Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3d428a4-3a20-3ac6-a01e-21ad5860fda0.roa
File: b3d428a4-3a20-3ac6-a01e-21ad5860fda0.roa (raw, json)
Hash identifier: tW9ejJquI1vn4Dy1XwivCxpiLusyC+Y6iXPNeU27wDY=
Subject key identifier: 76:02:6B:1F:31:0E:58:B3:D6:79:25:B1:F1:DC:E2:FB:DB:39:47:2B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487E506EC0B2D98079D441B740
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3d428a4-3a20-3ac6-a01e-21ad5860fda0.roa
Signing time: Fri 10 Jan 2025 02:00:40 +0000
ROA not before: Fri 10 Jan 2025 02:00:40 +0000
ROA not after: Thu 10 Apr 2025 01:00:40 +0000
asID: 16625
IP address blocks: 23.46.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7e:50:6e:c0:b2:d9:80:79:d4:41:b7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 10 02:00:40 2025 GMT
Not After : Apr 10 01:00:40 2025 GMT
Subject: CN=25c4aa2f-e522-4100-b122-3b7b1fcd10b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f2:d8:11:56:cc:ae:d2:34:79:f0:d0:34:ad:
c6:82:0c:66:10:fe:f0:32:b1:17:86:fb:06:3b:01:
ee:f4:7b:51:82:03:81:c4:30:74:c1:07:cc:95:cd:
a4:98:33:b1:1c:22:2d:90:76:8b:13:3c:17:dc:40:
c3:2d:97:90:36:24:9d:ed:7b:3a:24:32:c8:41:4f:
41:6d:30:7b:f9:f8:7d:cc:19:9a:46:93:5a:d6:49:
82:20:32:e7:c7:32:89:a0:c7:ba:5e:9e:9c:5f:a2:
63:5c:0f:04:91:17:3c:23:01:e3:32:3e:66:e1:97:
1f:a2:c2:73:26:d4:c7:99:9e:3d:54:33:39:1b:0a:
d1:6d:d9:24:62:35:9d:e1:3f:e6:bb:29:68:a4:40:
0f:31:74:86:99:30:83:de:ab:3a:ac:81:8e:c7:34:
67:d5:f4:7e:bb:65:50:fb:cd:da:12:b1:4f:bf:e8:
d1:39:06:64:43:39:d3:ad:f5:76:6f:61:48:6b:97:
77:9d:5e:6b:6c:a1:6a:a5:3f:6f:d4:b0:b1:90:0a:
a7:45:27:3a:8b:bd:65:5b:c5:84:07:93:24:11:93:
08:96:a9:a8:cc:b4:31:74:74:3e:8e:ae:12:4e:ec:
4a:3d:41:eb:f6:37:e4:5d:4c:06:54:20:e0:fa:9d:
38:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:02:6B:1F:31:0E:58:B3:D6:79:25:B1:F1:DC:E2:FB:DB:39:47:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3d428a4-3a20-3ac6-a01e-21ad5860fda0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.46.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:83:2a:c2:79:0e:f6:bb:37:88:cb:4d:71:1a:79:55:b7:01:
05:b8:a8:40:1e:8d:09:2a:9c:15:8d:6f:68:4c:b8:b1:6e:9d:
7d:88:7e:c6:f5:30:d4:a6:fe:f5:fb:9d:99:aa:dd:08:51:24:
05:49:f7:4c:7a:3e:f7:a1:e7:d2:2c:e1:c3:f0:d9:f5:fb:19:
cc:e7:5f:8b:1c:c2:a8:70:22:28:69:49:c3:96:a8:76:ca:3a:
0b:ab:53:66:49:35:db:ae:0d:90:be:93:1d:92:d8:a6:78:da:
a1:c8:1b:bb:60:30:4a:96:75:af:53:07:3a:2a:df:b9:df:fd:
48:e2:4f:e9:6d:a6:7a:39:fb:d5:f5:1e:1d:7d:77:5e:9e:c2:
71:ca:f6:6f:2c:5b:1f:16:a4:aa:17:36:4c:cb:d7:b2:6f:97:
dd:2a:6b:61:61:7a:83:a9:36:d7:59:6f:d4:12:f3:84:2e:24:
84:5d:4f:2a:03:40:2d:63:77:4a:18:98:c6:8a:b7:6e:da:18:
7b:cf:4a:fd:43:00:7b:6a:8f:72:c4:db:8f:5a:9c:b2:7a:0b:
69:38:5a:4b:f5:39:2c:dd:b7:0a:c0:9d:df:eb:03:33:d6:5b:
15:fd:f9:35:77:a9:80:09:3b:3c:b7:8e:69:65:0d:88:f8:e0:
16:a5:1d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:12:56 2025 by rpki-client