Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b13ebfa4-e73c-33f8-b136-8cc1fae9b728.roa
File: b13ebfa4-e73c-33f8-b136-8cc1fae9b728.roa (raw, json)
Hash identifier: 9onXzyvLlmuQDpbPPM7cJdKSETVqoArX0wypY6nU/AY=
Subject key identifier: 28:CA:E9:37:9D:26:EB:7D:A8:13:40:FD:DE:83:0A:42:01:7B:F9:71
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848BBBB8B79A3FA1CD473C80640
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b13ebfa4-e73c-33f8-b136-8cc1fae9b728.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.210.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:8b:79:a3:fa:1c:d4:73:c8:06:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=0a287dc3-f9e7-44d5-b2a6-11f38db72160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:e2:b7:59:61:f5:ec:01:f6:36:67:43:91:
d2:ed:66:e8:06:33:41:91:c7:28:08:0a:27:76:22:
c2:5a:28:83:c1:63:2c:f4:67:3d:67:42:69:56:13:
19:e9:89:56:d2:33:f1:cc:78:56:33:2a:d3:83:7b:
56:f2:1f:16:b7:ed:fc:63:93:6b:81:b1:10:a0:6c:
a1:57:c0:49:bb:37:3f:aa:a4:cf:b6:1d:02:65:23:
91:d9:21:0d:4a:23:ac:fd:f2:68:d5:11:b9:36:5a:
b7:8c:df:55:2c:ea:d7:f7:4d:38:9b:e0:d0:35:c0:
aa:f7:a1:0a:1d:5e:26:ca:8c:37:88:c4:26:d9:ff:
39:b9:e6:91:66:09:91:46:85:f5:24:26:c5:f0:cd:
b5:92:98:ae:18:96:b5:2a:0d:7c:f6:b3:8c:c1:86:
05:da:c5:54:7a:a4:f3:45:e3:9c:2e:d9:ff:5a:8b:
03:fc:29:2e:a9:74:7f:f0:83:f5:53:fd:fb:8d:b6:
ac:9e:bd:e0:30:ca:6f:97:f7:c6:84:9d:e2:67:7a:
97:b4:b2:1b:33:23:e2:9f:e7:a5:2b:aa:79:30:d3:
b5:fe:d0:02:99:3b:59:db:e7:41:ff:3e:d4:fe:bb:
ba:ac:da:39:f7:9f:d7:5a:45:38:53:5e:61:9f:0d:
d6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CA:E9:37:9D:26:EB:7D:A8:13:40:FD:DE:83:0A:42:01:7B:F9:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b13ebfa4-e73c-33f8-b136-8cc1fae9b728.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.210.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:97:78:53:86:bf:28:14:db:18:e2:4c:5a:77:d5:5f:21:74:
47:d7:39:f2:1a:62:c5:e6:cd:28:23:70:f3:90:85:39:ac:03:
65:f6:1d:35:f3:48:00:05:39:56:b0:34:17:4f:bd:8e:b8:be:
30:c7:80:c4:4c:45:04:a9:12:63:71:e3:63:7c:9c:2f:2a:c4:
38:95:82:c4:53:a8:0e:e2:fe:67:2d:43:b4:e6:d4:59:7a:c5:
bf:50:04:46:ae:4b:e7:98:2f:1c:31:a4:17:6b:f0:fd:f1:12:
6c:20:46:2a:d9:48:c1:f1:98:2b:a4:d1:23:6a:cc:17:38:55:
f5:52:28:1f:0e:8a:d4:7f:5a:e4:8e:ef:14:00:51:89:52:3d:
b7:da:02:81:8a:bc:61:d3:29:1c:c8:96:a0:5f:33:53:83:46:
55:13:60:9a:a9:7c:f2:bb:62:93:ea:5e:fe:ce:a6:78:29:70:
86:fb:20:ef:00:be:aa:1c:ed:b2:ae:c3:96:42:5a:07:5b:49:
a5:8a:10:d1:0c:aa:ae:77:dd:81:ea:f2:21:d0:a4:96:a6:cf:
2c:c2:67:ed:04:5a:78:c3:85:73:4d:74:89:80:60:ba:dc:ab:
25:41:16:9a:78:05:3b:8d:86:f5:93:4e:cf:25:5d:78:d7:4e:
d9:56:c2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:54:42 2025 by rpki-client