Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d26d6535-e872-3bbb-af02-e19e8de55afd.roa
File: d26d6535-e872-3bbb-af02-e19e8de55afd.roa (raw, json)
Hash identifier: ICeGd32ly2DdtSTckM5fl6q8alBpD9GWVuT+EPz2fKA=
Subject key identifier: 51:68:91:5C:63:1C:3C:A9:98:55:08:4F:6F:99:D3:CF:F8:F7:ED:9D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858494CC9571201E7D59668132300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d26d6535-e872-3bbb-af02-e19e8de55afd.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 16625
IP address blocks: 23.32.84.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:57:12:01:e7:d5:96:68:13:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=a6d13368-0262-45c3-b09e-0f23840a84cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3d:05:cc:52:2a:6f:92:f3:7c:20:df:e9:c5:
c9:f8:c5:41:61:ab:a3:bd:ea:04:b4:c9:ee:47:3a:
40:28:5b:30:98:e8:6e:0f:62:f3:e4:bd:46:3b:9e:
a6:cb:23:1e:23:ed:3d:d3:f6:a5:33:d8:01:b2:a9:
04:01:89:46:ed:6b:da:f6:c2:85:bf:3d:45:8a:2b:
03:eb:a1:8f:8e:84:57:3c:97:40:77:bb:24:23:e6:
1d:31:9c:b2:e5:82:98:dc:7e:26:0d:a5:a2:ed:92:
f0:76:44:c8:34:89:7e:6f:7f:2f:dd:c1:27:00:fd:
2f:34:49:a0:1d:d3:40:28:f3:ad:25:42:a2:c4:a1:
d4:55:82:0c:0c:b8:53:ea:07:e7:9f:9e:5d:86:de:
5d:a9:77:25:30:38:90:4b:13:dc:fe:81:e7:09:bc:
9c:06:02:f2:46:c2:dd:21:86:f9:b1:1a:a2:15:43:
93:fb:92:cb:28:52:cb:7a:be:be:ad:5d:dd:c3:36:
4c:f1:29:1c:ed:d6:e9:3b:3c:9d:73:7e:b9:27:75:
c7:91:48:90:6f:b7:3e:55:3b:ef:fc:0a:a6:1b:3b:
66:6e:4b:4b:1d:04:cc:ff:44:6d:4b:97:43:1e:f0:
73:e3:00:69:a3:f3:b3:28:06:7c:fa:97:3f:f8:b9:
ea:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:68:91:5C:63:1C:3C:A9:98:55:08:4F:6F:99:D3:CF:F8:F7:ED:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d26d6535-e872-3bbb-af02-e19e8de55afd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.32.84.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:fd:4d:01:11:5c:0b:46:f0:6c:a4:14:14:a1:ab:3b:3a:10:
1b:6f:87:e3:f2:84:cb:42:64:04:e9:9d:7b:92:02:ca:3f:6b:
9e:07:61:39:9b:22:34:a7:eb:6e:49:dc:6f:d3:21:6b:41:ad:
c9:1d:55:a7:3d:9a:0c:a3:0b:19:85:95:0d:2b:88:15:79:ed:
f1:63:36:76:48:d7:a6:99:71:17:48:5c:7a:48:e9:8a:84:c4:
c5:46:c7:0c:53:d0:d9:cc:71:7a:2f:14:08:f0:b8:1a:2d:b2:
8c:67:ab:6a:77:fe:39:ea:21:5e:d0:fd:83:3e:91:f1:ed:fb:
93:9e:be:cc:52:bb:97:81:47:d2:d4:fa:e3:6b:ad:5a:65:a7:
34:7f:ec:77:f2:ee:a1:74:0c:02:3f:a0:3d:fb:59:11:97:9e:
a2:6e:66:c1:00:fb:b5:b8:6e:1f:9c:e6:d7:46:cb:f9:95:eb:
aa:17:2c:41:8d:11:83:26:31:bf:9a:9d:dc:9a:d6:af:1b:69:
2f:00:48:21:06:d0:c4:eb:cb:7a:f4:0d:4f:11:06:c6:fa:0c:
5a:b7:ad:bd:d8:44:aa:97:6d:05:04:72:6c:ab:25:4f:20:c1:
83:42:be:5e:7d:a4:c1:e4:0a:29:e9:28:13:ec:9f:b9:5c:65:
97:5a:74:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:34 2025 by rpki-client