Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e9b0854a-fb5a-3afa-8c2a-f8889c5c4bb4.roa
File: e9b0854a-fb5a-3afa-8c2a-f8889c5c4bb4.roa (raw, json)
Hash identifier: 2pMBTmtrFosKHdTqQt6zB+lpsdBfSzUURijL4xEYOa8=
Subject key identifier: 3D:E5:A2:2A:85:01:FA:6A:3B:90:73:C6:B2:FB:B9:2A:2F:04:E6:32
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848C9B0E2DA350D1AB820455C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e9b0854a-fb5a-3afa-8c2a-f8889c5c4bb4.roa
Signing time: Thu 06 Feb 2025 02:00:39 +0000
ROA not before: Thu 06 Feb 2025 02:00:39 +0000
ROA not after: Wed 07 May 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.219.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c9:b0:e2:da:35:0d:1a:b8:20:45:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 6 02:00:39 2025 GMT
Not After : May 7 01:00:39 2025 GMT
Subject: CN=862881c4-aacc-4d10-8895-3d0ce287d210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:20:d1:59:11:4e:e1:87:18:36:24:20:de:46:
e6:d7:e3:17:5b:7a:33:b4:40:e1:54:9a:e5:28:9e:
c1:b7:cc:de:83:95:d0:8f:80:ac:fa:7e:41:50:ab:
4f:3f:47:8a:61:07:3d:b6:28:6a:af:59:2c:03:d7:
1d:8f:c4:71:f3:54:13:43:f2:bd:5a:2a:ec:10:09:
18:d6:a0:fe:08:be:4a:f4:27:51:d4:ba:a8:b7:3c:
4f:64:12:2a:cc:e6:9b:dd:c9:77:8c:12:d4:09:a2:
3a:e0:39:79:7d:16:8c:a0:af:cf:4e:aa:a0:01:a0:
fe:de:5c:f1:2e:8c:52:e2:72:86:8d:59:32:14:20:
42:f3:59:51:a9:c9:15:2e:2a:db:98:6e:17:b5:ef:
ea:ed:89:43:b2:9b:5e:53:87:d7:59:cc:d6:78:94:
c4:ed:36:47:36:08:ca:86:34:ce:7f:67:89:ff:0f:
a2:66:e5:08:d1:cc:5d:6c:ef:05:36:39:79:f1:3c:
aa:92:5c:6e:31:50:5d:c7:23:20:3a:94:f3:a5:c6:
4e:45:61:11:9b:4f:0a:b3:b3:cc:c8:32:4d:93:95:
b4:4f:9f:31:16:ab:fa:30:f4:70:f5:61:a4:58:3d:
53:42:c9:7a:b2:8e:a7:a0:1d:a4:f7:08:82:ca:6b:
d6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E5:A2:2A:85:01:FA:6A:3B:90:73:C6:B2:FB:B9:2A:2F:04:E6:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e9b0854a-fb5a-3afa-8c2a-f8889c5c4bb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.219.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:ca:e3:1c:d5:2f:87:92:d9:b3:30:be:87:72:37:34:7f:b6:
ba:a6:6a:e9:4a:52:ae:3d:bf:f5:0d:5e:ea:df:4a:45:d3:f1:
ed:ba:10:c9:f7:d4:90:4d:c3:03:36:1c:93:7d:89:ec:ac:81:
bd:21:9f:04:5a:69:b5:bf:8b:75:2c:4c:da:09:72:55:e8:f0:
7a:6b:b7:6f:d9:d7:f8:e9:d7:f5:b2:b7:fd:64:ed:d8:c0:fa:
27:36:01:b6:9f:52:31:80:8c:76:8b:01:dd:41:b4:0a:46:02:
35:87:29:c9:a9:4f:ea:7b:5c:fa:65:10:d4:29:50:02:69:18:
0b:b0:ed:09:67:05:cc:fc:0b:0e:3c:40:fa:1b:d9:1d:ec:e0:
02:c8:c7:08:03:e4:8a:b9:72:f5:e5:fa:53:4a:39:33:7a:8a:
c2:40:b5:a5:67:09:2f:f2:52:de:bd:38:9e:c2:10:48:06:71:
dc:2d:bb:dc:bc:e1:f5:89:71:a3:8e:a4:31:81:75:1a:81:b1:
e3:2d:56:0d:2e:e2:10:86:04:6f:0e:e7:19:db:80:98:ed:79:
4f:f2:e9:84:dd:2e:bc:66:fe:ee:8c:74:a0:d2:26:bb:c3:da:
be:e4:a5:b1:48:6c:3c:cc:32:f5:8f:b9:a1:3d:4a:91:0c:97:
ac:51:c6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:41 2025 by rpki-client