Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd1e5bb3-277a-3569-94a0-b51f5f6031c9.roa
File: cd1e5bb3-277a-3569-94a0-b51f5f6031c9.roa (raw, json)
Hash identifier: uhb8pEhbxzm+Sm0PGImVn2vGJTQaw87hgM62lQqWUGc=
Subject key identifier: 30:1E:23:DF:0F:03:FD:B2:A2:4A:A9:12:1C:7A:3A:BA:21:E9:AA:2E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858488DAB571D6190FADF25836AC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd1e5bb3-277a-3569-94a0-b51f5f6031c9.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.54.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:57:1d:61:90:fa:df:25:83:6a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=08ba5f3f-8a4d-4e98-8e2c-7b0ba9831869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:92:79:5a:c8:a6:6e:83:37:3d:ab:60:b7:6e:
88:12:14:08:f7:85:c6:7b:75:54:b0:33:c3:16:22:
51:40:6d:3e:cc:fe:f7:e9:6f:1a:6f:68:d4:09:6f:
ca:13:bb:56:2e:cc:a9:64:9d:76:ef:47:a7:d1:79:
e2:86:8e:11:a8:f4:fc:bf:fd:41:21:8f:36:85:44:
96:14:b0:fb:32:8d:35:eb:19:44:c5:56:61:ea:4a:
e6:b5:01:6a:d6:c1:21:55:2f:ac:15:36:25:64:26:
94:e5:33:4d:b8:a9:35:c6:59:1c:03:2a:49:75:c3:
94:65:e7:84:38:24:a6:e2:ad:75:0f:58:7b:06:ca:
08:09:1c:47:34:37:d9:5f:37:88:65:36:80:f8:74:
39:41:c4:80:27:09:8a:6f:6d:d8:65:14:4e:be:d2:
a7:ea:57:c6:57:6a:3e:b1:a6:8d:2c:d8:2a:89:83:
ca:2e:d2:05:6b:21:09:a7:46:5a:a5:8e:68:10:1f:
95:39:0e:6b:06:1c:e0:24:7d:09:87:1a:42:47:09:
76:4a:74:da:49:5a:4d:d2:36:83:82:4b:84:79:f9:
bd:0d:07:c2:2f:b5:36:c1:27:be:5a:6a:e2:89:7d:
54:30:55:35:8b:8c:43:03:3b:4f:68:52:55:52:11:
bc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1E:23:DF:0F:03:FD:B2:A2:4A:A9:12:1C:7A:3A:BA:21:E9:AA:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd1e5bb3-277a-3569-94a0-b51f5f6031c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.54.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:c1:9f:0c:e9:84:d4:bd:3a:8e:b4:21:d3:6c:e6:e2:d9:22:
ff:51:65:84:3d:3f:f1:c2:55:76:56:fe:51:3c:2d:05:02:75:
db:56:ba:6b:53:01:25:5c:3b:2e:28:fa:01:ae:02:8d:0b:48:
b4:4f:8f:d9:1f:1e:07:e0:35:9d:11:5b:50:65:42:e7:a7:62:
5e:82:13:3e:24:aa:31:ce:97:2d:06:67:6b:93:fe:50:bc:ff:
95:12:82:83:f2:33:9e:f6:00:d2:ea:36:f4:9c:0a:c1:e2:aa:
1c:0f:4c:42:49:6c:cb:6a:bf:a6:76:5c:f8:45:5e:53:3b:99:
1d:60:da:e0:45:24:24:3c:9e:8d:26:b8:cf:88:d9:ad:af:f4:
9b:f5:34:0d:22:3c:4e:c6:30:28:ef:93:23:cc:d5:55:2a:95:
bc:61:20:4e:4a:3f:c8:e4:f1:ec:02:e9:ba:d0:29:81:59:b8:
e3:bc:28:b6:8c:c0:c0:45:b3:d0:e3:b2:0d:cf:00:44:9f:42:
65:dc:38:0e:05:f8:f7:33:ee:0d:42:f1:90:6c:90:3e:ee:2c:
36:a1:16:66:4f:b3:ea:a4:e8:24:36:8f:ae:77:68:35:6d:a5:
7e:03:7b:03:6e:7b:2d:c5:dd:1d:04:2f:4e:40:06:1e:e1:9e:
80:50:b6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:42 2025 by rpki-client