Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5ace393-802f-3ffb-a49c-237f78a65c04.roa
File: d5ace393-802f-3ffb-a49c-237f78a65c04.roa (raw, json)
Hash identifier: opej77pBcGKDIK2Q7aOMBgfGJv9IL9GrY7jVdDnQrek=
Subject key identifier: 6A:91:6D:9F:1A:3B:DA:5A:F4:45:48:6A:35:C7:FA:5E:BD:AA:4F:9C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487B85BDD5891107A1A0EB6280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5ace393-802f-3ffb-a49c-237f78a65c04.roa
Signing time: Thu 09 Jan 2025 02:00:40 +0000
ROA not before: Thu 09 Jan 2025 02:00:40 +0000
ROA not after: Wed 09 Apr 2025 01:00:40 +0000
asID: 16625
IP address blocks: 23.42.192.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7b:85:bd:d5:89:11:07:a1:a0:eb:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 9 02:00:40 2025 GMT
Not After : Apr 9 01:00:40 2025 GMT
Subject: CN=87f8582e-bae3-45dc-9d30-cb66fac7bfe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:61:3f:b8:0a:76:22:7a:18:73:c6:9c:e8:
d9:01:8c:5a:80:ab:3b:9d:10:e2:7b:7d:36:d7:a8:
cd:f0:45:e5:5a:1f:21:59:22:a8:31:cf:4d:2a:72:
32:3a:20:69:fe:18:62:25:89:37:f5:1d:9d:aa:61:
d8:e1:d0:d6:8a:e0:25:08:c8:0d:99:8e:5f:d0:c6:
10:72:62:0a:88:a4:a4:d9:58:97:b8:3c:ac:be:97:
a2:a9:5d:a8:be:33:51:98:36:af:bc:17:64:8d:28:
98:76:54:86:e2:54:09:53:da:bb:35:50:84:20:fa:
35:d8:c3:ad:dc:4e:4f:40:3b:c7:c7:ff:0b:81:52:
b3:68:d8:ae:79:09:bf:80:90:c1:15:74:b0:a6:dc:
34:f1:5e:1e:e8:57:7a:4d:1c:81:38:66:e4:20:ff:
c8:ed:00:ad:45:d2:41:4e:80:5b:d6:6e:87:59:1b:
da:f9:a2:fe:29:79:3c:2a:7e:db:87:97:ae:07:27:
2c:16:6d:16:86:c4:23:42:eb:d5:8a:19:bd:44:52:
54:80:14:40:ea:c3:df:28:5b:9c:cf:ec:4a:1f:f9:
a8:80:d8:72:b6:b4:aa:51:af:1d:77:c2:4c:52:4d:
b9:83:35:34:44:32:fb:c3:66:52:d2:9e:45:3e:af:
b9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:91:6D:9F:1A:3B:DA:5A:F4:45:48:6A:35:C7:FA:5E:BD:AA:4F:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5ace393-802f-3ffb-a49c-237f78a65c04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.42.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:98:c5:be:0d:d3:4d:ab:ce:87:ca:e3:f2:9c:41:f8:be:62:
ad:2b:23:71:22:2f:4f:a7:5a:93:a6:f9:27:f4:17:30:86:18:
18:b6:93:da:16:0b:15:d3:b6:42:0e:48:78:11:4c:50:7f:67:
ff:6b:9a:86:c5:78:0f:79:d2:6d:a5:fd:ab:62:6d:c8:8f:f2:
fc:c9:6b:c2:46:7d:0c:a8:02:58:31:28:80:ad:ce:55:e8:3a:
88:09:92:89:cb:c5:c3:2f:a7:49:46:65:dd:9e:07:14:a2:3c:
18:fd:fe:5c:7c:2c:6f:f6:82:5d:15:4b:de:dd:a8:3a:93:34:
92:50:14:4f:a5:51:74:3b:a5:2d:19:1a:69:a3:38:6e:f6:fe:
8c:0c:59:c2:30:c3:75:22:c9:95:b5:eb:f6:4c:c3:67:5d:6f:
57:7c:34:0f:e3:0a:20:fe:5c:2a:54:58:8e:fd:f1:d3:9f:e0:
6e:6b:38:93:5e:e7:65:18:da:7d:42:7f:3b:2b:e9:2e:be:49:
9d:07:ce:56:3a:20:7a:72:f5:5e:3a:f9:5b:ec:6f:15:34:ca:
cb:52:05:df:88:5a:80:bc:61:87:2e:dc:f7:c3:f4:9d:cf:50:
69:a8:7d:02:1b:e7:b7:2a:ae:37:c3:03:17:b4:90:bd:94:5e:
23:a0:07:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:14:45 2025 by rpki-client