Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9695ab88-6ac0-328d-a35e-1f1becc5b582.roa
File: 9695ab88-6ac0-328d-a35e-1f1becc5b582.roa (raw, json)
Hash identifier: WQLq1qs1PRadp770QyKkDOS2Cz3nJCv5myutYEEeHwM=
Subject key identifier: 9B:72:9E:FF:56:99:48:E9:E7:33:6B:29:0D:A4:86:8B:6A:3E:3B:AE
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858489340BAD040F9830FF4C9BE00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9695ab88-6ac0-328d-a35e-1f1becc5b582.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 20940
IP address blocks: 23.204.108.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:ba:d0:40:f9:83:0f:f4:c9:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=83df748b-9430-413d-8a03-aeea119c958d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:eb:6e:07:78:14:c5:cb:64:e4:24:da:63:3d:
62:9e:0b:73:b7:ef:c4:6f:18:f5:ba:04:a6:a2:11:
00:1d:6f:23:11:0a:90:98:7d:46:02:31:ab:88:53:
6d:4b:cc:b3:44:14:3c:8c:69:1a:26:97:ef:25:39:
38:c9:5b:e3:c0:44:99:7f:b9:91:6c:47:86:cd:d6:
02:03:81:c8:87:b7:b4:eb:f2:7b:7a:6b:d6:e7:36:
c2:0d:35:ca:6f:af:43:26:1c:15:e1:aa:eb:4a:3b:
68:d7:18:b7:27:3c:74:5d:d8:3f:30:5a:31:66:4a:
bc:d5:92:43:5a:2d:91:2a:18:f4:4f:3d:c7:dc:9e:
c7:8b:36:aa:dd:74:b9:e9:3d:c9:d1:62:df:40:56:
1b:60:9f:d5:23:51:f1:3b:bb:92:44:26:a8:8b:be:
f0:8d:d3:a5:c1:09:e7:9a:1f:7d:8a:50:66:44:ec:
3f:c4:af:8b:33:9e:51:27:97:08:34:c7:5f:f6:a1:
3e:1b:e8:3b:49:55:28:05:c2:79:ea:f6:da:c1:51:
c4:6f:fb:b6:1d:37:55:c9:e5:17:b3:8e:02:43:83:
31:d6:d6:66:22:07:d1:d0:5a:71:1f:34:23:76:f6:
e5:20:5b:b9:79:d9:bf:62:4c:8d:ba:53:55:e4:0e:
7b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:72:9E:FF:56:99:48:E9:E7:33:6B:29:0D:A4:86:8B:6A:3E:3B:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9695ab88-6ac0-328d-a35e-1f1becc5b582.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.204.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:52:15:04:eb:98:0d:d6:4b:49:6a:74:04:e7:1a:52:21:5e:
38:2e:b0:a4:87:c0:fb:32:c8:c8:fc:62:e4:cb:00:25:4f:32:
79:6e:01:cf:b2:19:ac:33:56:d0:fb:a7:d5:c9:56:10:cc:18:
bd:3e:b5:f1:72:50:e4:c5:0c:7f:0b:48:d7:b0:7a:c3:e5:20:
20:a8:78:00:96:68:c0:9f:fe:43:26:f7:eb:78:40:fc:4e:81:
1c:af:c2:21:29:06:6b:16:05:5b:f3:46:a5:6b:b2:22:3b:8a:
8b:47:cb:1c:b4:ab:cf:c6:2b:3f:33:ac:5c:af:ec:08:c7:da:
5a:02:10:71:0a:cd:b6:5b:04:da:d9:43:3f:f2:6c:35:6b:2e:
5e:0a:99:cc:06:fe:0f:8a:44:81:35:29:a6:58:f5:89:cb:ee:
a9:2a:0c:30:96:d8:24:27:66:12:e1:ab:ac:c9:e3:d7:c6:9c:
e7:6c:dc:c3:c6:0d:1d:9d:cb:f4:f6:8e:32:ca:5c:01:8b:29:
0c:9f:cb:a3:d5:29:0e:3b:8a:e2:42:a5:21:f5:53:75:77:1b:
66:e8:00:47:7f:81:00:da:ab:d2:2e:10:b9:33:21:1f:e8:87:
38:a8:ff:6d:99:2c:b4:26:53:86:77:60:1f:a7:74:12:d7:17:
4a:e7:2b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:42 2025 by rpki-client