Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8eff078-02cc-38a8-a5a2-871a9d576aef.roa
File: d8eff078-02cc-38a8-a5a2-871a9d576aef.roa (raw, json)
Hash identifier: 3nF23uMbC5WCJPVNIaGwUKHgbShLNPQ9wsF1x0E8HTA=
Subject key identifier: 61:DB:91:99:67:8E:83:08:CD:C1:4C:60:FF:F3:B6:40:51:00:FD:6A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487CEB4C295E95949E4BC48600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8eff078-02cc-38a8-a5a2-871a9d576aef.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.45.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:4c:29:5e:95:94:9e:4b:c4:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=6ee914f8-e79b-47ab-bed6-d2b2c845b8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e5:df:72:19:3f:a9:b5:67:0c:06:67:3b:7c:
74:eb:df:c2:0a:a5:d2:53:5a:4e:70:52:b9:e6:f7:
eb:81:34:e6:19:0a:06:43:1b:64:f1:91:b2:ee:55:
2a:e8:fa:10:28:5c:21:8b:55:58:ab:e8:1c:91:f3:
d5:5e:26:92:4a:66:e9:67:38:40:56:10:eb:45:56:
f3:a5:84:64:9d:9d:e4:a8:eb:f5:d8:89:4c:50:0d:
64:c3:23:55:15:20:55:97:0c:41:a5:14:a0:a3:68:
27:2e:88:99:94:4a:cd:f9:b2:8e:d0:2c:69:4a:62:
41:e5:ef:f5:ef:f0:c3:44:53:bd:5e:84:74:f1:f9:
97:bf:72:91:d1:21:22:ff:ba:7b:f6:2c:30:04:ae:
80:03:a3:40:d3:a9:d3:cc:6b:ce:cc:11:43:8f:c8:
57:2e:b0:53:08:87:cc:fa:f0:d4:f8:4e:c1:95:4a:
49:91:a0:a5:ec:37:b2:71:75:5f:cd:3c:cc:2d:f7:
d0:31:d2:be:bc:58:d2:6d:42:34:54:61:90:30:20:
f5:20:22:e7:5f:a9:f1:b8:16:f7:11:13:12:32:a5:
28:48:cf:06:26:00:12:94:91:9e:0a:57:98:da:66:
43:73:5d:ec:4c:13:f0:bd:01:39:1a:3f:40:8b:76:
30:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DB:91:99:67:8E:83:08:CD:C1:4C:60:FF:F3:B6:40:51:00:FD:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8eff078-02cc-38a8-a5a2-871a9d576aef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.45.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:32:d5:d5:af:f4:4d:0d:5f:ab:97:ef:ba:4a:cc:e6:e2:19:
be:e9:1b:34:ea:38:26:bd:ed:48:09:1c:7c:41:b3:2a:9a:80:
2a:2d:de:8b:3f:57:4e:e9:f2:85:d1:ea:c0:9e:ee:3e:c0:4d:
fc:fc:0b:c6:7b:98:1b:82:50:97:c5:ea:8f:96:33:cd:ee:7d:
45:5c:b0:9a:82:52:f0:b2:c8:3a:ad:74:37:37:76:e5:eb:b7:
02:06:42:89:d2:79:96:a7:5c:c9:42:ff:4f:e6:4c:83:5a:83:
2f:0f:86:05:e9:3f:11:b0:83:97:65:90:a8:cc:5c:a7:84:76:
df:df:4c:d5:dc:11:da:c4:92:6a:6c:f9:e2:f9:37:f2:58:f5:
f6:a2:64:7b:e0:66:d0:a5:3f:ca:34:a9:9e:ba:94:a4:bb:07:
57:0c:f2:0d:35:52:53:7d:a3:27:60:3f:77:9f:37:36:d7:df:
6b:ca:20:d1:2c:ab:2f:15:23:7f:f5:f3:e9:e9:ee:6a:fe:51:
2d:10:20:1d:36:50:60:a7:31:cb:e6:64:59:35:bd:6d:26:0c:
61:25:90:a0:00:1b:40:24:99:d6:f9:28:99:c4:59:d3:ae:26:
43:e4:6b:38:fc:f9:d1:32:05:87:de:cc:6f:4c:4a:e7:f9:58:
d1:20:9a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:01:50 2025 by rpki-client