Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6601865-5d9a-33e2-b151-e7f988f4d90d.roa
File: d6601865-5d9a-33e2-b151-e7f988f4d90d.roa (raw, json)
Hash identifier: LMaMpdjMQbSM+mJBanQ7OeUbKwZHOLZX/N0n7P4DMgs=
Subject key identifier: EB:8C:88:BC:BE:5C:CE:C2:BB:B1:9C:E5:27:62:98:00:23:64:7F:DA
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848B8F0D5B031F66C03B45B6480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6601865-5d9a-33e2-b151-e7f988f4d90d.roa
Signing time: Fri 31 Jan 2025 02:00:39 +0000
ROA not before: Fri 31 Jan 2025 02:00:39 +0000
ROA not after: Thu 01 May 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.205.172.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b8:f0:d5:b0:31:f6:6c:03:b4:5b:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 31 02:00:39 2025 GMT
Not After : May 1 01:00:39 2025 GMT
Subject: CN=dc87925b-bf84-4b9c-9681-d3551581bbe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:23:9b:b7:7c:80:10:82:50:38:f5:6c:59:5f:
03:e6:89:d5:f3:fe:c3:f5:bb:17:c6:13:83:23:8b:
4b:26:3f:52:b7:be:b8:c1:69:5d:71:43:a9:b6:f6:
af:2a:f3:d5:5b:3f:5f:1f:a7:d4:40:a9:5d:99:cc:
98:af:92:ac:87:ff:5a:8f:1d:0c:ff:6f:1e:98:ff:
51:da:52:e1:cf:5e:80:e2:b6:71:30:98:23:48:5b:
6a:4a:2f:82:e5:75:dd:14:d1:06:d8:15:43:29:de:
32:80:01:96:75:8d:8e:e0:1e:51:1e:cd:e3:eb:22:
16:f7:b1:8a:12:fb:05:8f:0e:cb:6d:08:ef:96:71:
d7:0f:d2:a9:9e:0b:2c:1a:6c:9e:fd:95:35:7b:35:
25:b9:ab:eb:3a:a9:93:6f:83:56:19:16:cb:ff:b3:
23:eb:b1:36:63:db:48:df:81:17:7e:bd:3e:de:98:
5e:7b:66:bf:eb:f4:52:9d:9f:e1:ca:fd:5a:8b:fc:
bf:08:13:c6:2d:79:44:9a:51:98:90:32:c4:4f:79:
6a:41:63:ac:41:f6:25:a7:56:60:38:d9:81:f3:b2:
7d:9a:24:e0:10:60:20:13:4a:7b:2a:bb:b7:1f:ab:
32:ae:33:e3:25:69:49:cc:89:a4:c1:fd:ec:aa:6c:
36:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8C:88:BC:BE:5C:CE:C2:BB:B1:9C:E5:27:62:98:00:23:64:7F:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6601865-5d9a-33e2-b151-e7f988f4d90d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.205.172.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:7c:b7:2a:09:d8:64:86:b3:e9:0a:e4:3c:92:99:eb:33:e8:
97:36:f0:ff:78:03:56:36:2c:6b:25:f8:2a:9b:bf:da:d4:8f:
cf:a9:ae:28:9f:6e:cc:ac:bd:68:b8:1a:1b:e7:bd:16:bc:f1:
5c:a5:cc:db:3a:aa:90:18:7e:87:01:1c:c0:02:fe:4f:f8:9f:
c5:4f:d5:68:ba:01:ee:97:1e:74:84:04:16:db:e7:85:48:91:
32:0e:4f:e4:eb:8e:46:c9:75:cb:16:2f:1f:96:71:ba:da:35:
47:04:d7:34:d2:00:13:1a:8e:61:23:c5:3a:3e:e3:68:18:88:
e7:ae:e7:08:85:bd:ff:4e:07:c2:bb:fb:57:1d:ac:ec:df:52:
3b:1f:87:fa:40:95:8a:27:c2:06:6b:fe:e9:a9:60:05:5e:65:
61:11:cf:24:b3:cd:4f:14:d4:70:d7:d4:66:a6:51:7e:c7:aa:
ff:f0:78:ae:bf:d3:40:1b:c0:a4:96:dc:ec:f8:69:e6:9b:13:
ff:c8:73:08:ad:ff:6f:4e:92:3a:87:96:d2:05:cb:4c:e3:2e:
72:51:c3:77:c3:c1:2c:43:51:49:2c:46:ae:58:59:a6:2c:62:
ec:55:e7:b0:a9:6b:04:18:53:85:7f:29:86:bb:84:b7:7f:ed:
b6:74:91:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:01:35 2025 by rpki-client