Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e6b0a08-3c31-30e2-9fa0-4f3cceb6dddd.roa
File: 8e6b0a08-3c31-30e2-9fa0-4f3cceb6dddd.roa (raw, json)
Hash identifier: skqPyzCs6UY90u4hw0UpjyoKzpT9DO8efFw2qXNPkgE=
Subject key identifier: 50:CC:FA:43:E7:5C:47:CC:D3:9F:2F:9B:C5:96:5B:B1:01:76:0E:5A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584913AC3B970ED955A219921B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e6b0a08-3c31-30e2-9fa0-4f3cceb6dddd.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.64.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:3b:97:0e:d9:55:a2:19:92:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=235d57ea-7a80-4562-bed5-9e084c4d05b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:59:90:7e:3e:85:7a:4d:02:9e:ae:22:b7:4d:
27:59:3d:2b:90:09:9e:4a:09:d5:6d:89:0d:91:d8:
20:4d:91:df:27:81:06:5d:fb:3c:c7:16:40:2e:ba:
6c:92:58:50:67:a8:8d:7f:90:c7:b9:b9:e6:cb:9f:
ad:56:4f:a7:09:5e:83:23:ac:dd:8b:b9:80:42:f2:
11:db:a1:68:cd:fe:1a:9d:1a:b4:48:8d:cc:19:ff:
7e:bc:28:bf:0f:a8:73:e9:2f:dc:25:8a:ff:43:d3:
34:f3:67:fb:6d:04:69:32:46:e5:80:24:ec:66:78:
6d:ab:2d:08:62:e0:67:ab:b5:51:81:ff:e8:b9:cb:
f9:73:86:ab:7a:e1:6e:a2:7e:b0:19:67:77:f3:f1:
94:65:75:01:67:eb:96:a1:69:36:b4:e0:04:4e:d6:
9f:f2:b6:f0:8d:50:34:77:f3:48:19:ce:b6:69:1a:
83:59:bd:5a:0e:4c:71:81:78:98:19:81:82:31:0f:
d2:9c:47:e9:5a:c3:e6:3d:49:66:00:df:90:45:a0:
8a:57:cc:d2:93:60:55:47:b2:be:4f:20:4d:7b:8b:
20:6c:34:fb:27:18:0d:5d:fe:c9:6e:a1:d5:8f:3f:
52:76:c5:15:bd:0d:5b:0d:52:80:cc:1d:bb:7c:5b:
3d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CC:FA:43:E7:5C:47:CC:D3:9F:2F:9B:C5:96:5B:B1:01:76:0E:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e6b0a08-3c31-30e2-9fa0-4f3cceb6dddd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.64.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:70:33:45:10:b6:41:cb:19:d7:2d:f3:b2:6f:96:93:9e:e6:
b8:dc:ee:48:42:d9:67:29:ab:fb:68:ac:49:2c:fa:f5:73:1a:
3a:49:13:d9:e9:69:97:5c:f8:9e:ac:0c:11:a6:5a:ad:11:bd:
60:93:32:c8:7b:2d:62:a6:c6:68:47:26:2b:bc:25:c2:c9:06:
61:49:98:71:d9:51:f3:6e:33:14:10:79:db:34:32:be:54:68:
d9:fa:59:0f:27:14:6f:44:7f:d3:22:37:7d:b7:a7:94:7c:95:
1d:45:12:bc:ac:f2:2a:db:41:70:68:99:29:05:ca:3f:20:37:
3f:3d:69:17:b4:d2:5c:75:37:f9:28:90:4c:40:1f:51:e2:b7:
ea:6f:96:b0:11:9d:ab:53:9a:eb:0d:6f:60:dd:24:a9:6b:d6:
19:2c:20:f3:ab:fa:d7:a7:e7:97:9b:45:99:b4:1b:b9:46:58:
71:b8:65:f3:63:57:7e:cd:84:7b:6c:f6:84:ef:6c:f2:4c:30:
94:a7:07:61:76:76:df:4e:6c:2d:81:cd:fb:14:5e:79:a2:8a:
f4:99:37:51:54:4e:14:48:5d:d0:72:7c:fc:70:3d:32:97:96:
45:63:b2:5c:b6:fb:3e:85:92:7d:9a:37:05:94:35:6d:9b:59:
44:84:7f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:04:05 2025 by rpki-client