Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c868029c-4de2-3e1e-a537-6b6c45ee323d.roa
File: c868029c-4de2-3e1e-a537-6b6c45ee323d.roa (raw, json)
Hash identifier: 9sv4/KRq64Xo8C8a6Ji9qIfTN6M0BNgEp6eXSkg6EIg=
Subject key identifier: 89:40:E1:06:C2:5A:39:45:0E:D7:A0:06:1D:F4:38:24:3A:3B:86:40
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584913AC40C3F9457CE55AECF280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c868029c-4de2-3e1e-a537-6b6c45ee323d.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.64.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:40:c3:f9:45:7c:e5:5a:ec:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=31119aef-2549-48bd-85e6-209268684b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4d:40:3b:39:6f:16:e4:aa:c3:60:ea:ba:18:
d7:04:e1:f3:9f:3f:bf:3f:5a:9f:a9:7d:3d:7a:e9:
f0:b0:61:3d:3a:c9:3f:1a:ef:ba:d2:a7:6c:cf:ef:
20:a8:68:d3:f5:fb:66:06:18:8a:79:a3:07:05:6c:
45:b9:ac:5d:3b:8e:b2:dd:c3:76:f2:11:09:73:37:
17:4a:0f:b6:5b:a3:a7:df:59:84:3f:ac:23:bf:80:
73:dc:05:5b:ed:a6:be:0a:92:5e:87:b4:7c:67:4d:
9b:d4:93:f0:d6:99:94:f2:54:77:1c:06:6a:56:ad:
51:a5:9e:f6:f5:db:90:02:45:00:0c:c9:eb:20:24:
ff:a1:2e:96:5b:1b:76:72:49:52:0f:3d:e1:5e:39:
7f:21:d1:6c:57:3e:b1:86:3d:3b:28:19:af:4e:f3:
75:31:ee:06:59:2d:98:6f:bf:4e:bf:77:89:80:78:
4d:cf:80:b4:f3:0a:7f:bd:e3:9c:a5:9c:a8:de:9f:
28:58:02:a6:0f:b7:c3:c4:42:cc:9c:21:e0:a7:84:
76:2f:c4:30:4e:d6:60:94:8a:62:50:57:de:bd:fe:
e6:49:f9:1e:50:7a:b5:83:ab:ce:b1:b7:75:94:4a:
a4:2e:1d:98:68:59:83:fc:58:a3:f7:4d:5c:1c:69:
60:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:40:E1:06:C2:5A:39:45:0E:D7:A0:06:1D:F4:38:24:3A:3B:86:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c868029c-4de2-3e1e-a537-6b6c45ee323d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.64.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:c1:bd:72:12:d4:bc:54:1b:e1:5a:b0:85:0f:df:fa:e0:51:
60:97:ee:8f:c3:37:c1:b7:b3:d0:f4:eb:a4:3f:e3:0a:25:e4:
b6:07:fe:12:84:61:39:a9:29:35:a2:0e:90:bf:eb:25:95:df:
9a:df:3b:cd:54:d6:ef:7b:28:12:32:7e:b0:74:41:c6:7f:d2:
c9:9b:82:3f:73:07:f6:47:f1:91:80:59:f7:e1:03:ea:a4:07:
7a:44:2e:22:67:61:49:2d:bc:53:71:6b:22:21:b2:a6:eb:1f:
5f:ab:9a:5d:9f:02:0e:7c:5f:00:da:db:85:80:75:4a:45:fc:
61:6d:1c:2a:3d:93:22:34:a7:22:49:5f:88:52:71:ca:78:3a:
48:27:d7:fe:88:c4:b5:2d:e4:4e:e7:33:cd:24:da:d4:e3:b9:
4d:5b:e9:8b:85:3e:83:b0:0a:bb:98:e3:a0:3d:b6:7d:3a:ab:
dc:28:47:75:f1:a7:19:e9:52:e0:c1:ac:0a:c4:16:9f:de:a9:
66:e2:80:44:3e:b7:70:67:e6:9c:de:9e:b1:9f:d9:8c:b5:6d:
5e:e1:8e:af:12:cb:9c:c2:9d:e8:b3:2d:0b:b2:32:a6:dc:14:
d3:b8:0e:f2:f3:38:61:f4:81:df:e7:ca:26:c2:98:b7:7b:7f:
fa:c6:89:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:40 2025 by rpki-client