Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1ef919d-03e9-306b-9427-3ae21cfbf33e.roa
File: a1ef919d-03e9-306b-9427-3ae21cfbf33e.roa (raw, json)
Hash identifier: g0IwdFXwXWG1R9nwBZZknxTU1gJ9ox9Yr+IJGczb8KY=
Subject key identifier: 96:D2:B4:91:76:AD:F4:4C:C9:04:89:81:33:33:D5:D0:C2:2B:92:63
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487CEB4C1AB726682620A168C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1ef919d-03e9-306b-9427-3ae21cfbf33e.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.45.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:4c:1a:b7:26:68:26:20:a1:68:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=3ca5fe50-3337-43c2-ab01-0dce6078800d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d8:ab:15:59:65:90:95:c9:22:91:92:a1:bf:
f0:1f:93:42:38:3c:4d:85:22:92:e8:7a:6b:5f:db:
f2:99:a5:86:d4:b0:04:bb:81:e5:d8:5f:09:a3:fb:
02:20:e5:81:fa:85:dc:ae:2f:ea:ae:14:ca:2a:f4:
57:b1:24:9e:79:a5:32:35:38:33:4d:c7:42:76:8d:
90:53:f1:a5:e1:18:6e:50:4f:3e:e7:39:81:02:cd:
ae:03:85:3b:63:98:d4:5d:46:5e:d8:8e:76:38:20:
ca:ab:e8:e3:7f:11:7e:66:86:9b:4a:62:47:d6:60:
e4:17:a6:4c:01:af:38:e2:e2:97:31:fa:81:0b:10:
a5:09:da:5a:1d:3f:21:b0:ae:cf:4f:f2:9f:41:2f:
dd:dd:7f:41:67:0d:95:08:9b:ff:36:de:4b:6a:b2:
4a:7f:fc:5b:7b:fa:d5:d9:8b:4e:86:31:49:79:2a:
f3:65:77:17:82:0b:0f:e6:39:43:8e:1d:fe:b1:b2:
0c:99:87:7b:29:fc:0b:a0:12:56:b6:a6:9f:ea:01:
dd:0d:d0:21:48:df:ff:15:b9:ba:1d:5e:4b:5c:b2:
31:f5:97:ad:39:a2:20:e0:94:81:1d:72:61:29:b8:
6a:27:1f:8f:b7:b1:c8:82:ec:ee:28:13:b5:1b:b3:
9c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D2:B4:91:76:AD:F4:4C:C9:04:89:81:33:33:D5:D0:C2:2B:92:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1ef919d-03e9-306b-9427-3ae21cfbf33e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.45.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:73:21:78:3d:41:7a:e0:0b:fc:da:bb:68:eb:57:31:14:9c:
b3:08:e3:ca:c2:6c:35:a3:db:97:ca:9e:da:e6:3a:83:aa:b4:
e0:76:27:40:b2:45:73:9d:9e:59:be:88:2b:0b:12:07:a0:46:
7e:f0:a8:8c:b3:4b:44:33:ab:0c:b6:44:f2:95:c0:19:aa:15:
2c:fc:18:38:f7:30:55:ec:dd:3a:22:5a:df:4e:9d:be:f1:2c:
a9:0c:d6:ed:11:1f:b3:2b:cc:0e:14:40:7a:83:61:37:dc:fd:
94:0f:e4:da:72:f9:d9:a2:30:39:32:2b:24:79:53:da:07:b0:
10:b2:ab:bb:78:b1:56:e2:e7:67:ab:01:5c:bc:14:30:ab:ee:
42:ca:dc:bc:fa:69:7a:3d:91:e1:05:0a:82:71:1e:47:83:83:
d0:8a:27:aa:f4:21:53:a9:65:96:2c:c2:2c:96:96:5e:45:88:
99:57:86:f4:ac:bc:5d:f3:3a:c3:2d:07:c8:00:46:2d:43:6e:
c8:0f:97:26:9a:36:7e:f0:54:ea:0f:9a:a7:18:13:62:27:6b:
41:24:a6:8f:19:d2:ad:4b:5c:22:b1:0f:e8:e7:8c:58:84:ad:
8c:73:c4:8a:22:1f:7f:ce:98:35:8f:9f:5e:dd:74:d7:68:ad:
21:af:b2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:55:55 2025 by rpki-client