Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e91b329a-9516-332c-beca-df9a17f1cbe7.roa
File: e91b329a-9516-332c-beca-df9a17f1cbe7.roa (raw, json)
Hash identifier: t5ZfZBdS2UVGhzPex4njFm9a2Kg2DzYJ0NYPmPcAXlc=
Subject key identifier: EA:77:5A:34:8A:E4:0D:3E:0F:47:66:42:1C:12:ED:4D:83:99:F0:68
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849244E8E410B6A8E30E4951330
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e91b329a-9516-332c-beca-df9a17f1cbe7.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.5.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:8e:41:0b:6a:8e:30:e4:95:13:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=970727f4-d6bc-4890-a867-4bd05362e242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:47:4e:d6:20:b0:80:02:d9:b8:e1:12:b7:1e:
7c:00:a1:8c:27:6f:0b:75:b3:3f:67:4e:05:42:fa:
00:95:e3:bb:32:c3:5b:06:56:7d:12:c9:38:78:0d:
41:52:30:00:a3:17:e8:6d:94:62:12:c2:dd:78:5a:
74:8f:cd:18:8d:03:c2:09:34:f8:05:9c:9e:ea:47:
09:3b:d1:35:2a:da:73:d2:a6:fb:d4:66:d0:b9:fb:
15:5a:2f:64:e2:36:87:4f:8c:74:f7:ab:1d:f4:e4:
63:e3:44:a2:dc:39:d9:51:e1:f7:0f:92:49:cb:b7:
6f:c2:e8:d8:f7:c0:02:43:aa:5a:d5:81:28:f7:97:
02:cc:16:fb:7c:4f:b6:69:34:30:e6:68:14:66:f6:
54:4f:d8:ed:57:fc:81:a6:0d:ae:f1:d0:49:52:11:
2b:64:0c:12:64:00:8b:90:f4:eb:ce:f8:6b:d0:06:
3c:fc:94:5a:74:36:47:a9:31:5d:32:9c:15:66:70:
20:16:d0:de:b2:ea:a7:6c:b5:5b:7a:06:ed:67:b4:
0f:6d:7d:a1:6d:fc:23:d7:73:f1:0e:73:44:75:d6:
4b:12:ae:92:d9:68:dc:cf:ea:a9:27:36:3b:21:d1:
07:5d:5c:0b:2d:2e:d5:f4:57:b4:36:20:91:63:33:
41:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:77:5A:34:8A:E4:0D:3E:0F:47:66:42:1C:12:ED:4D:83:99:F0:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e91b329a-9516-332c-beca-df9a17f1cbe7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.5.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:22:f5:b4:87:c3:fe:c6:c5:70:d3:b2:2e:51:99:1d:a1:58:
0e:9a:e5:67:98:e4:48:4a:0f:2c:83:bd:3e:03:44:44:df:63:
a0:6f:00:51:f5:a9:07:65:68:0c:0f:52:06:68:a6:ed:43:e7:
e2:fb:34:9d:67:f0:e4:06:26:2b:a1:a6:78:44:47:64:81:7b:
68:c3:f4:98:e9:03:9b:b7:9a:42:3a:38:98:41:71:e9:5f:d1:
42:f5:fc:fc:a0:2a:de:bf:4c:78:5e:9f:6b:a9:ec:ea:e4:27:
a8:21:13:80:68:98:c4:3b:16:cc:58:50:b2:92:7b:6a:fd:da:
54:e2:33:da:62:7e:68:7a:4c:e3:d0:97:f2:78:99:da:e2:92:
98:84:1f:dc:94:56:e7:1d:5f:40:38:4f:e9:aa:3f:3e:be:ad:
20:04:98:03:99:87:09:de:fb:be:7d:5d:c7:76:13:89:62:e2:
18:80:84:97:b9:d1:09:b9:87:33:7f:48:36:41:5a:c5:a8:32:
9d:39:11:79:c9:10:db:3c:f0:b7:0b:8d:c3:bb:64:07:42:1d:
f7:09:a7:cb:a4:3a:d2:74:cc:d2:ba:b5:d9:4c:4d:c3:71:3e:
cc:c0:5f:40:f9:42:75:cb:06:4a:c3:71:19:f6:5c:ac:1c:6d:
9c:7a:66:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:24 2025 by rpki-client