Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bcab8418-2c37-3cba-b399-1d3f66ccb9bf.roa
File: bcab8418-2c37-3cba-b399-1d3f66ccb9bf.roa (raw, json)
Hash identifier: dl9gm53KObs0gGtTx5IZYFDWfnGfUrzn/ggwfYCPJjM=
Subject key identifier: 3C:B0:D8:60:AA:B5:3D:91:A6:66:69:77:15:59:0A:40:5A:30:33:9B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848B8F0DD6349B9C75B3F3AE800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bcab8418-2c37-3cba-b399-1d3f66ccb9bf.roa
Signing time: Fri 31 Jan 2025 02:00:39 +0000
ROA not before: Fri 31 Jan 2025 02:00:39 +0000
ROA not after: Thu 01 May 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.205.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b8:f0:dd:63:49:b9:c7:5b:3f:3a:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 31 02:00:39 2025 GMT
Not After : May 1 01:00:39 2025 GMT
Subject: CN=3c2689ce-4013-447b-bd87-c1c45e5d0191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bd:9d:ae:b6:e0:9a:18:5d:90:0a:1e:38:51:
dd:ce:c9:4c:d1:5b:41:67:d1:e0:48:ed:08:18:a4:
97:48:2f:27:20:40:25:3d:6e:9e:95:45:a2:a3:db:
06:a3:c2:b6:e3:ca:c0:c1:f0:47:34:b9:5c:3c:a3:
95:96:50:66:b2:63:7d:a2:e0:7f:1a:21:f9:9b:53:
24:4f:73:8a:d8:9f:f2:41:c0:f8:63:8e:af:2b:0f:
c8:13:65:e3:19:9c:e6:70:b4:a6:9a:84:d4:ae:b3:
7b:ab:b4:72:62:1e:18:f2:31:1f:06:f6:7e:f0:99:
b7:fb:c0:ab:ad:49:32:85:fc:d2:9b:4a:6f:51:5e:
0e:cb:2f:e3:a0:15:b2:44:1c:ff:fe:77:ba:72:d0:
94:83:84:a3:1f:78:21:98:49:a0:c9:eb:b4:4d:7f:
98:d1:1d:da:8a:1e:7d:6e:6e:20:96:cf:0a:01:b1:
73:70:c0:e0:5a:81:e9:44:96:88:49:b5:30:73:2c:
67:c5:49:c3:cd:75:55:b9:bf:90:94:19:0e:12:2b:
51:30:c9:97:d6:7b:75:cc:b1:15:b1:ce:18:8d:f3:
64:0c:84:25:5a:f0:6e:ac:6e:6c:9a:66:22:5e:c0:
d9:55:49:b4:0f:2c:7d:0a:3d:7b:2d:a7:9b:30:71:
6a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B0:D8:60:AA:B5:3D:91:A6:66:69:77:15:59:0A:40:5A:30:33:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bcab8418-2c37-3cba-b399-1d3f66ccb9bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.205.166.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:79:05:12:c8:66:b4:53:eb:3c:22:d4:00:2f:9d:4a:55:bb:
34:8c:5a:30:a6:83:62:e4:ce:71:71:06:d7:37:02:6c:12:51:
e0:68:9b:84:fb:8c:42:a7:40:36:9b:d4:aa:3f:67:c8:ca:18:
8d:85:ef:0f:65:ef:06:47:cc:12:41:82:8d:ef:eb:7b:48:95:
37:d4:de:63:4d:3e:20:0a:26:0c:6f:13:94:8d:54:3f:91:6e:
e7:a6:e9:b1:fa:c9:8f:11:7d:a6:e5:47:8f:aa:bf:71:7f:ee:
6d:f1:44:ec:6f:75:28:73:e5:7f:d2:37:6c:8b:5e:05:da:56:
70:d7:36:c2:25:e0:96:4b:9d:c4:f4:78:fd:1b:d6:91:1a:90:
0d:47:0a:8c:ba:7a:c2:1c:cf:bd:76:d3:81:59:e1:b4:6b:c3:
75:c9:70:e2:96:a7:4b:68:25:1f:54:22:63:3a:0c:7e:a6:39:
69:3d:d6:43:ce:a7:e5:5f:0c:07:b4:cc:1e:52:4f:8e:ef:2c:
b1:21:40:ce:15:9a:b4:c7:d5:1b:f2:d6:8f:d1:ae:78:08:eb:
8e:8f:ad:64:e9:4f:d6:1e:7d:a1:08:34:78:ad:55:26:e6:78:
76:a1:53:eb:85:be:c1:94:91:1a:3a:dd:ce:ad:a6:db:e8:b6:
30:e8:45:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:41 2025 by rpki-client