11:e8:5f:26:81:1e:32:e4:55:1c:ea:55:f2:
ec:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B2:A2:7C:16:0F:58:B0:28:B7:DE:9B:BC:DC:F0:DA:A3:55:8F:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/81c74125-a1b0-304e-8026-6e2d5bd84579.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.217.54.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:3c:6c:b9:0b:ec:44:c2:e4:c7:38:b5:df:bc:c6:41:39:de:
cb:df:9e:a2:0c:25:19:96:d1:31:12:61:d2:37:9f:c6:89:2d:
8e:6e:be:d3:ec:86:07:8a:34:16:54:01:2f:08:e3:e1:97:e6:
9f:89:63:c2:fa:19:8c:15:35:72:df:d8:69:85:30:e5:00:4c:
fc:fb:ae:76:26:64:ef:57:8d:85:29:bb:76:1c:d7:3b:65:b1:
36:8b:b7:d1:e2:15:52:f0:91:e3:15:db:0f:3d:6c:af:d3:31:
aa:f0:74:c8:9e:91:0f:c3:1e:dc:47:9c:2e:c8:5f:78:17:d3:
e9:16:25:9f:b1:00:f5:01:ef:0b:70:70:18:d2:d8:3a:69:f0:
98:b4:fc:ce:d8:44:b6:02:cc:d4:3d:ad:71:dd:22:e7:bd:78:
25:99:8c:c2:bf:a2:17:66:7e:02:d5:41:84:55:4c:83:65:c1:
53:41:84:d3:34:79:c5:88:8b:99:6b:e9:ac:80:ed:f5:e5:3d:
b1:8e:cf:4a:c8:04:07:1d:19:bf:4d:08:24:c2:e3:64:d0:ee:
28:be:2a:60:48:34:cc:2c:6c:9a:a2:7c:22:d9:25:07:e2:1e:
1d:80:8f:91:91:63:14:c3:1a:00:74:d7:03:ad:d5:c4:8f:7c:
58:5f:29:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:23:29 2025 by rpki-client