Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8b4799d-7146-394b-8c58-afe158825907.roa
File: f8b4799d-7146-394b-8c58-afe158825907.roa (raw, json)
Hash identifier: mdZ9w/idllInGh4Qc8Nzgxjg98Qukyd+zyrPZpOJ888=
Subject key identifier: 58:EC:C5:39:60:CE:53:84:83:81:D8:32:E5:3E:CF:D8:4F:2E:84:CB
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848BBBB90C9450739E853C87F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8b4799d-7146-394b-8c58-afe158825907.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.213.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:90:c9:45:07:39:e8:53:c8:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=b5dbe709-31f1-4ff6-9d62-245592dd509d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:05:1c:1c:3f:b2:32:ae:f8:1f:ee:37:d7:a9:
2b:62:9f:cf:28:01:74:89:b8:78:59:c9:4a:7e:b7:
a0:42:fd:d8:a6:bb:7a:48:00:20:5c:04:1e:44:be:
5a:86:a0:53:d1:a3:91:f6:12:71:58:da:31:21:44:
6a:58:55:a9:be:5f:38:ba:d6:8a:ed:9c:be:c9:f4:
13:66:72:d6:7c:f9:50:a7:0f:11:91:73:26:f8:05:
68:df:44:9d:00:20:2b:b3:42:b8:4c:a0:8e:2f:c6:
0e:41:84:0a:a6:2a:ce:b4:f2:0e:0a:b6:35:23:d5:
64:35:57:31:a3:bb:db:42:57:e9:10:87:0f:78:9d:
d4:8d:47:7a:df:ab:60:ba:4a:6a:44:91:a7:5b:a9:
ff:4e:87:d3:b6:a0:f5:b1:36:69:e9:c3:60:92:a4:
2c:6a:f8:97:5d:6d:b7:9b:84:d3:0d:52:7f:2e:4f:
d4:1e:ee:e8:83:e0:24:9b:22:4a:5b:5f:7c:0c:c7:
60:49:e0:e5:68:f7:0a:4a:14:a1:3e:53:c1:f2:c2:
03:dc:37:93:40:26:42:86:3a:72:62:d3:ae:28:18:
d3:e5:6c:ab:1d:59:77:89:71:0e:5a:fc:1a:9a:73:
e6:82:fe:87:e7:6e:e9:aa:b3:51:6d:64:48:ea:31:
db:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EC:C5:39:60:CE:53:84:83:81:D8:32:E5:3E:CF:D8:4F:2E:84:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8b4799d-7146-394b-8c58-afe158825907.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.213.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:31:9d:05:38:c8:7d:74:45:92:50:96:96:6c:63:a7:2c:37:
f4:51:92:77:62:8c:88:be:4b:51:36:8e:e8:02:e3:e2:5d:2f:
ab:6f:ab:7c:2c:a0:fe:3e:a4:02:db:aa:be:4e:38:31:b3:02:
99:1c:6e:6c:c7:1a:e0:61:46:62:5f:9b:25:08:e2:1c:06:fc:
f5:ef:19:f5:c3:d8:a4:07:52:67:ff:9a:49:87:1e:ed:e7:43:
99:77:89:c0:45:4c:18:45:b9:79:2c:93:e6:bf:aa:ac:5f:65:
a3:a4:12:2a:1e:d7:3a:d7:1a:00:10:8e:e4:6a:7b:bb:49:c8:
12:44:45:b8:dc:fc:f4:d6:5f:92:9b:a8:6a:2e:a9:2b:85:9c:
8c:17:7a:d7:2a:6f:73:de:ce:9c:51:52:e4:92:ad:24:87:d3:
e8:91:2f:92:de:8f:37:59:1d:93:60:1a:9c:1f:5a:55:dd:96:
ee:ec:44:01:69:f1:d2:52:10:b1:cf:a7:98:8e:dd:57:a7:9e:
51:55:e6:a1:74:3b:34:2c:42:70:58:a6:71:19:fe:bd:4e:37:
42:8d:e7:54:01:6f:0d:8a:50:92:30:90:6e:cb:a3:50:5b:7f:
9f:88:28:06:bd:ea:6b:26:1d:44:2a:78:72:42:5f:3e:5a:e8:
3c:13:3c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:11:52 2025 by rpki-client