Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0d39d8e-c0ac-3902-b2be-246fca1d7374.roa
File: f0d39d8e-c0ac-3902-b2be-246fca1d7374.roa (raw, json)
Hash identifier: pMClS3LSkSryAI3saWnm8hRtBhye2ybq/cPO2wxtISE=
Subject key identifier: 5C:F1:6B:C7:FF:CC:BA:04:47:AB:1E:C6:DD:01:C7:FC:87:DA:41:C2
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848D641184825B0D838ABEA1AE0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0d39d8e-c0ac-3902-b2be-246fca1d7374.roa
Signing time: Mon 10 Feb 2025 14:00:52 +0000
ROA not before: Mon 10 Feb 2025 14:00:52 +0000
ROA not after: Sun 11 May 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.53.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:41:18:48:25:b0:d8:38:ab:ea:1a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 10 14:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=3b297d9f-f0cc-41b8-9f7e-71c31eccac74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9f:82:3d:83:fd:00:ee:97:0b:ff:50:2c:53:
c2:34:e1:62:5b:ac:bd:27:4c:ee:87:2e:b1:34:7f:
7d:cc:71:72:66:9f:f5:31:bf:d7:02:89:4b:8d:42:
02:2b:8c:c1:d3:53:eb:28:9b:09:e4:90:1a:d5:be:
af:05:88:ae:21:0d:da:f6:9e:d5:81:2c:3f:7f:3d:
e5:c2:0d:3c:f9:88:c6:c8:b4:0d:34:40:9f:e7:4d:
79:74:55:75:0b:78:c3:db:38:3e:a2:8d:ef:e3:d4:
ce:87:80:3a:b6:89:b5:19:38:bd:45:7a:80:8f:1c:
c6:90:36:25:0e:b8:f0:5e:02:70:c4:de:d4:d3:40:
8d:54:7a:6d:a6:be:74:b4:b6:12:25:6d:f5:d0:f8:
72:26:35:06:10:a3:6e:cb:89:d1:5d:28:fe:7e:9a:
6f:a8:af:82:08:0c:b3:2f:64:d2:27:33:65:5a:3c:
52:49:7f:aa:59:78:ca:2c:3a:24:a9:45:35:e3:88:
d5:ae:53:ae:05:46:46:bf:68:62:5f:20:e2:56:60:
6c:c6:0d:73:f1:37:4a:2a:ac:43:e6:bc:29:8e:3f:
59:87:0a:40:54:fb:d8:7d:72:55:1a:fc:64:66:43:
8b:d2:6e:a8:09:29:11:ba:7a:e8:81:cf:c1:2f:82:
4b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F1:6B:C7:FF:CC:BA:04:47:AB:1E:C6:DD:01:C7:FC:87:DA:41:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0d39d8e-c0ac-3902-b2be-246fca1d7374.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.53.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:6e:b7:96:fd:04:8d:d0:86:3f:fc:dc:35:11:e0:c0:6c:e8:
8e:5d:6f:04:74:d2:5f:96:08:8d:b8:69:2c:c5:2f:d6:73:61:
17:bf:55:3a:4e:66:1a:0b:9d:26:96:3c:31:1c:a4:ac:2c:99:
eb:63:e8:98:47:97:e3:e1:03:ba:99:f6:0f:d8:96:da:8a:46:
8f:a4:69:7d:12:a4:78:da:33:4a:bb:04:9d:96:0d:4b:79:9e:
25:79:cb:29:57:0b:19:f3:82:c3:43:3f:76:9c:8e:7c:66:6c:
1a:b4:53:87:e1:a5:68:45:08:58:e7:d5:1e:bd:3e:de:a1:8d:
42:c5:f6:b5:19:5b:5f:dc:a0:58:12:53:17:c3:f3:88:7e:68:
df:01:ed:43:ba:d8:4f:37:f4:c2:24:77:e4:14:d4:11:20:c1:
26:3f:0c:63:64:d1:66:9b:d0:08:1a:06:b4:61:28:5a:b5:c0:
1e:c4:ce:b9:53:a1:81:ec:fb:fe:ce:1a:e1:47:ca:ab:15:d7:
ca:fc:d6:a1:63:83:e4:99:f9:ec:2d:f4:53:8c:1a:fb:a3:15:
08:de:a6:c0:84:99:48:98:66:2d:95:92:b0:3d:ce:db:46:7f:
28:0e:5a:5e:33:2e:da:44:5c:df:45:bc:c6:9d:32:aa:cd:73:
b1:7c:22:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:17 2025 by rpki-client