Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f14625b4-a283-3a33-9ea9-b23b0dabf708.roa
File: f14625b4-a283-3a33-9ea9-b23b0dabf708.roa (raw, json)
Hash identifier: tUaY1LucTENhujbTiyc01KwKcGWV7dKFHWFXo4D5Qwg=
Subject key identifier: 3E:95:EB:6D:FC:82:68:F7:BE:26:6A:9C:4A:D2:D0:06:77:B3:E9:D6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487CEB73B62698CDF4039C1570
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f14625b4-a283-3a33-9ea9-b23b0dabf708.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.43.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:73:b6:26:98:cd:f4:03:9c:15:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=2ff3c78a-62ba-45a9-8589-16b96664500b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:37:40:f8:9e:8b:48:d2:81:92:ec:32:19:f8:
8e:5d:6d:eb:39:d2:c3:44:10:f8:40:20:c1:a3:33:
68:fc:a9:3e:8e:c8:22:49:a5:17:4d:10:4b:bd:99:
ea:87:bd:35:4b:91:19:87:b7:5d:7b:ce:15:a2:35:
47:b6:2f:78:bf:87:40:d0:85:af:c9:10:70:b1:cd:
b8:86:17:ac:54:de:23:a2:55:66:78:f9:16:91:17:
6d:cc:5d:b5:49:7f:04:8d:b7:e8:ad:fc:29:6c:6f:
62:d6:b9:d1:e5:58:14:0c:bc:7a:d6:f9:78:c0:1c:
36:16:2d:64:2b:a9:39:f7:a7:91:4d:34:46:f6:fd:
c6:ca:61:d3:ba:62:70:3e:f5:b6:05:97:1b:ed:cc:
5e:62:87:c0:e2:a2:81:9c:f4:9d:93:6f:4d:4b:3c:
5b:1d:36:96:75:22:73:9a:26:98:81:49:4c:c3:7a:
61:a5:18:e3:be:55:a3:9c:7c:8d:60:40:fb:f6:3c:
19:73:a4:af:dd:06:68:6b:a6:59:ff:50:58:0c:61:
03:78:88:e7:cc:34:13:1a:73:26:0c:6b:0b:dc:1f:
cb:0d:22:c2:13:c8:62:8c:02:4a:ab:21:75:55:45:
e3:d7:c1:17:ef:01:45:1f:ef:c8:9c:9f:6f:a1:ca:
50:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:95:EB:6D:FC:82:68:F7:BE:26:6A:9C:4A:D2:D0:06:77:B3:E9:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f14625b4-a283-3a33-9ea9-b23b0dabf708.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.43.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:c0:72:bd:60:91:03:28:b2:02:fe:84:04:ca:ae:ea:ff:fd:
01:b7:f5:4e:c1:94:75:bc:e7:22:79:95:13:4c:52:f6:13:65:
8d:f8:93:36:6a:7e:82:73:ae:71:77:d5:96:29:9d:c7:4d:dd:
d8:01:26:d9:75:41:64:c2:61:b4:80:9b:7c:0b:d2:12:d9:5a:
b5:92:0b:b8:39:60:98:48:7f:2f:c0:bf:d5:69:66:19:09:86:
b9:fd:f3:4f:fb:da:41:5c:a0:35:8e:6d:58:a7:36:10:52:c6:
0d:f6:72:af:8e:6a:dc:f0:dc:c6:a3:02:c5:41:8c:aa:9a:44:
62:72:e1:2f:31:fc:c0:50:2f:aa:26:a9:ee:47:85:d8:67:ca:
aa:f1:fb:2c:0e:6b:7c:cf:d7:0b:bd:ad:b2:c9:19:ba:27:08:
d1:a8:90:b5:35:b3:35:dc:f1:a2:dd:8f:18:0d:43:37:9b:50:
6d:49:94:af:a4:f8:1d:77:47:cf:7d:8b:17:92:97:a3:3c:d9:
3c:53:dc:5a:16:dc:a6:3e:10:fd:00:94:3a:37:32:ad:08:13:
6c:c7:63:0a:18:bf:7b:c5:72:ca:b8:ea:ab:7c:9f:2c:9e:14:
31:03:2d:94:aa:e7:bd:7e:70:91:b8:01:9a:c1:3d:9e:c6:56:
34:cb:b7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:36 2025 by rpki-client