Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c191705-cd04-374e-94ba-a407f5c2a3bb.roa
File: 8c191705-cd04-374e-94ba-a407f5c2a3bb.roa (raw, json)
Hash identifier: tCewYwSFqXrxcgZHvEvzwDu4TsmVH8DXkjGo8qw7Yn4=
Subject key identifier: D6:A9:6E:92:FF:FD:B3:35:36:5B:9E:B8:44:5F:56:94:37:6D:59:FF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487CEB7518B6CE616A12D47F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c191705-cd04-374e-94ba-a407f5c2a3bb.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.44.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:75:18:b6:ce:61:6a:12:d4:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=ec71d110-c5da-4c38-92f6-2e72bc977581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:80:4a:f6:f0:97:26:9b:6d:2a:ab:60:a6:c8:
df:0c:57:cb:65:ba:b2:04:cd:c8:81:91:b5:9e:da:
c9:49:00:ac:fe:05:da:e9:87:10:ec:3f:b3:22:98:
8c:32:45:6e:3b:e1:67:59:5f:e1:19:d2:b0:be:af:
6c:78:ff:1c:94:83:87:c6:2b:41:84:f1:ea:ac:ce:
b5:fa:24:80:58:55:ad:92:3f:2c:c5:f0:e8:a2:c1:
3f:68:fc:3a:10:4c:5f:ae:34:f2:6c:55:ad:7b:73:
e4:89:ef:5d:97:de:53:7e:4b:b5:2e:16:7e:2c:a1:
ad:21:3c:1b:1f:90:df:7d:37:0f:3e:13:53:9e:7f:
c9:f6:2f:f6:c8:3c:01:05:e9:5e:ec:97:b6:c8:24:
e6:0b:43:8f:9a:4a:f3:c0:dd:9d:f4:df:8f:f1:e5:
65:b4:49:80:d2:9a:c3:6e:c8:af:82:1d:fa:fc:ca:
a1:16:63:68:80:48:df:8f:c7:a1:6d:12:5d:b9:fb:
b8:fe:6b:c3:34:37:39:4c:dc:9c:72:6d:7a:18:2c:
32:4e:9c:c9:04:14:37:a6:de:52:a3:a0:80:12:86:
db:02:81:9e:a6:84:58:fd:e6:be:2c:df:f4:55:4f:
b0:2f:ac:7f:a9:be:d3:34:2e:1a:04:8b:53:a6:11:
91:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A9:6E:92:FF:FD:B3:35:36:5B:9E:B8:44:5F:56:94:37:6D:59:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c191705-cd04-374e-94ba-a407f5c2a3bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.44.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:4f:c3:e7:93:31:f4:f4:0e:b6:e8:fc:3c:2b:56:7e:bd:2b:
94:48:a3:1a:bc:2b:68:f4:49:4c:98:bf:8c:bd:59:eb:1a:c9:
e0:93:38:1d:31:32:f1:34:f3:99:6f:50:48:9d:38:f8:11:06:
4c:8e:e6:46:88:c9:8f:09:8a:e4:5b:ec:9c:8c:0d:7f:8a:f8:
5a:86:5e:fa:bd:d0:33:46:0a:a6:25:57:1e:80:a0:9f:79:27:
f1:e2:38:4e:c1:5d:b1:c2:67:be:2e:36:d1:71:ae:d6:89:93:
92:13:e6:73:02:ae:e0:fa:a7:d3:4d:00:49:6d:64:10:2e:75:
08:14:cb:0c:ba:95:24:eb:fa:83:05:ed:ad:30:26:5b:2a:05:
b2:94:ed:8c:42:b0:db:ca:ae:34:8b:87:98:52:fb:90:64:e4:
e0:85:f6:0f:a8:0c:34:9c:4a:5e:3c:73:c2:d5:31:fc:5c:2d:
8c:c6:1e:4e:e7:9e:ad:f0:ca:41:24:ea:88:09:81:88:4a:49:
f5:3d:ca:55:e3:d3:3e:b6:78:c0:61:a0:9d:da:5b:08:be:79:
0d:3f:9d:57:e8:b0:7a:94:29:8d:7f:c7:91:a2:9b:74:63:11:
e5:ee:2f:9c:fd:ec:39:ec:52:6d:44:39:ec:02:31:cc:b8:e8:
46:45:c2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:00:02 2025 by rpki-client