Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a88d7f06-3ff5-3495-8bb7-5e329ed81d48.roa
File: a88d7f06-3ff5-3495-8bb7-5e329ed81d48.roa (raw, json)
Hash identifier: xRW16DQuX3J88Ue7L9/nAg0tH69CMAv+CbBJ0CURUyc=
Subject key identifier: BC:83:D8:E0:F0:10:31:B3:D4:64:C5:A0:E3:29:01:1C:A6:2A:5F:A3
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584905B6AA3800925D2B793FFE80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a88d7f06-3ff5-3495-8bb7-5e329ed81d48.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 24319
IP address blocks: 23.67.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:aa:38:00:92:5d:2b:79:3f:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=63b60d3e-4233-47b4-9ad6-74b883688369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:dc:66:70:eb:92:4e:7a:73:94:35:00:d2:7d:
28:d5:b0:b4:14:04:b2:22:f8:9f:63:f6:63:d2:00:
7a:7c:f3:8a:c8:12:1c:5f:a9:60:f6:9b:b6:d2:60:
1e:1c:61:bf:36:8c:3b:47:7a:08:bb:23:8e:e3:55:
6b:41:46:ed:de:c8:05:ec:1b:85:44:f3:74:c2:5f:
84:bd:43:00:13:17:02:e4:23:c3:48:13:d2:12:e0:
05:bb:fb:63:4b:09:45:ad:8b:01:59:52:32:77:89:
10:74:22:21:7b:d1:ad:62:32:0c:c6:20:a6:61:1b:
77:ad:d4:98:e7:cb:49:86:1d:63:44:5a:55:83:e4:
e4:db:dc:c0:e9:eb:0e:e5:99:6a:d2:66:00:b9:11:
33:99:37:94:93:44:eb:0c:96:35:17:3d:a3:7e:25:
d3:a2:ee:23:51:00:bf:ae:be:9c:33:8e:82:a0:30:
c7:7e:09:ac:af:3d:e7:2c:a4:3e:b4:9e:72:d9:31:
e1:83:16:1e:08:1f:5a:0e:9a:06:34:53:5f:40:48:
1e:a6:60:4f:c7:12:d5:ab:10:8a:11:d3:5c:b7:a4:
62:83:e9:00:19:65:78:66:83:a4:b3:7c:15:cd:ec:
57:33:e8:43:d8:fe:8c:8f:af:0d:78:9a:f7:d8:0c:
a8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:83:D8:E0:F0:10:31:B3:D4:64:C5:A0:E3:29:01:1C:A6:2A:5F:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a88d7f06-3ff5-3495-8bb7-5e329ed81d48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.67.45.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:2c:71:fe:98:00:06:53:dc:43:14:c0:3f:a6:e7:40:bd:a0:
59:9b:83:ca:21:21:c5:4f:2e:b9:38:3c:8d:8f:a0:85:91:43:
0e:3f:58:d3:ed:71:d9:26:37:91:fe:34:26:78:2a:fd:98:88:
c2:70:9e:35:88:42:77:4a:53:16:bf:c8:b5:ae:c1:76:2f:2f:
97:3e:e5:af:6d:d2:07:4c:a5:96:3c:12:aa:54:ff:c0:d4:69:
89:73:bd:84:cd:a3:84:9d:28:44:bd:0f:76:9f:a6:59:be:78:
d5:e1:25:90:ed:48:b6:61:19:20:d2:35:42:e3:71:3c:5a:9d:
49:8c:3c:16:ea:65:c5:73:07:7a:99:24:96:46:ba:8a:a6:89:
1a:f2:79:b8:49:3c:0a:81:85:66:b6:eb:9d:5a:f8:58:0f:e3:
b4:57:36:26:de:62:e7:7b:b1:c0:dd:04:32:f0:a9:d2:87:c7:
d8:d7:22:36:c3:b0:f4:90:b4:23:10:c6:58:66:3d:7f:c0:82:
f8:98:35:30:a3:41:cd:d3:de:d9:be:16:8b:ec:9d:62:5a:c1:
d1:e4:1f:f5:a5:6d:73:0b:a5:44:ec:e0:1a:8f:7d:f9:da:2f:
31:f1:a7:fc:4b:c5:d0:06:a4:f6:d6:c7:59:80:33:81:4a:cc:
e4:13:28:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:07:05 2025 by rpki-client