Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1cae425-84d4-33e6-96a1-a39c97948ee3.roa
File: c1cae425-84d4-33e6-96a1-a39c97948ee3.roa (raw, json)
Hash identifier: GWIBFRVLcu/fWzDdgS7udhM+N1ISRhNPa28Zp3L9lGU=
Subject key identifier: 42:8A:69:FE:4D:D1:50:FE:F4:78:24:6F:DE:1B:19:8C:68:7F:FE:A8
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848B8F0DE9735A0A240A115E100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1cae425-84d4-33e6-96a1-a39c97948ee3.roa
Signing time: Fri 31 Jan 2025 02:00:39 +0000
ROA not before: Fri 31 Jan 2025 02:00:39 +0000
ROA not after: Thu 01 May 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.206.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b8:f0:de:97:35:a0:a2:40:a1:15:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 31 02:00:39 2025 GMT
Not After : May 1 01:00:39 2025 GMT
Subject: CN=b1cfedd9-1a49-4a47-a7bf-ec5e291fbf9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:72:41:98:08:bd:91:06:80:f9:35:c6:75:11:
d5:e1:a2:b2:ff:39:87:f6:02:df:0b:d1:88:6e:82:
a4:27:03:b9:86:eb:06:26:f8:0a:82:54:92:02:38:
80:86:29:1c:d7:54:9a:a4:61:59:87:11:80:5d:aa:
b4:b2:10:89:44:b4:dc:82:37:dc:b4:f4:5e:c3:9a:
c0:1c:75:d6:f1:bc:8a:b0:b5:3f:44:2c:a5:91:7b:
c6:2e:d9:bf:ad:d9:d3:7d:37:97:ed:2c:a3:46:cf:
ac:59:cf:a8:b3:50:f1:4c:f1:ad:09:9f:1f:65:7e:
58:86:dc:3c:8e:32:3c:43:f0:1b:be:3f:19:3d:17:
a9:9e:84:91:10:eb:0c:c1:d1:e9:49:f9:f3:33:c1:
62:ee:e3:ba:dd:63:51:98:e5:d4:24:35:3a:4b:2d:
75:a7:b9:36:6d:ca:f3:0f:ac:6f:57:78:4c:44:6c:
04:4c:e8:a9:eb:3f:57:c6:d0:36:7c:fe:94:64:b4:
e4:2a:e0:a6:a9:87:52:5b:5f:da:d5:c3:83:9c:d5:
37:7d:d6:8a:78:55:b4:db:d2:a9:98:49:d9:a8:b9:
8d:a5:0a:61:3a:54:a0:c3:d7:16:f0:4e:e8:c5:b3:
d1:b5:e3:35:65:18:d8:4d:44:81:d0:0c:b5:45:4e:
b0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8A:69:FE:4D:D1:50:FE:F4:78:24:6F:DE:1B:19:8C:68:7F:FE:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1cae425-84d4-33e6-96a1-a39c97948ee3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.206.187.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:37:ac:35:96:d7:f8:5d:50:45:15:c3:57:14:ad:48:2d:ad:
af:eb:c9:e3:18:2f:6d:fa:8c:aa:9d:f9:9c:ca:2a:0b:ca:9d:
43:2b:7a:fc:e9:e5:af:a6:f8:25:9d:1e:33:a7:60:6e:e8:07:
90:6f:01:f3:1d:ff:28:eb:d1:14:04:55:bb:97:c2:87:92:20:
b1:39:5b:41:0b:10:a8:26:8b:69:54:cf:fe:00:aa:bc:ef:32:
23:29:6a:5d:aa:de:e2:a4:d8:4c:2a:71:5b:87:36:05:f9:19:
47:3f:2a:61:fe:63:da:d9:ff:ef:31:e2:4f:48:a2:55:2b:77:
6e:f1:2f:d0:86:c3:50:e5:09:04:eb:fc:58:b7:d7:3b:5a:8c:
8f:64:a8:61:ca:ff:f4:66:a7:08:7f:84:6e:3d:60:86:34:a6:
51:4f:1f:98:dc:f6:3e:1e:8b:4f:db:b2:94:c1:3e:70:c9:06:
09:ca:db:ad:09:c6:e6:bd:12:69:3f:0f:7e:6f:54:84:e7:8d:
11:bb:fd:4e:2c:bf:3c:ce:b0:e9:f8:97:01:c0:3b:a4:56:db:
01:c1:61:cd:07:17:fa:7f:49:06:64:88:8e:ca:b7:bf:e4:61:
b2:dc:98:5a:83:dd:f5:e2:50:81:6b:4b:64:cb:37:9e:5d:9f:
4b:fb:5b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:56:17 2025 by rpki-client