Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c42fea57-e6eb-3cbb-add1-fa413a4fd856.roa
File: c42fea57-e6eb-3cbb-add1-fa413a4fd856.roa (raw, json)
Hash identifier: UQNtip/pRmfiDld8/WixMWd509XIoRFozji7QnxIll8=
Subject key identifier: 8E:B6:06:21:C8:B1:5E:6A:1D:1C:9B:FC:DF:D5:21:48:D2:BE:9D:7E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A2093DFA5CBC3B96056F480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c42fea57-e6eb-3cbb-add1-fa413a4fd856.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.39.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:93:df:a5:cb:c3:b9:60:56:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=6ff90e5e-3746-461f-89c6-0e9f6ce24f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5d:77:96:e5:85:f4:db:40:de:ef:a0:93:f1:
2a:18:f6:e9:2b:8a:cf:54:a5:0c:df:7b:0d:b7:50:
cb:fc:c7:93:37:0b:eb:d9:be:73:dd:7f:0e:14:d0:
7f:0f:94:de:c3:d0:5e:0b:a8:9f:ac:ed:2a:11:65:
f9:ee:6b:06:64:46:d0:a9:d6:bd:33:c9:40:70:bb:
2d:14:f7:84:f4:13:32:8d:0f:a0:24:55:83:30:1c:
a3:54:23:12:f2:f2:62:68:a1:35:d5:fa:c9:7d:a5:
5f:ec:e6:e1:43:e9:51:b5:2b:91:1d:09:78:f8:fe:
6d:5b:72:93:a7:fe:83:e9:55:a0:34:23:cb:5d:42:
a0:33:81:f2:86:e2:1e:f8:78:f4:a8:c2:59:37:35:
eb:f8:29:33:b5:26:2b:ad:45:df:fd:6b:17:02:13:
da:c2:cf:41:d8:47:90:d9:00:30:66:9f:ad:65:69:
0c:d9:33:76:11:05:16:5a:25:03:3a:56:3a:1e:42:
93:c6:76:83:51:2b:9a:58:1a:fc:69:74:0a:11:9c:
76:5c:14:19:8a:26:b6:26:ea:d6:c6:4e:77:3c:ea:
ca:7e:db:97:e7:e5:83:0a:f6:ec:20:25:4e:3d:4c:
3f:29:2a:66:c4:36:24:0d:3e:6a:52:43:d8:50:1e:
2f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B6:06:21:C8:B1:5E:6A:1D:1C:9B:FC:DF:D5:21:48:D2:BE:9D:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c42fea57-e6eb-3cbb-add1-fa413a4fd856.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.39.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:82:4b:61:b1:bb:29:63:05:f2:9f:a8:cc:55:f4:f0:05:b4:
ad:a4:88:9e:2d:bd:1a:6a:da:8e:63:e2:bf:be:50:3b:8a:be:
d4:5e:99:86:7c:43:79:b8:1a:46:0c:d2:0b:6d:8f:12:6b:1e:
25:e3:b7:52:26:97:3f:e4:87:a3:d0:4f:32:b5:bc:71:1c:be:
e5:d5:94:ee:b3:cf:f0:d4:23:7c:93:87:f7:81:5f:58:2c:ce:
41:0d:95:79:15:55:ac:c6:d1:a8:0b:8c:d4:12:bc:55:c5:eb:
6f:26:ea:a8:cb:f0:fb:9e:98:54:90:09:04:57:93:a4:3a:7c:
f3:37:f6:18:6e:88:f0:fb:be:b4:ac:18:4e:5d:73:a1:6e:31:
e7:1a:fa:00:0a:a4:4e:ea:7e:d8:78:fd:59:a0:33:f9:2f:04:
e3:e2:a7:f8:37:fe:bc:da:6e:e9:c9:49:e9:c0:64:83:f4:d9:
05:72:ab:45:ec:46:22:c7:f2:c2:32:80:16:18:31:9e:2c:20:
75:d1:54:6f:5c:a7:25:da:7e:42:d1:4e:91:0f:4c:e5:93:49:
d0:0d:93:ca:a7:04:7e:83:4d:17:3d:0c:18:22:94:0e:ab:21:
34:cf:40:3b:e0:dc:9d:d6:f3:78:c5:aa:ab:07:ac:2d:8f:df:
97:81:15:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:54:38 2025 by rpki-client