Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/866f23d3-fc05-3d18-b5c6-e27b5a2792e4.roa
File: 866f23d3-fc05-3d18-b5c6-e27b5a2792e4.roa (raw, json)
Hash identifier: lStBXWx0O6JORo8+5TJIO9iOgnPaBSq/v6bNX3XwecQ=
Subject key identifier: 3F:33:8E:41:4C:00:F5:B5:2A:EF:4B:D0:26:F7:01:FE:F9:2F:57:46
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858489340B61B2DD47DF64554F380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/866f23d3-fc05-3d18-b5c6-e27b5a2792e4.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 16625
IP address blocks: 23.204.134.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:b6:1b:2d:d4:7d:f6:45:54:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=a6a084aa-6f40-4937-888a-5b69d0081324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:23:00:40:67:32:84:1d:58:aa:45:e8:5f:e3:
10:3b:dd:68:82:70:b3:15:92:db:a4:4e:08:c4:d1:
33:57:2d:b2:18:d5:a0:b7:e5:f5:1a:5d:00:18:fa:
3f:37:3c:1d:ce:6c:6a:96:24:d9:62:87:e9:ba:df:
6e:f7:e4:22:c7:f3:86:a1:70:f0:98:77:b7:b9:99:
5a:82:75:63:22:06:34:3c:f3:a3:c6:b4:fd:da:65:
b8:e4:ca:db:44:7c:30:5c:0d:02:e4:53:6c:98:ed:
2c:ee:4a:0b:f5:27:05:f3:ef:2f:81:63:02:24:e9:
77:2a:20:c6:46:26:71:dc:6a:72:5f:07:f5:71:86:
67:47:ca:01:4a:7a:4f:cb:d6:ac:22:0f:35:86:3a:
45:b1:84:87:c3:d2:ef:a0:11:54:73:5f:58:b8:41:
e7:9b:30:08:10:92:5f:02:73:6d:4a:37:0f:be:13:
f1:6c:5f:5a:d0:4d:1d:94:60:70:fa:c0:d8:22:30:
c8:c0:f8:01:8b:e6:d8:5d:63:ee:98:aa:30:2a:cb:
48:2b:9c:0e:bc:7c:48:61:b3:59:22:71:b4:9f:bd:
f8:bf:cf:a6:71:6e:a6:95:46:e4:5a:62:0f:ec:c2:
c1:98:43:06:3c:ad:92:f5:f9:7d:bd:61:3a:11:84:
13:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:33:8E:41:4C:00:F5:B5:2A:EF:4B:D0:26:F7:01:FE:F9:2F:57:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/866f23d3-fc05-3d18-b5c6-e27b5a2792e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.204.134.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:fb:b1:7b:e5:9c:a9:e2:ed:18:cd:ae:14:95:35:5e:b2:c2:
fa:a0:45:0e:90:5b:96:76:af:15:90:7b:9f:02:b5:72:7f:9b:
eb:d0:26:75:49:58:db:de:0f:7c:6a:fc:ff:ee:6f:e2:1e:d6:
68:36:d8:04:65:54:7d:74:23:67:56:a5:29:8b:02:d3:a4:87:
34:32:36:b0:a4:33:01:9b:80:c4:96:80:db:87:62:4e:79:8e:
00:ab:93:dc:f6:41:0a:72:90:30:0c:b9:6f:a7:b6:09:4f:20:
cd:b7:80:da:16:1d:42:78:3e:bf:46:f2:d3:71:98:5c:60:bb:
d6:2f:bf:1b:c5:43:52:e9:cb:5e:07:06:3a:55:61:88:84:d3:
43:4c:58:09:cb:82:b3:b5:08:b0:6b:89:ee:88:37:51:51:5c:
c2:16:15:e2:75:9a:73:72:7f:0b:ef:bf:11:7d:b4:86:01:2b:
1f:eb:76:cd:fa:d0:f4:c2:58:79:eb:eb:a9:9c:43:26:b2:1d:
d8:ad:ac:2b:81:b9:76:d5:42:af:18:05:c5:36:f2:b5:b6:d2:
32:72:39:d7:f1:d0:fd:7b:62:3e:2c:48:6a:75:b3:34:b9:64:
6d:8c:75:ad:96:f6:49:06:fd:03:77:01:b2:9e:22:2f:92:53:
ac:b8:69:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:18:55 2025 by rpki-client