Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c6da5cd-347c-3f66-afa5-c1e0ee5fb059.roa
File: 8c6da5cd-347c-3f66-afa5-c1e0ee5fb059.roa (raw, json)
Hash identifier: Rhb0D2rc3a784/Q8o5V3eEpFvt+0AhShMQaYDo7fUFo=
Subject key identifier: 88:C3:0F:FF:55:49:32:78:E0:CC:2E:27:2C:44:92:5B:4C:E5:1D:BB
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858488F10831758B542B7889FF600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c6da5cd-347c-3f66-afa5-c1e0ee5fb059.roa
Signing time: Thu 16 Jan 2025 02:00:39 +0000
ROA not before: Thu 16 Jan 2025 02:00:39 +0000
ROA not after: Wed 16 Apr 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.63.68.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8f:10:83:17:58:b5:42:b7:88:9f:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 16 02:00:39 2025 GMT
Not After : Apr 16 01:00:39 2025 GMT
Subject: CN=ca261f41-eaf5-4ec7-8dce-c0537f67f505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2c:7d:61:b8:d2:d5:be:05:ec:e6:10:fd:8f:
8f:89:6d:89:2a:9a:26:69:23:c4:bc:bd:d7:5c:fc:
66:7c:f9:54:57:4d:61:ba:ab:7b:56:9a:1a:ee:1c:
7c:51:33:95:47:50:f5:13:1a:a3:f7:97:6e:f1:99:
e7:97:1a:0a:50:30:1f:76:1e:8b:3a:75:df:8b:a6:
89:d2:bb:b0:34:a3:c2:7f:b2:3f:e1:30:1b:48:81:
41:9a:ff:59:fa:86:51:ad:ec:b3:5e:fc:fe:0f:97:
c7:94:da:af:65:28:24:8c:f3:f9:00:d8:00:9c:28:
17:97:49:53:dc:31:0e:ba:d2:e7:29:4e:58:83:82:
c5:68:da:f0:58:55:7b:5d:f5:c4:25:0d:d4:1f:c0:
6d:90:64:79:8c:54:e4:7c:14:e2:fc:d7:3b:36:f9:
cc:44:35:c7:79:1b:4c:e1:27:9a:e7:68:e4:64:56:
ae:c3:29:92:8a:25:7d:ee:b8:a4:23:c3:47:6d:38:
bb:b0:21:79:25:1a:6a:78:1a:b3:92:f0:5e:bb:2e:
47:34:16:10:41:91:5a:1b:8a:47:e1:40:f4:ae:c2:
b2:06:ba:28:77:89:06:7e:ce:87:a6:9c:ac:01:37:
83:c9:e7:fb:f9:5c:c4:2d:c7:e9:e2:4f:35:ea:14:
35:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C3:0F:FF:55:49:32:78:E0:CC:2E:27:2C:44:92:5B:4C:E5:1D:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c6da5cd-347c-3f66-afa5-c1e0ee5fb059.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.63.68.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:3e:ed:90:c3:8d:66:e1:8d:73:11:23:a7:75:d7:3a:d1:06:
c8:24:5f:6c:13:33:03:a7:95:2d:ac:cc:ae:77:b0:91:11:06:
0e:fb:9e:92:4f:09:fb:ae:3d:15:85:12:ca:a0:0d:1d:06:f1:
24:dd:e4:cf:68:ac:4d:56:cb:1a:94:85:47:df:9d:d8:e7:f3:
be:9d:40:f7:11:91:d0:6f:bc:e9:6c:73:e4:fc:56:e4:2e:f5:
36:e3:9c:81:82:38:65:22:5d:e1:94:25:03:8c:c6:2e:37:30:
f3:e6:65:e0:47:7c:d8:8f:e0:64:a9:35:56:a9:82:1f:e5:f8:
c6:16:fb:84:d2:9b:a5:94:46:73:f1:1a:a2:77:52:58:d1:c3:
27:5c:d0:05:45:5b:56:30:d5:95:04:04:9b:8c:4d:a7:dd:d0:
ca:7e:29:77:c5:af:51:c9:61:e6:c3:89:c3:1e:e5:e8:1a:4e:
93:31:63:97:18:7b:29:81:69:3f:07:6b:1f:a2:0f:b9:f1:9f:
0e:67:14:52:03:bb:37:82:3c:7d:8d:12:4e:64:3a:d3:34:ee:
33:0d:50:a9:57:e7:3b:84:80:fe:6a:a8:8c:a4:3b:9c:88:7e:
b1:d6:c6:b3:da:26:b8:39:98:b8:ac:a7:1e:df:68:81:79:23:
ad:49:7f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:23 2025 by rpki-client