Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97a16ec6-2253-3685-9296-4d762ee75d63.roa
File: 97a16ec6-2253-3685-9296-4d762ee75d63.roa (raw, json)
Hash identifier: VPjD4AMl1Av0PI7hW8mU/3y/iKu998gogQOR3qYayTo=
Subject key identifier: CA:43:4D:29:B7:98:E4:03:F1:A0:C7:1F:7B:DE:78:E2:00:A6:78:93
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487CEB765C5A6AA9F53C948280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97a16ec6-2253-3685-9296-4d762ee75d63.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 35994
IP address blocks: 23.44.206.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:76:5c:5a:6a:a9:f5:3c:94:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=89bd61af-ca0a-4bab-a372-a73d55f3b7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:27:71:75:3f:6b:29:f8:62:fa:6e:ea:be:61:
05:9a:40:7b:3f:7c:27:66:f8:ec:14:33:3e:d3:dd:
07:4a:46:62:b1:45:fb:bb:05:81:63:71:60:f4:51:
60:a2:c4:e5:49:16:e7:a8:ba:f3:82:dc:e0:58:d0:
e3:5d:d7:8f:4c:52:e0:e1:d5:5e:a4:0c:3e:90:c6:
7c:b5:ba:8c:f9:81:1d:1b:f6:dc:2a:04:97:90:ca:
61:90:fb:c3:7d:37:c5:00:81:0b:e1:d2:62:9d:c9:
f2:98:f5:68:4b:d2:37:25:24:c7:0c:05:45:20:62:
62:66:5f:c4:36:15:98:63:f7:af:86:f0:cc:51:da:
d3:74:45:42:44:b5:fb:7d:fa:bf:d7:6b:1a:42:0d:
92:6b:7e:ae:87:37:c8:b2:d1:a0:47:75:9a:11:e8:
ff:52:38:67:61:20:50:a9:94:45:ef:ff:b7:09:ee:
a2:a2:f7:0b:26:cc:a5:a3:22:00:d4:88:01:f6:39:
74:03:24:b4:7b:9e:3c:4b:2c:65:0f:38:b6:ea:8c:
36:55:c1:ec:4e:8b:da:79:0f:6a:4c:34:aa:70:d3:
69:3c:b3:b1:70:e6:4c:2a:3a:80:a9:40:ee:a2:cb:
59:ce:e8:29:12:e1:5c:93:94:d2:e8:9e:02:8a:e5:
e1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:43:4D:29:B7:98:E4:03:F1:A0:C7:1F:7B:DE:78:E2:00:A6:78:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97a16ec6-2253-3685-9296-4d762ee75d63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.44.206.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:34:2b:ec:c6:1c:49:b6:c1:ad:0c:d1:ce:04:b6:62:d1:e2:
3d:0e:75:cc:f7:24:ae:38:97:60:49:ad:98:49:1b:54:75:05:
96:2e:bc:db:68:22:9e:11:9d:42:af:aa:da:d6:f6:42:56:50:
f6:fa:f1:43:50:81:f1:13:8a:7d:2d:bd:f0:5e:9f:3d:e9:d9:
58:74:a6:65:5e:49:8e:00:d0:28:76:ed:6e:d3:ce:82:43:18:
c8:1a:5a:73:d6:87:db:58:5a:5d:10:8a:95:c2:7a:8d:8a:2e:
1e:16:95:dc:6d:e6:e6:2b:93:66:09:01:27:62:52:f4:82:26:
d9:85:ab:cf:84:f7:30:74:d5:db:58:d5:d0:ad:b3:4f:81:c9:
fc:d8:5b:f1:07:34:f2:31:ad:0a:a0:2c:69:f4:a6:53:7d:7e:
72:30:0f:4c:47:2b:ec:48:cd:be:63:25:ba:97:c3:dd:2f:05:
60:fd:2d:61:9a:29:4d:a7:57:96:5d:49:b9:6b:cd:c8:ee:97:
52:95:4c:35:b1:07:e7:24:a7:83:e2:6d:1c:d0:3b:32:e4:d9:
90:ef:7d:e9:bc:68:a6:03:b8:fb:a8:7a:1a:f3:5e:7b:d7:89:
1a:ae:ee:cd:b0:49:c0:2f:8c:20:f5:d5:31:30:6e:c1:35:d9:
6b:be:c6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:31:17 2025 by rpki-client