Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f40932b7-5578-310a-8198-efa1e63bac7e.roa
File: f40932b7-5578-310a-8198-efa1e63bac7e.roa (raw, json)
Hash identifier: bj/59ru0isRifniuG83cIYFngeHT34q90TYbcV0WTaw=
Subject key identifier: 1C:89:70:5A:EF:38:8B:49:CE:B5:0B:C5:9C:7D:B3:36:A7:4D:4E:0E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A209E08AA98E4A045EEE500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f40932b7-5578-310a-8198-efa1e63bac7e.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.40.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:9e:08:aa:98:e4:a0:45:ee:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=ff2cc346-9256-42b9-a04e-105f86f860fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:77:0d:87:37:da:14:57:64:f1:7d:7d:64:ed:
7c:86:5f:09:6b:73:da:59:0d:7b:34:32:0b:63:1f:
a4:61:96:3b:f1:88:de:e5:08:bf:c3:ea:e7:7a:c4:
8e:47:7e:78:a1:2d:49:c1:7e:f9:1c:89:b6:3a:4b:
2f:19:7c:72:97:b4:27:cd:ed:8c:3b:4d:a2:ff:7b:
1e:17:78:b2:74:65:00:2d:2b:68:e7:8f:08:4b:05:
55:00:61:3f:3e:32:cc:b9:02:b8:4d:0a:6f:22:49:
2c:f3:89:da:ac:91:35:74:1f:c6:6a:4f:ef:83:27:
5c:fe:18:df:47:1d:d6:ad:1d:f4:a4:06:16:24:63:
14:83:0a:3c:be:3e:6c:c2:82:4f:10:59:44:7c:50:
f0:e3:17:2b:8d:60:2c:9c:45:d6:e5:ef:5a:ea:77:
20:bc:e9:13:03:fc:4b:34:09:b1:af:0d:c4:f3:c5:
f5:40:c7:dd:86:9e:b8:bb:d9:3f:0d:c6:3d:5b:02:
3a:ce:18:83:13:fe:dd:22:63:2e:c9:1d:9a:b4:dd:
83:3a:33:ec:e8:57:5e:40:aa:11:a4:0f:a8:e4:a3:
0a:fd:69:4b:fa:38:e4:46:a9:b5:07:7f:eb:5b:3c:
c1:46:b5:6a:57:9c:a7:a3:0f:9b:e7:1f:53:69:47:
d7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:89:70:5A:EF:38:8B:49:CE:B5:0B:C5:9C:7D:B3:36:A7:4D:4E:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f40932b7-5578-310a-8198-efa1e63bac7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.40.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:0a:ce:57:bc:43:79:db:90:ae:80:b9:6e:a2:08:8d:28:80:
15:c3:bc:3a:39:db:d8:a2:fc:33:4e:54:25:fc:75:5f:3d:c6:
ad:36:4a:a9:08:52:f6:26:83:13:b0:dc:bb:0b:00:ad:a3:1b:
90:5d:0e:2d:39:7c:13:0d:05:b7:db:19:b3:16:1f:7a:90:97:
56:4f:b2:72:59:97:36:f9:ed:72:1c:2f:c3:96:ae:d2:2f:8f:
fb:8c:a1:ae:d6:f3:e9:40:0d:0c:0d:91:d6:30:73:ce:e9:c0:
7d:07:ac:a1:23:98:88:17:ad:19:2f:f1:f0:c0:af:d7:d6:bf:
91:33:5d:d7:85:70:da:e9:25:94:01:1d:61:1a:2d:9f:1f:97:
e9:9f:26:79:84:b2:1f:63:f6:93:a4:e0:33:16:1e:66:af:68:
79:a2:aa:cc:2f:f9:e8:3c:e4:14:31:1a:43:e7:53:11:e3:e9:
3f:cb:e4:8a:28:90:70:ba:de:7a:e6:50:50:91:84:a8:a6:cf:
d8:16:f6:e1:4c:8e:5c:f9:67:18:c7:7a:07:38:2c:5f:4e:5c:
e5:bd:7c:82:50:04:62:b6:aa:1f:d8:70:3c:b8:c5:5f:4f:85:
d9:49:7d:0a:21:6f:cd:ea:23:34:d9:bf:47:91:cb:61:63:90:
8c:05:84:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:28 2025 by rpki-client