Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9155c0a5-59b2-3083-b6f4-a1b91d027937.roa
File: 9155c0a5-59b2-3083-b6f4-a1b91d027937.roa (raw, json)
Hash identifier: 3vCBRU85vhKXSu8Xkk8cl00navlwRPTOYu24lxTNdmE=
Subject key identifier: 9D:80:5B:96:00:DB:00:2B:5A:03:EC:60:D0:C9:24:C4:76:27:86:3F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858494E2EB92AF13E8769DBD1FE80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9155c0a5-59b2-3083-b6f4-a1b91d027937.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.34.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:b9:2a:f1:3e:87:69:db:d1:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=360cfc02-3c19-481c-bedc-329f1f8d7749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:38:2f:8a:5d:d8:f1:1e:8d:a4:b1:11:25:d0:
29:3b:5f:ed:82:fc:50:50:96:7c:cf:a3:0a:b3:77:
d9:34:94:11:08:3d:4b:6e:99:9b:41:97:3c:c4:c5:
eb:0f:f8:f0:2b:62:41:95:84:c0:67:bd:79:13:b6:
46:f8:03:02:09:27:f9:84:5d:2b:ff:74:d0:79:c1:
15:52:0b:a0:ad:ac:86:5a:96:b9:a1:32:fb:61:5a:
da:f4:8f:d0:7d:af:cb:ea:95:aa:29:55:d8:75:90:
a2:67:0b:70:21:d1:fc:2d:4c:34:3b:cb:70:fe:f9:
b3:4c:fb:45:cc:c3:00:a2:62:85:0c:21:cc:ac:7c:
47:c9:c0:6b:72:20:df:d0:e8:1a:0c:d3:35:3f:2c:
21:38:f7:8d:73:73:92:12:7f:f4:48:30:a1:0b:10:
a5:87:2a:24:35:89:b0:fc:bd:66:33:a2:63:3e:5b:
d3:fd:41:65:01:9b:70:7a:bf:a4:97:85:48:14:d2:
14:6d:fc:ec:c3:c7:15:2c:99:2f:56:41:c0:c8:31:
6c:37:9d:12:17:0e:d5:7a:11:36:69:f8:a5:b3:7d:
fa:41:84:a9:56:fd:04:4f:af:30:f1:eb:e0:97:c8:
0e:e2:dd:67:e1:2a:29:82:44:e2:2d:f1:5e:e9:9c:
a3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:80:5B:96:00:DB:00:2B:5A:03:EC:60:D0:C9:24:C4:76:27:86:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9155c0a5-59b2-3083-b6f4-a1b91d027937.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.34.132.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:8e:a2:85:cb:b5:9a:f1:3d:6a:b4:0f:98:e2:d6:0c:03:64:
dc:e3:3b:f5:3a:e5:b4:9d:f7:8e:fd:0a:e1:a1:c5:da:65:f1:
46:dd:0f:dc:dd:a2:02:a0:3a:20:5b:2d:33:6b:03:6d:21:61:
5d:c6:28:5d:05:c4:37:0f:6d:14:b8:9e:e1:4a:9d:79:57:fe:
b9:3f:a9:86:c3:33:df:6f:3b:c8:11:0a:7c:bb:a9:a2:50:da:
9e:c0:1a:2d:ba:7a:83:f1:5d:1c:a3:7a:a5:a5:64:b3:8f:7f:
f6:5f:22:88:27:b8:b7:97:1b:72:b8:60:09:6f:a4:fc:55:9b:
39:74:eb:f4:22:57:a9:48:a8:cc:69:28:85:05:fe:d1:17:f2:
03:35:01:b5:20:99:4e:0b:41:f4:19:53:8e:c8:4e:e3:c1:9f:
a8:88:cc:05:26:35:26:15:38:e1:d8:54:ff:7c:ee:de:80:ce:
68:63:77:02:3f:0f:3d:7d:b6:72:cc:d7:0a:ba:6f:82:af:a7:
6d:2d:a6:70:0c:88:be:ea:00:19:f6:51:7b:5a:b5:ff:8c:14:
c9:18:cb:98:74:2f:c1:d5:bb:7b:4a:a1:80:7e:c3:49:3d:b7:
e5:af:ef:23:93:fd:d8:e4:03:d8:3c:e7:41:f1:35:8c:7f:80:
01:b3:9f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:27:25 2025 by rpki-client