Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/baf7cf78-efe8-33fd-bf1c-3cd4206791fe.roa
File: baf7cf78-efe8-33fd-bf1c-3cd4206791fe.roa (raw, json)
Hash identifier: FJ0Nm8VBPxibigScbzJVc7yWyXIEhlYsT6I/A6cmaow=
Subject key identifier: D2:97:68:DC:EA:E2:DA:44:FB:73:DB:A5:49:5C:5C:E8:13:EB:E1:E1
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858489340BA88294D1142FB069A40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/baf7cf78-efe8-33fd-bf1c-3cd4206791fe.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 20940
IP address blocks: 23.203.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:ba:88:29:4d:11:42:fb:06:9a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=373cc45e-4275-4685-942a-8a7b7cc27993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f9:09:64:59:e9:77:95:64:98:5f:74:a7:d6:
39:88:72:63:b6:42:82:96:dc:f5:da:10:84:b4:d5:
77:48:91:b0:1d:4e:18:e5:d2:17:b4:0b:40:f9:89:
f1:a1:81:4e:31:53:72:b1:a5:29:85:92:c2:45:e4:
20:d4:2d:1c:be:c1:5d:85:9e:7a:f2:d1:79:94:b2:
9a:54:0e:e4:f5:1a:05:bc:87:ca:18:96:c5:37:f4:
70:f3:cf:0e:c6:74:3a:a9:82:cc:66:30:67:88:d1:
c7:0d:63:66:19:08:75:e2:46:20:c9:ff:07:58:6f:
02:bb:e9:9a:b1:34:71:39:b5:0d:1d:2a:50:9d:0a:
30:60:2e:c2:7e:c3:6c:3d:da:2e:35:a4:e2:c0:8d:
5d:6e:64:9f:99:df:78:aa:0f:55:f5:2c:4e:d0:7f:
fc:a1:ef:3c:e5:dc:eb:9b:30:bf:4d:90:d3:ea:8c:
37:6c:06:23:1a:7f:f9:a9:5c:d4:31:ed:fb:e3:21:
61:38:46:85:a7:a2:91:21:b8:08:a3:f5:c6:ae:4e:
b6:b3:8b:bf:d1:cd:aa:8f:af:be:99:09:9d:14:cd:
f1:47:2d:06:bc:33:4c:85:59:b0:52:4f:b0:63:cc:
6b:b0:5a:27:25:a9:3c:ea:f1:d7:5e:a1:37:90:c5:
d4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:97:68:DC:EA:E2:DA:44:FB:73:DB:A5:49:5C:5C:E8:13:EB:E1:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/baf7cf78-efe8-33fd-bf1c-3cd4206791fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.203.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:e9:88:4c:ee:74:6f:f2:88:e4:ab:fd:2c:2b:b9:8c:a5:8f:
f1:97:69:f9:86:1c:6a:73:b5:62:2f:12:87:76:13:66:8b:af:
5a:67:34:56:bb:6a:3a:38:61:11:da:43:4b:27:14:68:a0:78:
b2:db:d2:f9:db:57:bc:eb:16:de:d5:d5:28:3b:79:16:2e:0b:
ac:a9:e1:dd:9f:5b:bd:20:c5:63:2b:54:d5:39:3b:ec:7a:4e:
8b:ba:ab:dd:8f:37:51:60:41:ac:a9:0e:85:dd:96:c4:63:4d:
13:09:16:0e:d4:eb:0e:81:0b:05:dd:16:05:3b:71:f3:e1:77:
e6:ee:42:f9:bb:0b:1e:33:15:e7:07:67:02:b5:eb:10:7a:60:
28:13:ab:3c:7c:ea:45:8e:4b:6e:00:e1:a3:77:ac:94:e5:0b:
85:ec:ac:e7:59:67:9c:e1:0e:f3:9c:a4:db:29:c8:2d:d3:61:
2d:1e:a7:a0:25:12:b5:1d:b9:3d:13:71:9b:30:eb:4e:fa:56:
17:fc:29:c0:96:45:62:91:35:db:16:20:59:a5:40:d7:2c:f2:
16:b0:db:e9:9b:2b:ca:ab:da:6c:4b:3c:28:19:a9:b5:c1:c2:
dc:90:32:52:e6:67:4e:80:ba:10:57:49:93:d0:ea:74:66:78:
17:18:26:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:00 2025 by rpki-client