Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/efe3095f-acf1-3557-a907-874511d2451b.roa
File: efe3095f-acf1-3557-a907-874511d2451b.roa (raw, json)
Hash identifier: OQck12JgT5G68or3pTt5Pkb0P62G795GBjwn0sYFtWw=
Subject key identifier: CA:78:49:70:6D:58:FD:88:C2:51:9B:93:FE:DC:CB:41:99:14:EB:51
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584913AC4270C6FF89507C48A100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/efe3095f-acf1-3557-a907-874511d2451b.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.66.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:42:70:c6:ff:89:50:7c:48:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=8736560d-1f21-487c-9279-de47f1ed7ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1c:43:8c:e3:04:ab:6d:9e:46:90:09:65:b5:
31:1b:9a:42:de:24:b5:c1:d4:cd:84:30:47:7b:eb:
d3:09:16:0e:26:a7:d9:c4:e7:d2:d0:35:5e:dc:ec:
99:f9:1e:f3:a5:5b:cd:82:b1:fd:a0:78:4f:d2:35:
14:6a:d8:b6:e2:e7:a8:8a:f0:df:df:99:ba:06:aa:
92:64:30:53:73:1b:da:b8:ac:0f:a9:2c:43:c0:b0:
64:a6:7c:b2:dc:35:51:c2:a8:47:07:23:6e:f3:d2:
86:eb:93:c2:73:eb:60:89:c4:ab:88:19:e1:d6:5c:
db:5f:ae:cf:25:6f:d2:ba:52:9a:c9:c2:d3:b8:00:
d6:17:e5:8c:5a:c2:2d:23:d4:c4:b4:eb:bb:e8:fa:
07:de:53:d0:41:8e:7f:50:28:38:e2:7f:05:c5:f9:
b7:97:19:a4:c1:bb:7a:9c:de:a7:6b:fd:f0:1b:c7:
eb:94:b7:04:00:1a:4b:52:cb:b5:39:10:04:07:25:
11:6a:f7:4d:e9:63:ab:e2:da:34:c1:85:02:f3:db:
ad:d1:e5:68:7b:67:aa:d1:6d:8e:09:2c:8a:ec:77:
1e:4b:15:31:ae:5f:39:08:8f:67:b4:23:ca:12:e4:
22:1a:ee:1c:92:35:24:b2:87:0d:b2:96:c2:a0:64:
67:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:78:49:70:6D:58:FD:88:C2:51:9B:93:FE:DC:CB:41:99:14:EB:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/efe3095f-acf1-3557-a907-874511d2451b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.66.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:b2:b1:fd:fe:50:ac:ba:5f:e3:6b:5d:58:ff:75:3e:6a:43:
20:85:85:73:51:08:83:54:f2:75:c2:3c:9d:37:2d:e3:7f:28:
81:6f:50:46:2f:99:6f:4a:fc:95:7d:1e:3c:c7:4f:fd:02:2f:
38:6a:0b:68:ba:7a:8f:f0:20:41:c4:fc:c9:8e:fe:83:fd:97:
40:1e:c1:f5:bd:c1:2b:36:3e:13:4e:8b:c7:20:38:a4:cb:a5:
88:da:0e:ac:d8:a7:3c:96:d7:9f:f8:8e:a3:eb:8a:6c:e2:07:
22:19:66:7e:87:70:f5:8c:6c:bf:a0:37:e4:65:92:19:f2:01:
e0:84:62:2c:5c:fd:f3:6c:12:cf:b0:3c:1b:7c:f7:e9:f4:22:
40:55:de:cd:2f:26:66:94:7a:36:9c:f6:f2:62:3b:b5:2a:0d:
c7:42:3d:5d:1f:f8:18:03:c0:19:48:95:7a:c6:78:06:1d:0a:
7a:e7:41:ef:49:14:40:8c:a2:f4:e6:35:d9:d6:a0:de:c8:9c:
6d:a4:65:0c:3d:fd:cb:1a:68:88:b3:05:66:97:15:d0:81:67:
8a:dc:93:f7:f1:99:aa:ca:0f:eb:e9:ec:60:6c:21:ee:67:5f:
0a:69:bd:8f:73:e0:d9:c9:45:4c:88:ff:62:58:52:e2:27:7d:
07:73:1b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:07:21 2025 by rpki-client