Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b683a66a-b30e-3f83-b9b1-719db901cd44.roa
File: b683a66a-b30e-3f83-b9b1-719db901cd44.roa (raw, json)
Hash identifier: YHsTSSSP3yUlMQ8ZoKO1l0IzRSt8Q69o03z5jrUQS5w=
Subject key identifier: 4B:8B:34:1C:62:9F:B7:70:49:72:08:04:A4:F5:C4:1E:C6:7D:61:12
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848BBBB9798187819E4F99B7040
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b683a66a-b30e-3f83-b9b1-719db901cd44.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.212.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:97:98:18:78:19:e4:f9:9b:70:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=dcca59f2-5403-40e0-b706-a68f560e720b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c7:fb:19:db:66:5a:bf:75:5d:a7:34:3d:77:
52:2e:b4:68:4b:99:81:7e:3e:26:1f:bc:c7:b1:5f:
bf:b1:25:e0:ce:f8:99:90:ad:5e:1c:a3:4d:99:df:
4c:fe:c1:cb:39:df:5b:62:b0:18:e8:08:31:d9:46:
da:46:d7:57:1d:56:f5:78:60:d6:ff:9b:a9:90:91:
42:d5:bb:cf:d1:41:67:89:08:56:70:d8:e4:47:0d:
38:35:ba:43:d6:f3:d7:c2:5b:fb:c5:ac:7a:2a:3a:
f1:d6:56:b7:32:2a:d4:ef:af:cf:f6:09:39:fb:bb:
8d:fa:a5:ae:1b:36:8f:59:a7:b0:19:98:60:0b:89:
17:89:4b:b6:03:a0:ca:78:33:18:36:30:dd:d9:f5:
98:bb:83:6c:45:50:75:c3:9d:f3:d1:5a:60:e3:94:
2c:43:a9:44:da:b8:a7:ba:28:33:ee:f0:ed:b7:30:
4b:3b:74:07:f6:19:71:33:8a:67:aa:61:55:dd:8b:
8f:e2:d4:30:7e:8d:82:1e:8b:c7:3a:3d:ff:ec:79:
14:81:8f:b8:9c:b6:52:51:ee:f5:b2:4e:28:63:fa:
cb:da:53:d4:b1:1f:7b:33:6f:89:98:d4:24:32:8c:
b1:31:4f:7b:d6:cd:23:db:cf:e2:d6:d8:2c:8c:a4:
32:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8B:34:1C:62:9F:B7:70:49:72:08:04:A4:F5:C4:1E:C6:7D:61:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b683a66a-b30e-3f83-b9b1-719db901cd44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.212.167.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:90:74:63:fe:6f:fa:ba:e5:fe:da:3e:e1:d1:04:7d:a8:77:
c5:cf:55:94:1f:46:19:ad:82:b2:c2:32:04:1e:43:85:4c:fe:
98:2b:5b:9b:91:a8:33:57:78:9c:a8:d4:41:5d:a8:df:12:c5:
d0:82:bb:93:62:0c:b3:ee:66:d6:00:80:fc:0d:8c:66:63:04:
c5:a4:ef:b7:0d:05:3c:8b:28:0e:23:3e:3e:e3:5c:12:51:cd:
ef:76:8f:b9:c7:74:20:dd:72:57:2e:fa:be:0c:5a:65:30:af:
dd:a4:8c:c6:15:1a:27:d4:89:70:57:40:67:b0:cc:5c:f9:15:
32:6a:eb:22:b7:6f:75:6a:7f:31:53:9d:21:5e:63:e4:4d:f5:
54:c9:5c:5f:32:f6:94:0d:53:3b:f3:a6:0b:4b:6c:9d:ce:55:
92:dd:6f:05:4c:4e:eb:61:bf:87:2c:0c:52:8e:e6:95:d4:1c:
73:5b:66:8c:0f:87:23:f9:84:bb:21:46:09:a2:93:71:18:01:
b6:8b:bb:11:8a:86:fe:e1:e0:ae:2c:a8:2a:03:99:e6:e4:d4:
ac:fd:11:98:59:f1:0f:31:b5:a0:55:7f:57:e6:40:bb:ce:2a:
61:66:a5:33:97:2d:bd:e3:5f:4f:51:27:95:8e:08:31:9e:2b:
3b:c0:f7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:04:10 2025 by rpki-client