Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aac812fe-3655-39bd-86ff-2c85a1cb9ce7.roa
File: aac812fe-3655-39bd-86ff-2c85a1cb9ce7.roa (raw, json)
Hash identifier: ulKX7wyZAvSAYxuB99Hezonsnkm409kuaHQUwubjF58=
Subject key identifier: BA:04:62:44:DD:1F:7A:3E:C4:F7:05:E2:FF:E6:C4:FB:6B:53:7B:C3
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858493C0933D7CFEEBFC7256D46F8
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aac812fe-3655-39bd-86ff-2c85a1cb9ce7.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 35994
IP address blocks: 23.39.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:33:d7:cf:ee:bf:c7:25:6d:46:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=c0592562-a3b4-47a1-9aab-15753e8d4abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:11:f9:60:d7:d8:42:4b:64:63:07:20:13:83:
43:31:b9:80:2f:30:a7:23:38:d2:6e:fb:24:15:38:
70:9a:b2:8b:98:a8:cd:b3:d2:1a:96:5c:db:0b:67:
30:df:62:94:31:da:88:59:8c:78:9f:4c:1e:a2:d0:
c8:a5:7d:3c:ab:da:a3:92:b8:cf:65:a4:bf:83:9a:
fd:67:b3:04:51:7a:eb:78:ea:ff:50:5a:18:a3:ed:
35:04:5b:05:16:29:ab:66:ed:41:3f:9c:c1:20:55:
03:a6:de:10:f2:ec:a0:78:da:a1:25:68:6e:0d:21:
5f:50:5b:fd:33:f8:28:96:41:35:12:8a:84:88:a0:
a7:5f:1f:2d:b3:71:a8:86:5a:8f:fc:4a:9c:71:61:
70:e0:d5:56:bd:99:13:4f:ad:f0:76:98:66:6d:9b:
84:d4:0e:11:b2:4e:54:84:61:6d:74:79:dd:19:e7:
69:89:af:50:24:0c:56:29:f5:0a:35:5d:e2:bc:c5:
b3:6f:5b:1f:32:dc:0f:16:75:bb:d8:92:52:52:1e:
f9:6d:2c:7b:4d:95:c2:e5:14:94:3a:66:78:c3:93:
ec:41:ec:f8:a1:3f:7b:d9:8c:54:96:94:6b:96:b6:
d7:c3:86:4f:f3:eb:e3:e5:d1:09:4a:19:ac:f7:7f:
3e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:04:62:44:DD:1F:7A:3E:C4:F7:05:E2:FF:E6:C4:FB:6B:53:7B:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aac812fe-3655-39bd-86ff-2c85a1cb9ce7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.39.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:81:33:da:9f:6e:92:1b:29:8a:fa:ac:55:84:21:d9:6b:1a:
8b:3d:19:b4:19:2b:d5:eb:2f:23:0b:4b:ba:ca:99:f0:aa:2a:
aa:70:9c:2d:c7:d4:3d:00:bf:db:83:83:6d:52:4b:d8:0d:53:
b3:69:00:77:b5:18:60:db:39:d8:2d:da:ec:38:fa:ff:61:db:
94:83:e5:eb:51:86:59:cc:c3:95:b6:ee:ce:43:ef:3f:77:77:
27:1d:09:50:d1:32:45:8b:d4:aa:58:92:f1:46:6a:7b:f3:5f:
12:34:97:89:ed:c8:4a:f5:e5:21:85:2f:df:e2:66:5a:7c:f4:
af:2e:d4:d8:73:5a:39:36:26:c7:9f:70:19:a2:80:dd:dc:f4:
91:d3:7d:3f:75:26:a5:31:72:3f:f3:f6:86:1f:a9:a8:b3:1b:
17:50:ff:db:b4:2f:cc:71:b3:32:89:29:6f:3d:f3:04:d2:f1:
93:fe:d6:7a:ee:b3:7f:ed:fe:99:57:42:53:18:c0:ff:d1:37:
03:83:e8:1a:f9:5e:df:6c:47:ff:d7:f8:2f:ad:68:a5:00:4f:
a0:5c:b6:f5:c6:8f:12:61:ff:42:9d:26:8b:00:2f:08:a3:5f:
15:cb:39:b0:cf:ba:ed:0b:9e:5e:5e:c9:9d:d1:1f:b4:04:9f:
18:e1:6e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:50 2025 by rpki-client