Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/876d552e-d81e-3b7f-a448-26105dc5b2be.roa
File: 876d552e-d81e-3b7f-a448-26105dc5b2be.roa (raw, json)
Hash identifier: Rcud0Hj9z9h2UW2r3c/dGHpPCPlDwtSyhPdJSgoQvd0=
Subject key identifier: A4:C8:14:F1:8A:8E:25:C6:07:1F:2B:6A:1E:D3:F0:3F:8F:72:A5:41
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858488F1088DF437FF77B73BF2D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/876d552e-d81e-3b7f-a448-26105dc5b2be.roa
Signing time: Thu 16 Jan 2025 02:00:39 +0000
ROA not before: Thu 16 Jan 2025 02:00:39 +0000
ROA not after: Wed 16 Apr 2025 01:00:39 +0000
asID: 34164
IP address blocks: 23.63.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8f:10:88:df:43:7f:f7:7b:73:bf:2d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 16 02:00:39 2025 GMT
Not After : Apr 16 01:00:39 2025 GMT
Subject: CN=1bb638a9-12fa-408e-8877-e84513c65ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b2:10:09:79:ba:81:6e:e5:ac:ae:48:8d:00:
0e:1b:b5:10:23:b6:08:79:34:c7:24:e3:73:85:b2:
8c:7b:27:24:59:ff:85:aa:ca:2c:dd:84:bd:03:ba:
56:2a:85:cb:a6:a6:a0:3f:ad:b2:00:86:9b:d8:b2:
75:ce:2a:c8:c1:ec:8e:e6:48:3e:ba:3b:ba:4f:c9:
e3:84:b0:56:20:e4:cb:2d:a1:72:72:8d:22:57:42:
3b:f3:d0:0f:5b:64:d6:74:9f:dd:df:e8:d2:46:fd:
e0:d3:5b:ed:71:1f:af:7c:8d:4b:83:55:8c:98:b1:
06:95:72:2f:78:ad:13:a2:19:7f:f8:b1:ae:ed:82:
cd:26:18:a9:72:d7:4d:a9:e5:b6:bc:5d:bc:57:31:
20:60:1a:48:b2:89:cd:36:63:26:c0:aa:37:6b:ce:
df:75:80:a2:71:f1:b6:31:ec:9c:56:cf:f2:c5:8d:
d0:d1:dc:62:2a:fc:fa:5c:bf:e1:66:1c:d5:a1:6d:
29:63:d0:79:b6:39:a9:67:c9:11:b8:b6:94:dc:af:
9f:e6:53:8c:b8:9c:d7:3d:a1:20:df:45:84:0b:9d:
1c:df:66:c6:35:fa:4a:05:a2:ec:0c:1c:be:1e:9a:
7f:e6:59:8a:38:29:cc:c3:01:48:a1:ea:65:cd:41:
ff:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C8:14:F1:8A:8E:25:C6:07:1F:2B:6A:1E:D3:F0:3F:8F:72:A5:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/876d552e-d81e-3b7f-a448-26105dc5b2be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.63.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:94:f3:3b:3c:db:f5:f4:ac:bb:b9:7b:eb:10:e9:75:e6:87:
38:47:32:49:13:98:e8:00:76:9b:3a:e9:e5:67:fc:a7:f8:aa:
cf:12:9e:d2:c7:31:17:e6:f2:22:9a:96:a7:af:0d:2c:09:e2:
72:c3:85:b2:4e:34:00:34:1f:d6:18:d1:8f:cb:23:00:b8:6e:
30:ae:2b:ac:57:bf:0b:f5:f6:ee:53:dd:81:af:65:03:62:90:
c8:43:18:a6:16:c9:60:2f:f5:59:7a:38:33:91:8b:1e:26:e6:
ad:ca:64:b8:e2:20:4e:01:c4:b4:f6:c5:f4:d8:cb:c1:8f:9b:
f3:64:e7:65:8c:74:ec:80:f1:85:b8:b8:1b:59:65:a4:74:9b:
32:95:2c:55:0f:7d:67:90:32:0d:9e:8f:59:63:e0:2f:66:e2:
90:39:2a:77:47:fb:ab:6c:a2:95:41:a2:42:4a:a2:15:77:c6:
e3:b0:f0:83:75:13:f0:73:c8:cd:78:35:2d:ab:a7:5c:b2:c6:
12:0e:a5:5b:1c:16:98:dd:fc:c9:f8:f9:2b:ea:e7:0b:89:5a:
ed:4b:3f:6f:e3:0e:d3:2e:97:7e:f6:7d:9a:31:d2:45:ee:f2:
ef:94:26:69:dd:f2:b0:81:ec:5b:d4:4f:a7:89:a9:b0:0f:bd:
a1:c0:51:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:24:51 2025 by rpki-client