Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb509440-cfb6-30de-97e4-4ab9a640e8bb.roa
File: eb509440-cfb6-30de-97e4-4ab9a640e8bb.roa (raw, json)
Hash identifier: LRklbN5+QHE+itFsKOQYZYXiUk1KdaTfAeNIcZFtfus=
Subject key identifier: 81:1E:16:B6:8A:A0:10:F1:ED:78:FB:96:E3:D3:C7:6E:C6:DA:A6:8F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858489340BA43540C24B3275A3A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb509440-cfb6-30de-97e4-4ab9a640e8bb.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 35994
IP address blocks: 23.217.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:ba:43:54:0c:24:b3:27:5a:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=7db79eec-4a2a-44d3-af6d-a65d4c17c449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f1:6b:71:82:38:14:98:b8:8a:50:2e:30:23:
e2:ae:e3:aa:54:45:09:0b:18:b3:4a:3d:da:f6:93:
32:77:49:66:d2:cf:76:33:50:24:09:64:df:db:4e:
34:80:28:28:df:14:2c:70:3f:39:6b:68:0c:66:a8:
aa:e8:48:12:07:3a:20:6b:98:8c:b7:70:2b:6b:59:
26:77:1e:ea:a2:6a:81:76:00:92:29:64:c1:69:03:
0a:84:40:65:74:6c:dd:33:60:55:bb:c7:36:21:3a:
b6:76:24:02:9f:cf:91:74:dc:bf:23:22:52:b0:d4:
1a:f6:39:77:c7:d8:93:6a:c8:ab:0c:de:5b:f0:db:
b9:51:26:a4:47:75:58:e6:12:fe:43:44:4a:5d:44:
a4:e3:64:3e:56:96:5d:34:06:70:05:00:a7:52:05:
87:ce:aa:57:fd:da:65:70:0d:b5:a8:c9:7d:19:fb:
2c:e2:83:ce:a5:c5:84:86:4c:75:93:21:5f:fa:7e:
9f:41:92:25:58:4f:fa:ef:80:8d:c3:6c:f9:e1:67:
f8:b3:6c:c9:b6:3a:3e:f8:75:13:d8:7b:3b:5c:ed:
25:d5:3c:20:57:7b:41:9a:1c:15:86:84:1c:a9:8a:
ff:a1:94:d7:e4:0c:fd:d8:94:38:79:25:0c:82:4e:
db:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1E:16:B6:8A:A0:10:F1:ED:78:FB:96:E3:D3:C7:6E:C6:DA:A6:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb509440-cfb6-30de-97e4-4ab9a640e8bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.217.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:10:cf:89:de:2f:d2:01:92:f5:50:ca:78:cb:c0:0b:72:1b:
87:0b:09:0b:4c:b4:a3:13:5d:96:67:61:c8:e5:93:28:7e:64:
24:fc:c4:7a:52:22:6c:b4:69:b1:68:fc:97:ea:4b:9b:fb:cd:
76:1d:77:e8:44:10:2c:46:27:45:7d:77:a5:dc:c4:62:5e:26:
f1:4a:7c:04:67:d4:d3:aa:8e:e8:57:f8:72:cf:95:45:b3:51:
55:dd:47:1d:dc:ac:75:85:a0:c5:ab:94:31:dd:3d:40:51:29:
b4:0e:8e:ca:16:b5:53:5b:b1:b0:e8:9a:04:17:d2:bc:39:77:
d2:f5:3f:2a:21:b7:e1:21:a5:28:f6:8d:b4:8c:2f:8e:c7:e6:
1d:61:c0:1c:c8:73:21:5f:d4:a0:b7:77:c8:63:a1:9a:a8:78:
45:e2:24:1f:a0:c8:50:ae:66:f3:58:48:d2:d8:a0:cd:28:d9:
ac:81:85:20:fb:2f:39:94:b3:0c:4a:83:c3:8d:d0:9b:26:d6:
1b:b3:88:e3:f9:a8:bc:fc:54:ac:c9:ca:26:e1:f9:90:b0:02:
85:bf:2a:f6:af:ed:c6:d0:45:80:df:eb:f6:6f:77:10:60:ba:
96:c7:e2:0f:2d:e0:ac:5e:64:56:0c:cf:7c:ad:58:23:f0:15:
41:29:80:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:23 2025 by rpki-client