Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec127138-2ead-35be-9e03-621d8eab2d2b.roa
File: ec127138-2ead-35be-9e03-621d8eab2d2b.roa (raw, json)
Hash identifier: NMoZlncgASjJrvcBcKJPHP75scKmL7ivBtLKhnoGn6E=
Subject key identifier: 01:7B:39:75:B4:68:D4:DA:8C:AB:04:4B:41:35:83:9E:11:11:B1:85
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584910E1840387C997619FFB7F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec127138-2ead-35be-9e03-621d8eab2d2b.roa
Signing time: Mon 03 Mar 2025 14:00:53 +0000
ROA not before: Mon 03 Mar 2025 14:00:53 +0000
ROA not after: Sun 01 Jun 2025 13:00:53 +0000
asID: 35994
IP address blocks: 23.66.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:e1:84:03:87:c9:97:61:9f:fb:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 3 14:00:53 2025 GMT
Not After : Jun 1 13:00:53 2025 GMT
Subject: CN=cbb378fd-e52a-411a-a4d7-7f6fa502a61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ae:a2:57:06:0c:0a:e7:a4:97:68:40:73:bb:
2b:84:8f:81:5e:d1:ab:9a:ec:8f:84:e8:b9:db:85:
6d:28:e7:8e:b7:58:d6:a5:29:0c:03:56:f2:d2:0f:
5a:67:7c:33:37:bc:27:77:97:eb:14:56:f8:f6:6b:
39:87:de:cb:e6:b4:e7:91:e2:79:f7:f2:fa:84:e4:
6b:3e:ab:b4:02:79:5f:32:ff:18:39:a4:d1:f4:df:
61:c0:94:7a:26:0a:65:bd:22:d0:2f:ec:1d:c5:86:
6a:62:c4:28:70:ee:0a:99:f0:1f:0f:41:33:f1:d0:
7a:6c:ff:84:da:1d:3d:00:2b:04:b7:28:a5:73:b8:
40:6e:b6:2d:26:d2:52:c6:2f:15:f8:e9:14:01:38:
6c:5c:79:46:5d:7c:43:20:8e:e1:b6:3a:74:fb:4f:
fc:0d:3a:a4:fc:0f:91:45:03:0d:5c:cc:cc:36:62:
f7:04:ca:6f:88:63:a5:3a:db:46:3d:ed:60:13:07:
c8:0a:90:e3:bd:e1:2a:07:9a:85:ad:e9:26:eb:15:
0f:91:a6:d3:e0:2c:c5:33:d9:29:bc:53:be:36:62:
fc:1b:75:cc:4a:b0:08:bb:03:8e:b2:c3:07:00:bc:
9e:4a:d8:cf:6d:e2:de:40:08:60:42:36:d4:1e:5e:
5d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7B:39:75:B4:68:D4:DA:8C:AB:04:4B:41:35:83:9E:11:11:B1:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec127138-2ead-35be-9e03-621d8eab2d2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.66.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:cc:95:13:76:e6:77:0f:ed:d5:f8:f4:e2:5d:dd:27:7b:f2:
66:a1:dd:e0:5d:9d:ba:c6:34:d5:79:c7:18:92:ff:29:93:77:
df:a4:52:36:e1:9e:00:ce:5c:17:e5:e9:be:0c:1f:fd:38:00:
d4:28:2f:4e:6c:c8:b4:03:2f:b1:7f:e4:2b:6a:92:2d:1f:9c:
f7:dd:07:65:3f:4a:d8:4b:d5:01:6b:71:ce:38:2d:40:f8:a1:
f1:39:90:4f:3c:7c:a5:9a:93:b2:fb:3c:ed:3f:28:2c:7d:5e:
c7:b3:50:03:a8:3d:47:a9:3c:fa:fe:d1:5e:2e:be:1e:97:f6:
2b:c8:b0:db:76:7a:c8:3f:4c:55:90:cf:7f:7b:e1:ec:75:07:
a6:4d:3a:e9:c1:f3:31:3c:69:e2:30:db:15:2d:d0:17:f5:68:
b3:ae:fb:47:6d:21:53:3c:08:9e:6d:38:51:12:02:ac:94:f2:
d9:94:bd:e5:e4:6f:76:c8:50:a5:b2:2d:52:06:7b:96:7f:da:
5a:24:02:1f:0a:b5:13:d5:3c:26:6c:ad:8c:b3:94:20:ee:d0:
54:10:6d:35:f8:45:72:d8:0a:0f:1a:6d:24:8b:1f:23:e8:12:
8b:99:8a:89:16:d3:d6:a1:ad:11:00:f1:18:69:e3:48:53:0d:
2e:09:7f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:13:27 2025 by rpki-client