Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e713193-b471-3600-9ce5-0f5e344a6424.roa
File: 9e713193-b471-3600-9ce5-0f5e344a6424.roa (raw, json)
Hash identifier: HaFELrQrzjT+yKPUEokIp6Blwsn84L6GV0GofCRzWoQ=
Subject key identifier: 5A:F3:34:88:EA:81:1B:F2:47:D0:D9:47:4F:32:BA:2B:6C:01:87:F2
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848BA5643C4572DF8D7581B41A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e713193-b471-3600-9ce5-0f5e344a6424.roa
Signing time: Fri 31 Jan 2025 14:00:51 +0000
ROA not before: Fri 31 Jan 2025 14:00:51 +0000
ROA not after: Thu 01 May 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.208.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ba:56:43:c4:57:2d:f8:d7:58:1b:41:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : May 1 13:00:51 2025 GMT
Subject: CN=e519c9ab-4819-4cc4-ac26-1fa46b43bedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:eb:7f:fd:11:fb:a4:66:3d:f5:3a:d9:59:a4:
9a:a4:00:07:b5:55:ae:f2:4d:82:2f:9d:51:ce:75:
2c:db:84:c4:99:5e:c6:7f:d0:5c:24:24:49:9e:86:
e9:1d:d1:60:00:cf:d2:5a:e7:a8:81:a4:74:dd:a1:
2c:19:3b:e7:4b:1a:8c:0f:bd:7f:5e:0f:05:e5:31:
ac:c1:d2:91:0a:31:59:c6:c4:0d:3f:2d:3c:0b:a8:
35:e0:b4:8f:cb:79:05:9b:81:08:0e:4e:56:e5:ab:
35:f9:88:32:2f:a2:3b:aa:1a:5a:4f:af:51:4b:31:
b3:3c:dc:b8:74:04:a9:32:84:f2:71:b5:88:a7:f0:
87:7a:06:93:ff:d4:90:d5:4b:16:5e:7b:22:0f:fd:
c9:6a:bc:e6:d1:dd:34:65:56:50:11:54:f8:8f:f4:
79:45:38:60:48:4d:53:fd:74:7f:2c:cc:8c:5d:b7:
10:d8:fb:2b:41:53:70:6f:89:e2:07:84:7d:73:1f:
07:f9:45:64:09:90:b4:d2:4e:e5:a4:41:8a:0c:a5:
eb:6b:bd:84:cc:72:f7:f2:35:8b:39:94:43:f3:fc:
df:1f:f9:1d:dd:7d:d7:7a:50:e8:70:5c:13:0c:82:
3a:3c:95:e4:cc:2a:8b:93:e9:78:a4:af:4b:74:77:
59:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F3:34:88:EA:81:1B:F2:47:D0:D9:47:4F:32:BA:2B:6C:01:87:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e713193-b471-3600-9ce5-0f5e344a6424.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.208.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:13:4b:cc:59:c6:59:06:96:cc:e9:a4:5f:15:bd:8b:0c:f3:
c5:3e:95:b5:4f:6b:2d:c0:67:90:9c:b1:4f:96:b8:7f:e7:e4:
7f:70:1a:d6:09:87:b6:d9:fd:cb:97:dc:bb:51:b3:13:85:df:
94:9a:fa:be:11:01:d0:0c:36:81:4f:95:9f:8e:7a:52:bc:09:
a6:54:2e:d4:f4:8b:8a:a6:08:f6:b2:3e:78:1f:97:d6:aa:c0:
54:28:10:2b:b4:f3:09:88:c6:6d:ad:9d:c0:e8:6f:44:82:9b:
42:b4:f4:d6:0c:89:d5:2e:13:80:83:d3:cc:62:35:16:82:db:
5b:d6:66:34:48:2b:ca:c8:5d:96:e5:42:61:0d:32:6e:31:ed:
3f:7d:ef:8b:13:81:fe:13:77:6f:ef:2d:52:6e:98:e0:af:61:
93:d0:e8:19:45:3e:22:d9:85:6c:4e:7c:61:0c:fb:f9:d9:8a:
66:32:ee:d7:59:11:c4:99:d5:55:72:00:60:c3:da:50:9e:06:
c1:bc:12:6e:d7:66:2f:d4:a4:29:f9:48:87:03:a6:98:09:36:
e4:dd:64:9b:84:38:6f:b2:bd:07:54:86:3f:01:1d:1c:e8:2c:
c1:05:0b:4a:b9:cb:07:18:9c:5b:d6:86:ca:01:f0:e1:04:9c:
de:e2:bb:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:35 2025 by rpki-client