Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a35f3386-5775-34c6-82b9-c019c927fffb.roa
File: a35f3386-5775-34c6-82b9-c019c927fffb.roa (raw, json)
Hash identifier: Ed5636k8U5k/vpF0fkjpjeVMvFHoipKveJL8kZa9sZ4=
Subject key identifier: 54:D0:4C:BF:25:34:1B:7D:05:18:7B:F6:48:00:85:74:40:D6:76:EE
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858494E2EBF1505D694BF529F2080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a35f3386-5775-34c6-82b9-c019c927fffb.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.35.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:bf:15:05:d6:94:bf:52:9f:20:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=bbdd691b-6c96-4c1f-98d7-6c26cdaf39cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d1:c3:c4:46:ce:9a:10:c9:9f:01:30:ed:ed:
36:ea:3b:c4:7f:e8:64:a9:06:f1:0c:40:6b:c8:5c:
91:08:22:91:0f:9a:99:a8:c2:ee:30:0b:70:06:df:
bd:6e:52:08:13:3b:d8:2b:c3:47:f4:60:85:c3:91:
eb:7e:33:cf:5b:15:22:f2:83:a5:bb:64:bb:82:9b:
73:ed:2f:e4:65:36:4c:d4:ec:94:c5:2d:a4:6e:65:
d3:80:1d:a3:44:d9:99:e5:76:72:4e:a7:b5:92:e0:
69:25:79:8e:6f:3e:fd:4e:5f:81:ae:61:bc:97:78:
a1:f8:e7:f0:f7:be:fa:b4:b1:61:2b:0a:22:d5:ba:
3c:74:dd:8a:b5:cd:37:a2:b1:25:08:d1:b3:32:af:
82:35:f3:c3:69:26:75:3b:aa:3f:0a:7f:a7:8b:30:
7d:6a:75:4b:c0:38:a9:a4:31:76:0f:b9:7e:86:62:
aa:c1:67:18:eb:72:d1:53:4f:07:31:ba:ef:8f:db:
4b:f0:37:c6:78:4d:f4:32:55:b9:d9:55:9a:a4:d8:
64:58:26:37:a4:94:a0:83:f7:99:e5:bf:1a:7c:5c:
02:9e:ce:2b:45:da:0e:d3:2d:0a:d4:07:4b:d4:10:
cc:03:59:be:7a:92:9d:ab:3c:b3:9c:59:d0:a0:db:
7c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D0:4C:BF:25:34:1B:7D:05:18:7B:F6:48:00:85:74:40:D6:76:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a35f3386-5775-34c6-82b9-c019c927fffb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.35.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:6e:44:58:69:c1:04:fe:4a:25:55:b6:d5:fb:0c:9f:81:d6:
40:bd:a3:74:1c:cc:cc:4d:b4:82:ee:cc:8c:e9:ab:41:9d:bd:
a3:07:2d:fd:6a:11:a5:77:f4:9c:90:8f:c0:57:5a:08:dc:3d:
7b:e3:25:84:67:03:4a:b3:33:41:80:c3:7b:2e:af:81:92:32:
36:c0:45:71:00:97:1d:76:4a:3a:2f:5a:b6:cb:df:5c:0f:a0:
11:cd:77:c8:4b:1c:de:d1:2e:83:90:71:30:de:42:bb:ad:ef:
9a:2c:40:19:f4:cb:7e:59:ce:2f:90:74:a7:b6:86:78:77:69:
fb:93:ba:ce:f1:a0:bf:10:a8:72:4b:13:5e:e8:94:c3:e8:42:
9d:cc:28:32:9c:8c:6f:db:86:72:eb:9f:1b:58:34:ad:0d:a7:
19:74:5e:19:41:4c:1e:cd:63:3e:7a:65:23:ac:16:1b:40:6a:
4f:b3:d8:00:af:44:56:83:17:27:50:a8:33:5b:20:09:73:53:
5a:94:c3:89:3c:bf:86:55:51:5c:37:54:35:ba:0a:b1:ba:b0:
c7:4b:3e:9f:3f:ed:c9:b5:1b:5e:10:d3:0f:f0:21:10:bb:fd:
83:36:99:30:25:dc:3a:da:8d:03:88:ba:5e:97:27:2a:0e:ab:
58:d8:4b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:24:46 2025 by rpki-client