Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec460a15-c06a-33e9-be03-a26d9000755d.roa
File: ec460a15-c06a-33e9-be03-a26d9000755d.roa (raw, json)
Hash identifier: PrFFfpDdxM7nuANPCimv54BZn0kSHv+oN6Q60sPYE0Y=
Subject key identifier: 2D:B8:D2:BA:4A:11:54:CE:50:2C:A7:3E:F3:61:C4:48:FA:14:D6:9A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858491D7165B38C9EDE0A6E3871A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec460a15-c06a-33e9-be03-a26d9000755d.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.213.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:65:b3:8c:9e:de:0a:6e:38:71:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=5aa36bfe-6302-4bb6-bf54-0070409e641e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:35:6e:06:76:a1:b7:94:04:27:89:8d:ee:f2:
b1:6c:30:cc:c3:1d:41:26:09:93:77:96:0c:39:03:
9f:9f:ad:8e:8d:6d:0d:09:fb:e6:2a:45:ad:27:6b:
a5:63:ca:b8:1e:81:bc:f3:72:b9:e8:4e:bf:8c:32:
b3:77:00:b7:d5:58:36:dd:91:b1:0f:52:06:c2:17:
94:eb:fb:f4:5d:47:99:82:1b:31:da:8e:9f:6f:df:
ab:3d:7c:3d:be:10:de:84:40:e6:00:55:7d:1d:65:
a0:f1:e7:2e:86:fd:8e:46:17:f3:74:76:4a:09:4c:
de:5d:ec:08:03:25:8d:ab:50:45:1e:96:81:89:28:
de:41:c2:94:1c:3f:c9:8c:c0:20:07:a1:42:92:3c:
a0:82:67:cd:ee:52:97:c8:58:1a:0a:cb:8b:08:d0:
da:c2:cc:e6:95:25:8a:0a:09:e7:13:ea:be:8a:cb:
cf:a6:9b:b3:a5:b3:31:b0:19:23:7e:f1:5e:d3:7b:
f3:f0:a6:d6:b7:14:0d:ae:a1:bd:37:70:d5:b4:eb:
78:a0:0b:63:fd:77:00:d6:d4:3b:33:cc:66:ef:05:
ac:75:7e:78:53:d5:a3:52:44:25:9d:33:69:8f:1f:
f0:f3:f3:20:20:ff:42:69:d1:57:70:46:54:31:9c:
05:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B8:D2:BA:4A:11:54:CE:50:2C:A7:3E:F3:61:C4:48:FA:14:D6:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec460a15-c06a-33e9-be03-a26d9000755d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.213.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:cb:c8:e8:99:6c:9e:96:39:5d:32:45:3a:19:f3:4c:60:91:
6c:e5:7f:46:73:d0:7a:e2:49:87:32:81:80:6f:44:0b:f7:c8:
d6:9e:32:e4:50:52:4a:ba:e0:4a:6e:93:88:ea:ba:3f:3e:fc:
ae:cf:41:66:8b:c5:20:82:47:c8:d6:24:12:8c:ef:92:8f:07:
2a:4d:ca:b1:38:c2:70:41:2e:34:f5:bd:02:24:b4:1f:2e:35:
29:aa:26:63:ea:ed:c6:9a:f1:31:0e:82:5b:35:66:12:f6:40:
03:1a:63:fe:dd:cc:0b:ca:16:bc:2e:de:e0:97:0a:38:6c:38:
db:b1:3e:dd:e7:65:71:92:e7:31:74:b8:86:b2:ee:d2:79:28:
e3:09:2d:70:1d:83:8f:23:9d:80:e6:08:50:d1:0a:66:6f:04:
03:dd:b9:5e:86:bf:73:fd:55:4e:e9:b1:ea:9f:cb:5c:a1:98:
3b:3d:ec:58:5d:9e:e7:d1:67:1c:31:ec:22:86:3a:6a:80:0d:
80:7e:b6:67:93:3a:d8:48:92:df:cf:94:ad:6d:c5:e2:22:fe:
13:85:79:1c:64:ee:96:43:ed:cc:99:f2:59:89:57:c2:41:79:
fa:8c:94:4d:c4:58:32:79:92:81:13:8c:01:7e:d4:19:a3:2e:
05:78:04:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:36 2025 by rpki-client