Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de63fb8d-e894-3e42-8c10-e65e181bd2b7.roa
File: de63fb8d-e894-3e42-8c10-e65e181bd2b7.roa (raw, json)
Hash identifier: eolDw384K63JXoLzjf9BjgsYrZXPR9HWIbbTIfXoTrc=
Subject key identifier: D6:6D:25:30:0B:AA:CE:BC:68:0E:AB:3C:15:F6:21:3C:30:C1:4C:6A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849244E8E84D660D9379D170000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de63fb8d-e894-3e42-8c10-e65e181bd2b7.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.6.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:8e:84:d6:60:d9:37:9d:17:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=485f7199-94cc-406b-a6c5-02822665034f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:10:84:dc:93:8e:fa:67:5a:a5:a8:94:27:99:
ea:32:77:e2:b9:79:37:d2:5d:24:c0:7c:75:cc:cb:
52:bf:09:fd:45:c8:6e:e6:9e:52:b1:02:3a:c9:8d:
6b:a9:d9:eb:31:b4:a1:b8:4b:3d:d7:85:a1:d3:6c:
10:1f:94:b6:e8:34:6f:00:c3:81:1f:aa:25:e5:b8:
aa:15:b8:e2:eb:73:a7:1a:82:db:f9:49:a3:bb:76:
cb:1c:3e:80:fa:3c:18:68:38:00:69:a6:bb:1c:a2:
fa:a2:cc:3a:aa:55:7e:ac:4f:b3:02:4e:45:08:74:
43:f6:37:de:ad:3a:0b:de:03:dc:65:25:5d:f1:f1:
08:53:8a:25:70:a7:52:a2:25:82:64:e5:c5:32:06:
31:5f:31:19:19:af:9d:fe:23:a9:7e:78:6a:44:2b:
85:fb:bf:ee:73:f9:bb:23:2b:e6:2b:6d:22:c5:29:
db:0b:ee:ff:8a:11:12:83:51:5f:0f:fd:62:87:d6:
1e:75:6b:28:24:c6:ad:3c:9d:53:7c:8d:cc:47:28:
4d:40:52:e5:51:ec:65:98:85:f4:b1:4b:32:2b:9d:
46:aa:96:49:7f:83:55:a9:9f:b6:2e:7a:6e:96:25:
08:7e:50:1d:35:7c:87:df:2f:38:7e:00:a8:14:36:
73:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6D:25:30:0B:AA:CE:BC:68:0E:AB:3C:15:F6:21:3C:30:C1:4C:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de63fb8d-e894-3e42-8c10-e65e181bd2b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.6.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:2c:dd:97:db:56:ca:93:43:27:10:a4:e8:41:90:2e:76:7f:
9d:b1:71:e5:6a:9f:5c:af:39:11:ec:a5:5f:b6:21:31:24:6f:
d4:16:7a:38:48:99:a9:7e:af:fe:9d:6c:02:4b:ba:89:48:fb:
83:e1:26:4f:2c:00:4e:aa:18:4f:52:b3:af:ba:d5:5c:5c:1b:
e7:c2:f2:7c:ee:7a:01:8f:7e:5a:1e:69:5c:0d:e0:95:18:99:
01:d1:4c:3f:04:d3:0c:1d:1d:2e:3a:86:3f:75:97:3a:94:eb:
9d:2a:0d:dd:65:c6:46:ca:6d:59:f7:4e:6d:2e:b0:07:b0:32:
0b:60:33:72:bc:eb:90:db:84:07:25:b0:bd:b4:3c:80:e1:bf:
62:a2:9c:d5:94:04:72:b6:a5:74:49:07:2f:c0:b4:f2:20:c8:
96:e2:02:5c:8d:a1:fb:c5:bc:8b:d8:81:6f:db:63:ad:64:1b:
6f:9a:79:66:ed:36:9a:b3:7f:6e:0d:98:24:12:fd:05:30:de:
6d:09:46:cc:ba:53:d0:ad:17:55:0e:77:fe:32:74:f4:5a:95:
8a:b1:28:e8:82:de:55:38:83:9e:e5:3a:e8:19:fc:06:f0:2b:
c8:23:f9:b0:05:7e:a2:5e:a9:2a:20:5c:2f:f9:43:bb:5e:ca:
74:5b:b4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:22 2025 by rpki-client