Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4d8475b-dc8a-3980-b250-ef3c99c18a2e.roa
File: c4d8475b-dc8a-3980-b250-ef3c99c18a2e.roa (raw, json)
Hash identifier: gaygln5Rq9XgeYaeQKqJ7UXJsudX2cJSp9R8kcOFCBg=
Subject key identifier: FD:5B:A6:AE:C0:B7:F0:1A:4B:31:F5:5C:F0:5B:6A:E7:39:69:31:F2
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848CC7BA9FFC7CD5074C375DC78
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4d8475b-dc8a-3980-b250-ef3c99c18a2e.roa
Signing time: Fri 07 Feb 2025 02:00:39 +0000
ROA not before: Fri 07 Feb 2025 02:00:39 +0000
ROA not after: Thu 08 May 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.220.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cc:7b:a9:ff:c7:cd:50:74:c3:75:dc:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 7 02:00:39 2025 GMT
Not After : May 8 01:00:39 2025 GMT
Subject: CN=64ec4bfe-a58e-4891-9d85-820608ddf6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:05:f5:c8:70:81:9a:a0:b6:64:a9:5b:ad:4f:
c3:6d:8b:42:dc:10:77:db:83:c8:8d:4d:0c:12:12:
54:99:d6:af:04:2e:5c:59:ee:87:97:e5:ed:0c:b8:
4f:fe:d3:68:79:48:5c:08:72:19:58:6c:f8:dd:aa:
08:ba:e0:11:ee:c9:c8:42:ed:96:1b:06:2c:53:99:
d9:c3:f5:2e:e5:2b:b7:b9:8d:56:0b:8d:22:2a:5c:
0c:8e:63:3c:a2:d1:ae:dd:db:1e:c4:7d:4b:74:8e:
b1:50:52:5d:b8:3d:46:1a:57:ea:6d:f9:83:2e:5c:
aa:11:b4:c7:f9:18:e0:9b:ea:20:84:f7:92:e3:07:
38:48:dd:54:d5:1e:11:6b:69:8a:43:09:d1:c2:b9:
45:18:70:f3:d7:27:16:ef:fa:2b:39:2d:ba:27:1f:
fc:18:be:70:30:b1:43:93:fc:ee:9e:79:82:26:81:
89:a0:45:d3:c1:ab:30:9c:f5:c3:87:47:30:bb:91:
5c:8c:a3:bd:e3:6d:88:9e:13:59:4f:87:aa:11:bf:
14:18:95:c9:43:b1:ea:41:b0:9a:27:39:fb:a5:71:
c6:e4:34:ec:3b:85:e4:9a:09:f0:88:40:ad:0a:7e:
24:91:de:67:06:b7:aa:38:78:d7:03:03:39:58:f1:
8d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5B:A6:AE:C0:B7:F0:1A:4B:31:F5:5C:F0:5B:6A:E7:39:69:31:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4d8475b-dc8a-3980-b250-ef3c99c18a2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.220.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:38:5f:c3:37:8c:28:47:c7:5d:34:34:f1:0d:ef:e9:30:63:
a7:06:21:6d:7d:05:7c:2a:a3:f1:e3:8d:60:1a:c0:26:51:21:
4b:bc:91:df:c4:dd:3e:92:ca:9b:ce:94:7b:2d:a6:0e:50:16:
a7:b1:3c:f7:00:39:57:ed:d7:76:67:7c:ad:43:a4:fe:d2:5f:
72:8b:d8:bb:8b:8f:b1:0e:5a:63:a9:49:f4:ad:76:2d:88:7d:
52:66:8b:d4:3d:2e:0b:1f:3e:64:29:61:9f:05:13:f9:af:26:
c4:bb:3a:c8:84:90:33:e1:fc:7f:2a:b5:57:e6:70:fe:8f:09:
58:5b:e1:99:df:28:9e:c1:a1:94:52:d8:4f:3a:8c:ee:5b:a5:
5f:5a:80:e6:13:bb:c9:90:f4:96:c5:8e:15:99:ac:c8:63:d7:
ca:10:39:d5:7b:0b:48:93:f7:82:4d:60:74:38:05:1a:86:fd:
9e:8d:a1:e4:53:03:69:17:80:2d:10:2e:bd:52:23:c2:8c:c6:
a1:1b:68:be:88:70:30:45:ad:b8:05:5b:1f:f1:f5:a8:53:6c:
7a:94:ac:98:5b:d3:5b:77:b0:84:9c:c5:88:9c:01:f9:7d:26:
8d:0b:d8:3c:3a:0e:55:c2:03:77:99:c9:34:d1:95:6a:ea:7c:
2b:ae:44:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:13:04 2025 by rpki-client