Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4d318b9-8db6-34cd-86db-fd1e9adbdc03.roa
File: c4d318b9-8db6-34cd-86db-fd1e9adbdc03.roa (raw, json)
Hash identifier: uCASOuoHCy0nkBAqrKg/KXF6EXz+QH4HTE5kYFWcO1E=
Subject key identifier: B2:24:DF:27:56:5C:12:BF:FE:0B:CF:E7:E3:19:42:66:01:9D:DB:BB
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A2093C14EF75DB3FEE09D00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4d318b9-8db6-34cd-86db-fd1e9adbdc03.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.39.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:93:c1:4e:f7:5d:b3:fe:e0:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=4ca99468-f9b3-425f-9f1d-d77a14f0a7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:42:d7:13:d4:63:2a:fd:80:87:f4:39:43:1c:
35:f3:1d:92:80:9b:30:f7:44:12:63:e2:3b:fe:da:
24:f5:ab:ee:ff:a2:3d:15:0c:a5:48:67:5d:be:f6:
5c:ea:01:88:37:76:ac:dc:6f:96:7d:9d:89:9e:04:
d2:bb:dd:8d:2f:e5:21:b1:33:95:14:d7:0b:c8:b6:
24:f9:67:d5:b4:a6:35:03:57:d1:ea:6e:66:dd:74:
fd:a0:f4:d7:5a:5d:fb:44:77:be:ab:0d:38:4c:01:
57:75:48:74:61:77:81:2e:04:2b:14:eb:2e:d2:5e:
5a:a3:eb:bf:02:84:bd:51:4c:da:6b:76:90:b1:95:
95:db:56:93:6b:0b:4a:52:22:7d:0e:ec:a5:29:f6:
51:d3:9e:83:0b:3a:89:8a:22:61:77:0f:b0:87:c0:
08:aa:53:fc:b4:30:bb:74:20:bc:4c:75:86:c5:fa:
bd:e2:42:6c:b0:6f:36:c5:d1:6f:30:e1:09:16:66:
58:fd:c7:f1:a1:20:65:6a:a9:f4:3c:f4:9e:8b:66:
70:7f:94:66:a6:31:2a:6a:a6:a4:91:8b:01:16:ff:
de:26:a9:ae:12:4f:4e:59:44:e8:3d:e4:79:aa:2e:
1d:27:cf:a7:4a:b7:42:c9:1f:fb:b4:d6:e2:24:12:
36:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:24:DF:27:56:5C:12:BF:FE:0B:CF:E7:E3:19:42:66:01:9D:DB:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4d318b9-8db6-34cd-86db-fd1e9adbdc03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.39.47.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:1e:89:4f:70:88:60:fd:e0:83:c3:77:9c:aa:63:92:87:e2:
d0:cd:13:5e:66:c6:42:1d:76:8a:d3:d0:58:78:0b:12:6c:a5:
be:4a:a7:4a:4d:c2:4c:65:80:e1:64:ee:7c:e3:b2:36:12:f2:
41:32:40:db:f2:b2:1e:08:fa:ea:dd:c5:e3:05:a8:d3:87:ef:
2d:a9:43:49:74:b2:a8:63:fa:20:ec:d7:be:08:63:ff:45:c8:
08:8e:69:86:24:f3:4e:47:c8:3e:af:c2:7d:b4:56:7d:db:88:
ec:33:6f:55:73:a7:ca:e7:9c:99:ef:24:cd:09:2f:28:7d:f5:
b6:80:09:4d:01:da:14:5b:73:8a:53:37:5d:48:54:d5:db:43:
79:1e:99:6a:76:46:59:6c:4e:d2:12:c2:6c:d6:a8:02:c6:b6:
1e:49:38:c6:3d:95:31:2b:24:bc:df:5c:ba:f2:66:78:b5:00:
77:88:4a:13:d6:b1:a6:aa:76:67:04:cb:fd:da:8d:7c:9e:bb:
95:04:66:9f:e8:d3:fd:40:d7:3a:9a:ec:de:d2:40:6b:14:10:
ac:98:1c:fe:d9:38:57:b5:63:5d:b6:23:bf:a2:4b:a8:dc:2e:
3a:2a:1e:80:7e:8e:bd:f2:c7:ac:11:70:0a:7b:08:95:13:2b:
3c:51:74:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:29:12 2025 by rpki-client