Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b34131c4-642b-37f4-ae1a-2cd503be396d.roa
File: b34131c4-642b-37f4-ae1a-2cd503be396d.roa (raw, json)
Hash identifier: v641CuCbs1laFElxJFyePf115s6U9/8/c4fRDXTXGmI=
Subject key identifier: D5:65:C3:79:6E:72:23:15:DB:67:00:5F:5D:44:8D:A3:D8:B0:7A:0C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A20959A8A5E70896B57A7E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b34131c4-642b-37f4-ae1a-2cd503be396d.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.40.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:95:9a:8a:5e:70:89:6b:57:a7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=c9bf965e-3e7a-4b13-b5f3-4652e00ed7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:59:83:68:b0:9f:6d:45:cd:b2:ee:ec:1d:4b:
56:e3:08:d0:65:ff:0b:ff:04:81:eb:2c:76:6a:1a:
6d:55:cb:dc:8e:c4:11:75:ff:dc:e5:b4:b3:47:81:
89:19:c2:9a:26:ab:30:c9:b3:1b:64:ea:d0:eb:9e:
ca:c4:85:b5:9d:86:0d:96:46:79:90:4b:f7:11:11:
02:c1:da:69:78:b3:91:63:35:9f:6c:7b:b0:61:c0:
f7:5e:69:f9:71:71:0c:e4:02:de:44:8b:43:e0:67:
30:ce:9a:e6:06:6a:b6:5e:e8:25:d1:28:1a:9a:84:
1e:a0:40:d9:6f:08:6e:e4:a2:74:af:24:a4:1b:12:
78:b0:e5:82:1f:9f:1b:73:cd:b2:e2:e2:9e:8f:d8:
bb:b8:47:ea:a7:21:26:45:df:e4:06:b5:cb:5f:2b:
ee:b1:7d:d2:98:dd:60:77:9f:cd:44:5c:23:1b:1e:
1d:5e:1b:a4:7d:e8:5d:8f:47:4e:40:ee:b7:d1:4a:
ef:15:b7:3e:69:3f:ed:6c:19:20:be:5d:10:69:a3:
ae:31:28:05:25:ed:0a:a1:ab:43:e6:2b:f9:f9:1d:
6e:de:5b:8b:24:6c:81:a2:80:ae:67:23:1c:da:22:
2e:e9:ef:29:8e:97:7d:ed:a7:05:87:8f:82:f8:fe:
8f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:65:C3:79:6E:72:23:15:DB:67:00:5F:5D:44:8D:A3:D8:B0:7A:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b34131c4-642b-37f4-ae1a-2cd503be396d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.40.53.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:54:89:ec:88:0f:2a:25:92:86:1b:77:24:ef:36:ca:85:ef:
81:b6:e0:48:ae:6a:35:11:46:95:05:94:6a:0c:aa:97:d4:a3:
11:77:55:26:c7:99:5b:3f:30:dd:7f:c9:81:2a:ed:2c:aa:16:
35:26:e9:b9:97:f8:27:9b:49:27:77:2a:0c:66:13:f7:cf:24:
bc:24:00:9c:09:7d:50:b0:bf:f4:b8:57:c9:d5:35:97:ec:5c:
8b:d6:42:7f:0b:14:47:c3:53:46:6d:8a:d5:ea:36:06:4c:7a:
1b:61:1d:c7:cb:84:6a:c0:87:cf:ed:c3:1c:39:7a:66:3d:ed:
94:ba:3d:52:a0:af:6e:ec:82:2a:dd:f5:27:64:3d:e1:6d:d2:
c0:5c:d6:40:ab:35:da:2f:d3:e8:9c:dc:7b:25:7d:bd:b2:fe:
23:89:ed:4c:69:df:87:6f:03:c6:54:c2:78:0d:56:6a:83:f8:
07:32:5c:d7:09:38:80:58:79:d9:20:bb:39:4a:e3:37:ae:3b:
13:de:ed:c4:68:8e:56:1b:39:4e:39:0b:dc:d1:dc:81:90:63:
42:1e:2a:90:09:c6:06:ef:7c:4f:d9:7e:80:e0:0e:d2:14:50:
6d:53:8f:6b:e9:ab:ec:20:db:de:a3:e8:0c:c2:27:1b:79:94:
77:07:3f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:55 2025 by rpki-client