Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f72a60fb-dc88-3395-bb96-72c425d163a4.roa
File: f72a60fb-dc88-3395-bb96-72c425d163a4.roa (raw, json)
Hash identifier: BCW8r03+Y+zgqtKZnn36OXcSfPYij6d8/IzNme+JStM=
Subject key identifier: B7:EF:78:B3:13:48:C7:95:A9:C6:C4:D9:C2:70:39:B8:FD:F7:9A:BD
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858489340BADFFA6ECEF924F68540
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f72a60fb-dc88-3395-bb96-72c425d163a4.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 4657
IP address blocks: 23.205.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:ba:df:fa:6e:ce:f9:24:f6:85:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=e5c2b197-d29a-474c-866c-5cd1de6367a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6f:6b:71:3a:8c:7e:e5:87:6b:53:2b:31:2d:
b4:af:b2:fa:88:18:2c:05:8a:03:dd:81:ce:e6:b9:
a8:e1:f4:aa:f9:22:b8:13:a9:1a:76:95:00:a5:4e:
43:e5:36:7b:82:b5:90:ca:d3:96:ed:6b:2f:e9:b3:
c6:20:c0:a8:2d:89:e4:98:18:5f:7d:9e:b9:e5:49:
a1:7c:d9:69:19:ee:c5:12:e7:65:00:5a:01:25:07:
c1:8d:bd:4d:5b:10:fb:4a:70:5f:f1:39:6f:4b:f0:
8f:66:83:2e:68:be:60:14:fb:66:88:62:2c:c5:75:
3f:29:45:43:71:a8:2e:b8:a6:19:b0:ed:9b:76:ff:
b7:1c:00:85:88:07:45:fc:57:60:82:8f:b3:d6:d3:
47:b1:88:bd:93:cc:b2:32:c1:24:bd:eb:15:a9:55:
c7:88:3f:92:34:48:fb:1c:f6:6e:c6:b9:46:85:4a:
60:86:88:f8:f3:45:c6:7e:43:82:fb:5a:be:9b:35:
12:ea:f8:a4:d3:4f:f1:82:a0:61:c5:fd:97:75:2f:
3e:45:8f:45:9f:c6:52:bd:6d:56:39:50:c6:86:24:
fe:ad:4c:37:22:ae:6a:58:97:ee:77:be:ba:4f:a9:
a7:29:a9:1c:7d:0e:ac:e9:ea:a0:48:e2:de:94:ea:
22:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EF:78:B3:13:48:C7:95:A9:C6:C4:D9:C2:70:39:B8:FD:F7:9A:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f72a60fb-dc88-3395-bb96-72c425d163a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.205.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:f1:53:65:16:80:ba:54:b5:63:32:35:88:21:df:6b:8c:cb:
b5:c3:82:2c:f7:f4:ab:49:4b:69:50:f2:79:6d:27:88:db:9f:
10:39:bd:f1:d7:5a:b9:77:01:a6:92:b4:c0:d1:99:fe:79:66:
8c:e0:14:f3:f7:19:9e:d8:0f:7b:01:88:b4:a7:96:82:da:99:
82:1b:16:c3:77:18:d1:10:02:e3:42:03:32:2b:49:31:0b:52:
31:89:c0:8d:5d:f0:fe:25:6a:a3:45:63:38:ff:08:75:48:92:
bf:aa:c2:f6:13:6b:41:33:7e:d5:57:3c:0a:12:2e:af:d1:c6:
bb:24:8d:2d:d9:e3:97:0f:9f:c9:51:5d:ad:89:d9:18:23:85:
67:16:e6:bd:0d:4a:81:94:99:a9:cc:6e:75:30:91:6b:ad:3d:
ad:8d:8f:81:55:8b:23:c8:0b:4e:3d:41:00:ff:d7:a7:87:e4:
6b:cc:ea:da:09:82:2b:1a:3a:ed:14:ba:be:62:00:17:47:11:
44:ea:d8:51:cb:e3:b5:dc:fa:5f:d7:38:a1:57:a8:a3:aa:ed:
b7:25:40:f7:c1:df:bd:9c:24:27:f8:18:48:c9:04:49:e7:30:
69:fe:94:1d:31:56:6e:fc:43:dc:b7:2f:f1:66:39:0f:d6:9e:
11:b4:09:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:02 2025 by rpki-client