Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/931a6f48-93e6-3bfd-8122-feaf74645c31.roa
File: 931a6f48-93e6-3bfd-8122-feaf74645c31.roa (raw, json)
Hash identifier: B4+Ik9aRufb2FYQ1BJzlxV7pm3zRSiLMWARl3H5nEcc=
Subject key identifier: 03:E0:06:36:5A:76:3C:B0:A9:01:15:C5:3E:FC:14:73:DD:D6:6F:58
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584913AC446970C860017E7A7AE0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/931a6f48-93e6-3bfd-8122-feaf74645c31.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.33.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:44:69:70:c8:60:01:7e:7a:7a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=ffe8016c-4837-43f2-b2ec-e04f216473ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e9:3c:f0:83:88:bd:ed:e4:b0:de:09:d1:f2:
a7:aa:bb:bc:88:d1:ec:09:b4:bd:0d:99:93:2a:a5:
98:62:09:7b:eb:42:d3:f0:89:d0:c5:22:60:b0:0c:
44:df:c5:ae:90:e8:26:f1:28:52:5f:eb:c7:4e:c6:
37:cb:75:63:1a:9e:ef:ac:c4:2d:87:d0:31:48:41:
7a:12:98:f5:19:e0:8b:e8:38:91:17:f0:48:32:ac:
05:06:0c:2e:87:3b:56:71:dc:d5:46:38:36:e1:47:
de:d6:33:4c:38:1c:9f:04:09:56:a7:12:a0:90:82:
8d:9a:25:0a:b8:05:ca:16:39:80:21:99:29:02:ed:
ee:ca:d5:b6:f4:5b:49:63:9c:5a:35:74:77:d2:5d:
24:75:75:4c:d5:ad:64:a0:6b:ca:78:e6:52:c3:a0:
9c:3d:ea:07:39:e8:69:af:72:0b:19:a5:81:00:2a:
05:41:fe:ad:bc:d9:94:83:13:31:34:cb:73:aa:96:
ad:72:f1:eb:24:43:97:25:db:bc:34:59:bd:9f:79:
39:81:96:fc:d5:2c:8c:44:c4:0d:29:2e:45:81:b0:
2f:4e:84:c9:14:ce:a7:c2:b2:50:09:64:43:fd:a5:
5e:61:64:34:78:07:1f:f4:a1:83:98:0f:a4:21:aa:
a0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E0:06:36:5A:76:3C:B0:A9:01:15:C5:3E:FC:14:73:DD:D6:6F:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/931a6f48-93e6-3bfd-8122-feaf74645c31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.33.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:4f:66:a5:14:b7:ae:ed:6e:e1:41:0f:20:14:f8:a3:52:71:
f0:46:69:2a:b5:3e:44:e5:f6:3d:2c:4c:43:6f:8a:67:82:62:
33:a1:d5:03:29:97:7f:31:ed:f3:bd:bd:b1:81:7e:d9:c8:fd:
4a:f9:85:6b:6d:2c:ae:42:b9:60:ed:ce:74:4d:65:4d:c9:58:
47:b3:71:03:ac:a7:f2:7b:40:6f:b0:be:d6:d9:9d:41:43:1c:
a6:d3:97:c7:6c:28:f3:f0:f8:08:b0:93:88:80:ec:2e:1b:7e:
fe:a9:f6:bd:e0:64:58:fa:6f:7b:01:98:ff:8c:35:24:3a:3a:
b6:64:10:10:ce:0c:4b:8e:d3:66:af:3e:25:9b:cf:f5:1e:ca:
24:0c:ad:19:9d:6e:d3:0b:78:62:eb:a2:aa:b4:d2:38:8d:29:
91:20:43:d2:e5:fe:bb:d4:c4:7b:d3:5b:31:24:29:b0:de:f8:
ba:c5:16:a0:a7:2f:39:d6:b3:b5:7a:4f:b6:2e:54:3c:a3:dc:
3d:a5:9f:f0:60:81:f4:f6:3b:d7:d7:b9:31:a6:49:3f:62:e1:
0c:7e:e3:aa:ad:57:65:4f:1d:d4:b8:7d:79:6f:b5:fe:4b:88:
42:fb:b3:4f:f0:c5:57:64:18:9d:cb:ee:95:42:4b:5c:61:d8:
8f:96:0b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:53 2025 by rpki-client