Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9519e0f-faae-3752-84d9-08dcfdc1003e.roa
File: c9519e0f-faae-3752-84d9-08dcfdc1003e.roa (raw, json)
Hash identifier: ClIPEGi/96l8h/O1Hb2/aSFvtDpt3BLCH5NPGsorfwk=
Subject key identifier: 97:8F:F1:01:E1:7C:B1:04:70:8D:1B:86:C6:7E:65:C5:3A:B2:8A:F1
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A208F37912AA308A6BDB500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9519e0f-faae-3752-84d9-08dcfdc1003e.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.36.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:8f:37:91:2a:a3:08:a6:bd:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=2b02fef3-3e3d-4308-a0ee-bdbee5404a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d5:e3:8c:2c:4b:f7:a1:3b:0f:bc:7a:72:cf:
5c:cc:40:8d:1a:bf:40:8c:4e:86:89:09:5f:70:08:
47:3e:fb:79:85:5b:76:d8:e7:7a:e9:52:ca:ec:76:
76:f9:55:e0:87:5e:fb:e3:f8:af:2e:c5:51:f9:2f:
bd:f2:18:81:01:04:2e:c0:ca:fa:f6:48:d3:f9:7b:
56:51:c3:28:f8:9a:4f:61:d7:69:3d:e8:35:7f:c8:
c3:d3:17:75:56:c1:e7:ed:b1:ae:f6:84:91:32:45:
98:35:49:7c:c9:b6:3f:15:06:2b:d5:3c:53:f2:ed:
e9:92:43:a3:5d:74:99:fc:75:01:5f:0a:f2:d8:55:
88:7f:5d:a6:04:85:bf:b4:70:aa:c0:9e:cb:91:75:
1e:fe:52:d0:ed:a9:53:de:3a:ae:c2:ff:74:c6:cb:
2c:af:65:b8:30:a6:04:fd:cb:cf:a5:ce:6c:0a:77:
54:d5:58:1f:be:5c:87:47:c8:6c:46:a2:4c:24:93:
6b:ec:74:bd:5e:58:69:bb:49:f0:b6:3b:40:12:03:
8c:48:de:09:e9:38:df:87:d9:f9:73:a6:8e:a2:2e:
53:b9:3d:ae:04:18:3c:75:27:be:dc:1e:cd:c9:06:
26:47:b1:8e:a4:ac:24:c0:c0:92:6a:a1:0e:59:44:
ae:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8F:F1:01:E1:7C:B1:04:70:8D:1B:86:C6:7E:65:C5:3A:B2:8A:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9519e0f-faae-3752-84d9-08dcfdc1003e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.36.44.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:99:a8:db:4c:6c:75:88:d0:70:1a:4c:41:30:5b:fb:21:70:
71:01:fd:d1:2e:42:de:ac:6c:5a:2b:72:1d:13:de:d4:a1:2d:
e9:51:b7:2e:ff:1a:fe:a5:88:1c:96:fe:ca:55:5b:cc:6c:13:
22:3c:73:0a:a5:60:54:fa:29:33:63:04:a7:fc:7c:4b:0e:40:
49:90:a5:bc:dd:6e:5d:3b:db:8f:6c:e8:05:18:c2:c4:8c:15:
cd:2e:5a:4a:60:0c:c6:68:bb:0b:1d:95:7d:c2:18:48:72:52:
72:ea:a0:c9:98:ec:1b:b7:78:de:3e:ab:01:c4:7a:bf:e9:ed:
57:18:45:54:48:b7:2e:76:25:bb:3e:f1:18:57:be:0b:ec:02:
ce:30:76:e9:dd:1f:c4:1f:09:31:f0:e2:df:0d:5b:46:fd:c8:
e5:eb:e3:b1:1c:d0:fa:e4:53:7c:9e:34:f5:b4:0b:11:a2:d8:
93:72:7a:5f:fd:50:c0:58:92:43:7d:ca:d8:ac:78:06:bd:ef:
e5:58:07:9c:a6:f9:5f:3c:90:53:c0:89:9c:36:f2:7c:40:a7:
ea:b0:d2:66:2a:2a:23:e7:00:54:6d:d2:1d:b4:2f:99:0d:74:
ec:f1:9a:b3:38:18:24:0e:25:0b:e0:54:d3:4f:b2:a9:06:14:
aa:17:96:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:02:39 2025 by rpki-client