Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6fda9a2-b506-3fe4-9ea4-441fb881dbc4.roa
File: d6fda9a2-b506-3fe4-9ea4-441fb881dbc4.roa (raw, json)
Hash identifier: 4wsHQxNgfhcvq12k23b0Lx1yy9ovT5mECywKykvGR0s=
Subject key identifier: 5F:29:AA:3B:2F:A2:BA:12:B8:04:00:15:12:55:42:8C:41:14:22:81
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849244E9C090E43389868158740
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6fda9a2-b506-3fe4-9ea4-441fb881dbc4.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 4761
IP address blocks: 23.3.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:9c:09:0e:43:38:98:68:15:87:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=f3968f99-c128-4c46-8f11-047416c05ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d3:62:42:7b:fa:92:e0:89:8b:87:92:6c:b0:
f8:9c:07:af:7e:82:49:79:ed:48:22:6a:22:bd:9a:
c3:3c:56:68:f4:94:33:58:a4:eb:ff:dc:67:f2:57:
e5:e0:b6:91:0b:45:07:d3:2e:54:ba:31:46:32:49:
49:45:ae:c8:c9:60:4e:f1:c7:80:fc:6e:d3:6a:4e:
c0:0a:8e:e1:59:8a:2d:72:96:39:74:c1:d8:3d:57:
c5:26:52:bd:12:b4:0f:c6:2f:b6:78:5b:4d:ac:5d:
30:69:eb:0a:e7:5d:89:71:3c:57:1e:e5:d4:df:15:
bb:33:5b:41:bc:27:97:f6:b8:6f:40:e3:1e:cd:5f:
8a:d0:9d:44:ca:a1:15:e8:ce:2d:16:f4:ef:ce:3e:
5f:7f:99:75:e9:56:24:29:f1:19:64:c2:29:0d:d0:
8f:a0:02:87:2f:e5:7f:f7:9b:c4:b3:24:6a:3e:5a:
80:f8:2b:ba:3f:39:01:51:ac:c1:84:b9:34:a2:7c:
cf:05:e0:e4:f4:ab:de:08:5e:a7:40:90:f2:9f:e2:
32:ce:20:06:4b:ac:1f:2f:15:60:74:e1:e8:f5:77:
b0:14:15:30:d8:3c:7e:88:36:f6:02:be:66:eb:25:
a3:83:bc:f0:ed:4e:97:fb:7e:2e:d2:d4:45:a4:d7:
7a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:29:AA:3B:2F:A2:BA:12:B8:04:00:15:12:55:42:8C:41:14:22:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6fda9a2-b506-3fe4-9ea4-441fb881dbc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.3.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:d2:4b:b0:3e:04:9e:ed:de:19:e9:39:7a:33:b6:c9:23:38:
d6:50:9e:f2:5d:7e:09:35:82:c0:88:42:e5:ea:0f:ea:fc:f4:
d2:68:6b:c0:ea:29:b7:4a:a8:5b:8c:7e:f5:2e:e2:13:16:4c:
3c:f9:c5:ed:e2:7c:74:81:06:44:56:73:09:52:6b:d5:3f:1b:
24:3e:1f:ce:bf:35:a9:a4:70:e3:f2:eb:81:43:22:65:9a:22:
58:0d:21:49:e1:ca:91:2b:3f:30:dd:03:b1:cd:b7:e7:5c:45:
a1:53:69:dc:eb:1f:67:cf:f9:b8:6c:eb:4d:0f:97:25:38:e0:
33:6d:6b:be:bf:42:2e:3c:10:fd:a4:f1:65:30:0f:cf:dd:20:
a0:ed:73:6f:f4:8b:cb:ef:2c:2b:96:f8:7f:36:8d:26:bd:94:
5e:99:27:2d:8d:72:b3:25:b2:98:99:93:a5:69:08:f9:63:5e:
69:a7:7c:d8:b9:8e:ea:f5:68:78:82:5a:be:9d:dc:03:d9:8a:
ce:ea:82:df:e0:76:8c:71:d1:9d:f0:c8:36:17:df:6f:5f:94:
0e:95:3e:ac:b4:e3:6c:3c:b9:09:11:cf:97:1b:f9:12:15:ea:
48:b9:f2:7c:bd:bc:49:56:33:57:93:fc:9b:5f:23:0f:4a:4e:
3c:34:6c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:02:42 2025 by rpki-client