Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d00e9330-b4ef-35d7-8351-babfa62227c0.roa
File: d00e9330-b4ef-35d7-8351-babfa62227c0.roa (raw, json)
Hash identifier: fg7a6O2nXkDYlrGZsyYPYBrAM8E4jUeQy6BhlH8zyeQ=
Subject key identifier: F2:5D:93:85:6D:19:F4:39:82:AC:80:5A:7C:C3:AD:50:64:86:76:50
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858494E2EBC193ADD7C19216ACF80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d00e9330-b4ef-35d7-8351-babfa62227c0.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 35994
IP address blocks: 23.33.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:bc:19:3a:dd:7c:19:21:6a:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=db03ae32-f721-46e1-9a2a-8689888c70a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0e:c3:ca:9c:c9:ee:7c:ea:ac:86:d0:04:fe:
f0:13:1d:2e:98:bc:79:dc:31:a2:0d:04:47:a9:86:
ec:40:98:9c:3c:53:fa:21:33:d9:47:cc:27:22:85:
cb:e6:8c:0a:d2:c8:3f:88:82:e1:3f:90:cb:ca:ee:
d3:be:ea:9c:c5:9f:2d:29:7c:fa:06:0c:8b:08:0a:
f4:28:6a:c6:b4:9c:54:2f:d6:6b:ba:9a:b4:99:80:
1a:46:97:5e:e8:f4:d4:77:05:b6:8b:06:09:03:5c:
ad:fb:97:e2:16:36:cd:61:b5:3d:d1:44:52:b5:fd:
97:70:db:a0:32:0a:10:c1:5e:fc:00:d5:3e:da:4b:
6e:87:8b:50:8c:c4:89:3d:6e:ec:41:30:8b:97:c4:
7c:3e:d7:28:fa:3b:80:8a:72:3a:0d:77:07:b4:4b:
ee:5f:9b:ee:48:81:f1:29:e4:74:d1:bc:5d:a8:b0:
29:90:d1:44:f2:ac:0b:47:63:9a:e0:5d:c9:c5:b9:
2c:e3:da:79:d1:30:d2:5b:47:f0:4f:bb:69:7a:7e:
69:d6:35:c5:2a:22:50:a2:5e:5c:87:fe:0e:a6:41:
1b:d5:41:1d:51:08:0b:fa:f3:36:1d:51:79:0e:8c:
7d:2e:06:cb:69:63:96:e0:6f:d4:79:c7:a9:89:5e:
bb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5D:93:85:6D:19:F4:39:82:AC:80:5A:7C:C3:AD:50:64:86:76:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d00e9330-b4ef-35d7-8351-babfa62227c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.33.93.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:f5:33:d4:3e:21:6e:40:24:ad:3e:36:5d:95:42:d8:ab:3d:
6d:00:d9:31:fe:a8:58:c0:6c:1e:dc:f9:0d:c3:da:a9:df:8f:
8a:a7:85:67:80:94:76:32:3c:c1:b4:dd:b0:bc:c0:6f:fa:af:
93:a5:4b:68:90:56:51:90:76:14:dc:bc:f1:e3:66:74:c7:a3:
28:42:9e:cf:04:b0:bc:a1:a3:85:cf:8c:71:0a:1f:04:44:61:
6c:51:6d:17:38:ba:3b:17:ac:3f:ae:98:d6:ff:9e:26:9f:5f:
82:c5:c8:24:85:8f:2d:c3:e7:05:c1:4f:23:42:c1:38:3e:d9:
87:5c:70:61:f1:4a:c9:06:01:b2:1f:98:d4:98:ea:1d:7c:ce:
f7:e7:25:db:a6:5f:81:57:f3:43:00:8e:7e:ce:5b:7c:b0:6f:
49:63:d4:4c:f3:b7:30:af:83:07:01:a2:16:ec:71:32:12:b0:
8d:d4:4e:e8:fc:5b:bf:85:a2:60:08:27:32:41:a6:f4:5b:8d:
3e:ce:90:3e:4b:52:a6:66:c0:62:cb:e9:3a:1d:fc:cf:88:9a:
12:2a:b5:0f:7e:1c:e8:68:11:58:9c:73:d8:f6:fe:ca:6b:6e:
c8:86:01:ab:c1:65:fa:86:db:8e:a5:49:bb:a7:e3:33:3c:e5:
4d:e0:b5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:24:41 2025 by rpki-client