Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc43b7af-674b-3639-b972-1363cf194946.roa
File: bc43b7af-674b-3639-b972-1363cf194946.roa (raw, json)
Hash identifier: /XK5GUqNlmw0fhz2AvLzqDHIsM/vnVwvpGQQ0ihMOK4=
Subject key identifier: 5D:72:F7:3D:B9:37:81:D4:13:1D:14:B9:11:18:C4:5F:AB:D4:0C:CF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848D6411730FC3CC614698C3D40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc43b7af-674b-3639-b972-1363cf194946.roa
Signing time: Mon 10 Feb 2025 14:00:52 +0000
ROA not before: Mon 10 Feb 2025 14:00:52 +0000
ROA not after: Sun 11 May 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.220.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:41:17:30:fc:3c:c6:14:69:8c:3d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 10 14:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=17c7b874-cf66-4e3b-898a-8701c7b3bf9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0e:5e:fb:ae:4f:a8:c6:0f:80:7a:07:29:df:
8f:6b:70:89:3a:7a:0b:fe:f5:36:a4:fa:f9:44:3f:
43:c3:5b:19:33:24:d0:94:52:de:5b:4c:45:c1:c6:
bd:07:54:f9:62:99:2b:c3:6f:a3:5d:50:2e:07:fe:
e8:92:7e:c4:89:9a:32:43:27:89:62:ce:b5:c7:7e:
7f:d8:66:c5:fb:39:5d:d2:39:e4:21:00:d2:b9:7b:
84:a3:5d:5d:e3:68:d6:90:0d:26:d2:2f:43:c3:c1:
bd:60:51:c5:d3:4e:1c:ff:0f:93:9a:c9:a4:81:d6:
94:8d:91:c1:ed:0b:73:3f:5c:7d:6e:4e:aa:50:7c:
bb:85:96:74:ea:07:6f:1b:2c:2e:1e:31:a7:b1:54:
ba:78:6e:02:4d:03:41:7e:a2:51:63:47:a9:2f:df:
c1:7a:e7:c9:98:77:68:36:63:05:59:f3:e9:18:6d:
36:8f:41:68:f3:6c:8b:0c:fe:94:8c:18:92:d5:39:
b7:3b:6b:18:29:74:22:11:ef:46:67:94:ff:b6:0a:
46:d1:fe:36:45:ba:b6:10:cb:b5:b3:56:03:ac:33:
c6:6e:5e:ff:8d:e4:d7:89:46:87:2f:1d:83:4f:31:
9e:9b:71:93:2a:e7:38:92:0a:4d:3d:e4:dd:fc:c8:
43:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:72:F7:3D:B9:37:81:D4:13:1D:14:B9:11:18:C4:5F:AB:D4:0C:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc43b7af-674b-3639-b972-1363cf194946.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.220.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:2e:e3:b6:e6:9d:25:53:99:4c:b1:81:40:6c:48:29:cd:4b:
fc:99:49:e8:4f:cc:0c:1f:c7:84:1f:27:32:4f:7a:33:cc:b9:
df:71:42:68:09:85:aa:a2:9d:a1:71:03:e7:da:20:8d:5d:fb:
86:69:15:6b:f0:4e:66:5c:55:4b:76:05:24:bb:c0:31:3f:03:
28:f7:cd:10:85:72:4a:33:e2:56:eb:58:44:a9:fb:ff:5b:d2:
9f:eb:d9:94:72:4e:c5:5a:b5:3f:71:55:7b:bb:5c:86:1c:ae:
3f:db:d3:93:af:6d:0a:06:63:2e:79:d3:6b:25:ff:f9:1f:5a:
9b:7e:f1:4b:58:5b:c9:41:4f:0f:59:9c:42:30:ea:e7:ea:c7:
a0:8c:c4:ae:6e:d1:b4:0f:e0:66:9b:38:ea:de:82:5d:49:65:
e1:8e:30:cf:ff:6e:ec:c4:ff:0c:90:8b:a3:12:43:0e:d8:c6:
fa:09:50:0d:6f:e3:12:15:aa:6f:08:a9:35:84:1a:b6:76:0b:
15:50:dd:fb:87:81:4d:7d:61:7e:b5:5e:ef:fc:97:e1:1b:4e:
28:c1:5c:c1:d2:bd:e8:32:29:f4:68:79:03:ba:46:84:8f:75:
1b:f9:f0:ce:79:ea:d3:b8:4a:28:b7:82:84:47:04:c2:d7:b4:
d5:4b:fb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:11:34 2025 by rpki-client