Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f07c35fe-3942-39fd-a6a2-23752f27de1a.roa
File: f07c35fe-3942-39fd-a6a2-23752f27de1a.roa (raw, json)
Hash identifier: /W7JU7lHJHJ8lvaAWuYJ0Rsgn1CNMjHkW53wpz+9RgA=
Subject key identifier: E6:DB:F4:63:19:0D:9A:90:08:FC:2B:BD:9A:19:B0:0F:27:93:91:AB
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487CEB776BEB009AB68B2F97A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f07c35fe-3942-39fd-a6a2-23752f27de1a.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.45.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:77:6b:eb:00:9a:b6:8b:2f:97:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=431b4e68-4b69-49cb-8ff3-1815239e8e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:51:ed:71:c1:77:5a:13:4e:70:ff:3d:11:9b:
02:c0:ca:00:14:d0:08:14:48:da:56:99:86:6a:72:
e8:fb:ce:e6:f1:e1:92:36:1a:92:bc:db:27:15:8d:
ed:a7:fb:81:42:f5:79:3a:a6:d1:e3:f3:06:35:55:
30:18:48:16:26:62:ff:b3:4c:f4:ed:97:eb:b1:ac:
b8:b2:fc:03:f4:10:35:62:91:cf:ae:22:91:b4:a5:
1b:55:da:06:20:81:2d:d5:e0:9d:a4:4b:d8:40:cc:
fb:39:db:81:2e:2b:d6:e5:cf:5e:d4:98:72:4d:fa:
63:34:fe:d8:99:e3:7e:49:c4:ed:ac:64:b6:5b:52:
f7:24:07:d6:e5:2c:ae:49:20:8e:d6:6b:c2:fc:53:
21:42:a9:b5:e9:76:b4:58:f5:4b:6e:2a:9f:8a:5e:
a9:be:f6:4f:22:e1:c7:9b:7f:13:a8:24:b0:be:19:
59:61:37:d6:95:90:3b:5a:8d:62:f3:98:34:1d:bd:
1d:79:e0:07:ac:80:0b:02:75:94:5b:ed:cb:c0:81:
c3:ec:31:77:09:c9:7b:be:ff:85:37:1d:52:6a:a3:
50:8a:83:76:0a:f9:2a:e3:44:9d:a8:64:f0:45:1b:
66:1c:02:34:9b:2d:53:53:e0:bb:07:61:54:13:95:
38:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DB:F4:63:19:0D:9A:90:08:FC:2B:BD:9A:19:B0:0F:27:93:91:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f07c35fe-3942-39fd-a6a2-23752f27de1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.45.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:19:95:4b:b7:01:02:ad:eb:db:4c:9d:10:33:b1:69:41:f7:
a3:62:98:89:ad:cb:fe:a8:6e:07:8b:55:d0:8b:b4:d4:83:27:
b4:e9:20:04:91:66:ca:b6:00:a2:ab:32:6b:34:2c:1c:2a:99:
be:dd:6f:ca:22:80:23:29:3a:75:d3:ac:f2:9e:c0:0c:eb:f7:
0c:b2:46:28:27:2e:3f:fd:d5:d3:90:ce:de:80:aa:e3:9d:45:
09:f9:b0:ab:06:3d:44:64:64:38:93:48:c0:f1:81:32:30:a1:
b6:8c:dc:d6:4e:e6:31:ee:f0:e1:0a:fd:bc:5a:1b:c8:8c:79:
ac:8c:b2:41:05:76:6b:8e:57:40:57:39:af:1a:72:20:76:1d:
3f:52:06:6d:5f:30:fc:b0:37:d7:df:d9:31:ca:4f:c3:cf:55:
52:43:d0:ef:4e:d8:41:0e:c9:e4:de:3a:4c:05:90:be:ce:b3:
d5:5f:59:61:ef:b8:1a:2b:01:fa:b3:92:13:cd:fa:92:3d:4e:
ec:8e:cd:ab:6d:46:19:e2:16:eb:f3:4f:c0:de:d3:37:16:a8:
23:b0:5f:d6:d3:b0:d0:31:55:c9:59:15:0f:95:2e:06:91:5e:
d6:13:4e:14:52:b5:57:5a:df:d9:6d:7f:bf:a8:93:41:bd:8e:
1d:12:13:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:49 2025 by rpki-client