Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f33459f8-870a-3523-b6bd-cfcbab57d805.roa
File: f33459f8-870a-3523-b6bd-cfcbab57d805.roa (raw, json)
Hash identifier: dho9fvr1KTM2CyescToq36g+rFQYhq0T/E94dF97PLc=
Subject key identifier: DD:31:B6:2E:33:A2:7E:E5:FF:DF:12:B4:01:17:C7:56:25:7D:87:6F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848BA5644D13B675D1C4B627820
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f33459f8-870a-3523-b6bd-cfcbab57d805.roa
Signing time: Fri 31 Jan 2025 14:00:51 +0000
ROA not before: Fri 31 Jan 2025 14:00:51 +0000
ROA not after: Thu 01 May 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.208.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ba:56:44:d1:3b:67:5d:1c:4b:62:78:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : May 1 13:00:51 2025 GMT
Subject: CN=ce6df949-f8d9-4b2d-adb8-0bd8301fb706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:73:29:31:8f:ac:a2:71:6b:30:f4:b1:9d:e1:
11:55:46:2d:77:d4:0b:aa:e2:d3:d6:1c:8d:26:6d:
fe:04:99:93:0d:b5:57:f2:c8:ad:2b:3a:20:11:64:
b5:05:9c:64:c3:e3:9c:b8:c7:9b:a3:27:fb:38:59:
30:77:51:9a:7a:31:a1:86:a9:ba:79:ef:0c:af:ab:
99:ae:12:dd:9e:bc:85:d0:ea:6c:aa:35:0c:a3:7b:
54:bf:81:50:2d:70:61:68:1d:27:86:74:24:d2:2a:
89:05:8a:19:0a:eb:27:a9:ae:77:93:b2:45:b6:a9:
78:bb:f3:2d:54:b8:5d:82:93:f7:3f:48:8a:1f:8b:
63:56:99:f5:23:e1:79:79:ca:ae:18:4d:96:46:55:
6d:d0:31:60:7e:53:a0:c1:61:ad:9f:3f:6a:ec:c3:
85:01:d8:16:fd:f4:c3:d8:b5:d4:42:3b:37:7c:98:
b8:04:8a:02:93:97:46:eb:f9:4d:7b:86:e7:df:00:
c0:df:cc:90:9d:11:b7:1f:82:35:0f:81:8b:7a:9a:
48:59:88:cb:c0:b8:80:38:2c:2d:e7:db:c0:d2:7d:
13:d7:85:8e:c9:5d:92:86:fb:19:e0:75:de:53:e6:
3a:98:38:72:2b:ff:4d:d1:84:3f:dd:7f:48:f6:42:
98:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:31:B6:2E:33:A2:7E:E5:FF:DF:12:B4:01:17:C7:56:25:7D:87:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f33459f8-870a-3523-b6bd-cfcbab57d805.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.208.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:3d:e8:34:c7:93:a0:a7:af:5d:e0:98:bd:cb:7a:b7:78:ab:
a5:62:83:83:37:7d:92:b1:50:6e:c9:9b:59:ae:b3:56:6a:01:
87:ae:43:cd:f0:c0:bd:4d:76:ce:9d:16:ac:dd:c2:bf:31:65:
af:5f:b4:c8:6e:bd:7d:98:e9:8f:42:37:e3:10:e5:6c:27:aa:
5d:40:bc:b7:79:ee:f1:fc:0c:13:d0:59:56:d1:d2:7d:d2:7e:
ab:01:ab:29:b5:cf:7d:88:e0:33:31:d4:9b:98:e5:19:2f:33:
bb:97:53:6d:94:eb:35:cf:c9:e9:48:2e:92:ec:a4:61:e8:41:
c1:e5:b4:28:86:c7:67:b5:fd:53:c0:bd:3a:85:c3:c8:0a:0e:
a7:0e:27:8c:f7:2b:59:3c:89:b6:fd:3f:96:93:af:1b:4b:6b:
95:4f:78:62:bc:3d:b2:26:7d:a8:4b:cb:07:bb:25:67:cc:6e:
3e:c6:43:4d:15:64:c9:51:15:c9:80:f3:52:1e:c0:73:b0:dd:
cc:2b:ec:e4:63:ef:e4:0d:71:cf:c3:ea:7e:28:96:62:13:4e:
ec:84:08:4f:3e:1f:f6:52:b6:78:f0:c5:ab:3f:9f:33:be:c6:
39:cc:61:24:7e:ec:f7:3e:03:d9:0a:85:45:5e:ff:de:7b:77:
55:66:d5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:07:00 2025 by rpki-client