Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d55c9b2-cec3-384f-bced-a1719637b83f.roa
File: 9d55c9b2-cec3-384f-bced-a1719637b83f.roa (raw, json)
Hash identifier: /M9cO5gGPUsEX2iuKHPU6stAsIu/BFWMlMhiln5bdt8=
Subject key identifier: 64:E1:EE:96:D2:E2:65:82:7F:28:A0:F0:EE:91:E2:3A:9D:64:87:8A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849244E904B19DA99B295F45680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d55c9b2-cec3-384f-bced-a1719637b83f.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.14.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:90:4b:19:da:99:b2:95:f4:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=9378534a-8a7a-445c-8bd0-fe171b0cdb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:71:d6:5f:3a:e5:42:50:d8:f1:fc:ec:a9:02:
8a:3c:f5:25:34:34:98:e3:a1:a1:b7:98:4b:78:46:
8f:80:81:74:9f:56:ae:ac:e3:ca:83:8b:df:ce:66:
6b:f0:57:78:5f:72:d5:4b:53:48:37:ad:87:c2:0c:
8f:af:6b:cf:11:c7:06:40:1d:5e:2e:84:26:39:81:
2d:c0:0e:64:a6:85:63:91:2f:16:7e:17:22:98:94:
a1:7d:89:a4:aa:2b:54:5e:86:16:0c:bd:cf:5c:1e:
39:11:b8:4a:0b:ca:dc:ef:13:94:01:da:6e:0e:56:
ea:6b:53:e0:de:e0:e8:4f:93:72:a0:a9:fc:1c:49:
0b:1a:5f:0b:11:ac:ad:80:d6:5b:f5:ef:bd:a4:4e:
72:6b:b7:83:e0:ef:d8:39:ca:66:25:cc:0d:14:8c:
04:f8:24:e9:d8:72:7e:7d:7d:88:5a:c8:61:f9:98:
72:95:82:57:e2:1a:c5:3f:44:52:11:02:f6:67:f4:
a3:a0:fb:38:99:27:1f:f2:bd:e9:ef:6b:1a:f5:0e:
36:ed:ad:54:99:74:ff:ce:43:4b:f5:eb:df:e1:1c:
f9:ad:d7:df:a2:b1:10:54:3a:60:4b:0f:2a:f0:8e:
ae:2d:97:5c:dc:98:cb:d6:c2:93:dd:c8:41:2d:ad:
a7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E1:EE:96:D2:E2:65:82:7F:28:A0:F0:EE:91:E2:3A:9D:64:87:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d55c9b2-cec3-384f-bced-a1719637b83f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.14.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:5b:f3:fe:02:61:23:e2:e7:48:41:1b:64:6d:5e:9b:d0:b2:
46:b9:3f:1c:53:81:6c:60:2a:51:86:8f:17:50:4c:e2:04:ea:
d1:17:c4:dd:57:ab:70:d0:3b:1f:9d:39:16:3b:4c:4d:0f:2a:
cc:9e:13:da:a0:37:2c:73:d4:5b:e6:fe:99:e4:7c:f2:46:eb:
e4:5d:af:c0:e0:17:d9:ea:61:bb:29:1f:57:49:28:42:4c:6b:
3e:a9:63:03:0d:2d:8c:e2:0a:84:cb:1b:d0:14:ec:d1:d7:0e:
88:cc:98:4e:fe:0c:be:2b:2e:05:55:ca:39:91:97:78:9a:b0:
3c:8b:b6:6e:81:8b:bd:87:58:dd:eb:82:4d:00:1a:cc:20:2d:
4e:cc:79:c1:ad:68:2a:9b:c1:76:88:10:aa:93:d8:24:d5:db:
ef:47:a9:87:e6:ee:c2:40:fa:57:79:b4:58:1b:ba:83:7b:ef:
d4:ff:c6:0a:98:d0:d8:cb:95:83:3e:d5:c3:fb:1e:2b:c5:d7:
55:60:6b:1c:60:cb:9e:0b:1b:ed:a3:66:2a:6c:b2:fc:85:6c:
ac:1f:fc:bd:2a:1b:88:cc:e2:6d:51:2e:c7:3a:8d:19:d4:cd:
42:ff:55:b9:33:f8:72:df:05:23:0b:a7:60:33:bb:09:cd:1f:
f1:df:c4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:01:17 2025 by rpki-client