Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d4813b4-c479-3bfa-a1d6-ccecb022bf40.roa
File: 8d4813b4-c479-3bfa-a1d6-ccecb022bf40.roa (raw, json)
Hash identifier: /0vzAvC5xBTA1xEvocEBH6wvtYDEHWf6DBtYn14Rkf4=
Subject key identifier: F6:61:BE:35:2A:01:8B:22:41:55:06:C5:F1:E4:4F:E8:C1:BD:09:F7
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848CC7BACF0C406D8BDD57EFE20
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d4813b4-c479-3bfa-a1d6-ccecb022bf40.roa
Signing time: Fri 07 Feb 2025 02:00:39 +0000
ROA not before: Fri 07 Feb 2025 02:00:39 +0000
ROA not after: Thu 08 May 2025 01:00:39 +0000
asID: 35994
IP address blocks: 23.222.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cc:7b:ac:f0:c4:06:d8:bd:d5:7e:fe:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 7 02:00:39 2025 GMT
Not After : May 8 01:00:39 2025 GMT
Subject: CN=493c6cdf-c9b8-426a-adb8-f6d680c84659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:65:5a:44:2a:86:56:fc:be:1c:2b:8f:bf:68:
02:1d:b1:2a:94:71:66:64:7f:9e:52:a0:97:64:cd:
3d:2c:42:0e:21:27:d3:08:60:2e:95:1c:9c:a7:2d:
30:d3:52:c2:3d:dd:ef:e5:2f:df:b9:77:c5:3c:f3:
e4:98:93:c7:82:f8:cd:4e:08:f2:27:75:f9:30:d3:
4b:e0:74:a5:27:bd:81:87:5e:1a:83:2d:aa:65:33:
b4:a9:5b:00:80:44:2a:1a:fe:0b:e6:c2:58:91:ee:
30:5e:34:2f:ee:b0:f9:bc:55:d5:fd:a6:cf:cb:c5:
db:9a:a4:6b:cb:5c:01:cc:49:4c:0e:17:50:32:e8:
86:44:6d:be:2b:90:8b:24:ed:11:e1:ce:9e:67:7e:
fb:36:12:01:12:fd:04:05:b9:36:ae:23:38:8d:b2:
f9:9e:87:4d:87:86:b5:c7:94:51:2d:0b:c4:fe:f7:
2f:51:0c:38:65:95:d6:1e:14:59:04:91:19:9f:49:
d5:ba:b8:af:21:99:5f:ab:97:af:43:08:b8:9a:7b:
63:50:0b:08:52:ed:d8:45:49:49:32:8c:1d:9f:89:
8b:e9:79:80:2b:c0:ac:66:c8:a0:c4:15:74:94:7d:
5b:2a:52:ea:df:24:30:ea:d4:4d:bc:ea:2a:78:00:
83:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:61:BE:35:2A:01:8B:22:41:55:06:C5:F1:E4:4F:E8:C1:BD:09:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d4813b4-c479-3bfa-a1d6-ccecb022bf40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.222.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:5d:dd:f9:38:a6:95:a4:f1:43:15:85:3a:76:96:d1:42:88:
0f:0f:ee:c7:e9:2e:64:53:98:b9:70:de:50:33:20:9e:e8:e7:
1b:d8:ce:bd:23:f0:24:c9:c7:10:23:55:9a:be:0f:f8:71:3c:
c3:ee:2c:0a:4d:d6:29:18:7f:3c:d4:c8:17:cb:2c:20:d5:d0:
96:a3:b3:ef:78:1c:0d:01:1d:a4:26:be:6f:ef:64:ee:3f:08:
d9:46:a0:29:ed:03:99:41:4d:21:d9:04:eb:3e:73:d6:c8:51:
89:f4:7d:ff:27:b8:77:90:5c:40:77:25:23:3b:f1:f4:c9:93:
db:e5:56:f3:14:25:f4:22:f0:b1:19:ea:4e:27:2a:ad:da:79:
49:ec:e3:54:bd:ab:5f:f7:84:d8:ba:b9:a2:2a:58:43:5c:91:
31:40:0e:09:34:68:ef:59:c7:51:28:83:3b:2c:c6:63:2a:7f:
3b:24:2c:b3:f9:26:ff:bc:ce:51:59:e5:15:2f:f2:6f:8f:d9:
5b:1d:18:32:af:d3:24:6c:b9:e9:40:63:58:83:65:2c:c6:eb:
53:99:ed:45:8f:09:3a:8f:38:b6:4b:4c:38:71:9d:fb:0b:a6:
71:e8:69:40:c3:b5:be:38:a3:4f:76:84:c6:c6:46:e5:fe:e7:
7e:83:8b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:46 2025 by rpki-client