Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fcee2650-0c45-3367-907b-92fd6f8b07cb.roa
File: fcee2650-0c45-3367-907b-92fd6f8b07cb.roa (raw, json)
Hash identifier: 5tbI4sn2tq4CSXp1Vd/FGE6VqTiJFus4fS3A17Vmmuo=
Subject key identifier: 8A:D0:77:FD:79:97:00:50:29:6A:B3:57:AF:8B:45:70:48:DB:C1:5E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848BBBB98658F3025CC858B4B40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fcee2650-0c45-3367-907b-92fd6f8b07cb.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.213.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:98:65:8f:30:25:cc:85:8b:4b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=34750df0-c3d5-4376-8988-edb4e8b81c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c4:62:86:22:1f:71:21:11:55:5f:06:a4:27:
e1:9d:75:2a:38:29:21:36:e5:db:e6:51:72:20:e5:
25:aa:1b:96:63:5c:30:68:39:7e:40:1a:39:53:bc:
95:29:58:3e:a2:9f:d8:32:b8:00:54:a5:6f:59:55:
c6:4f:c6:c3:5d:3b:15:2d:4d:df:32:6f:f3:88:b5:
ef:59:e9:69:1e:5c:e4:71:7a:77:c5:31:3e:dd:da:
1f:1e:39:a5:8d:a2:5e:05:ff:c3:a5:f9:c9:ef:df:
02:41:2d:7f:3d:b0:2b:80:70:18:00:ac:e4:c7:31:
a4:df:8b:38:bb:94:2b:24:eb:c1:aa:2d:1a:74:57:
fd:f7:78:6d:1c:f3:5e:49:19:d1:ea:3a:2e:0a:f8:
aa:c3:49:ec:d3:d4:87:84:a0:f1:ae:b6:6a:b1:bc:
82:7f:34:f2:c3:91:a2:d2:c0:ff:64:33:b2:63:c3:
0f:56:45:17:22:36:b4:ed:15:c9:6d:0e:2d:16:dd:
b1:ac:17:ba:21:44:52:8c:f7:6e:32:98:27:86:a0:
4c:14:f1:1d:02:04:af:44:cb:92:4e:bf:03:c7:c0:
f8:c2:14:63:3d:57:03:04:96:3d:04:72:56:52:31:
00:1c:26:a5:aa:6b:9b:b1:8b:d3:58:33:4d:f3:60:
65:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D0:77:FD:79:97:00:50:29:6A:B3:57:AF:8B:45:70:48:DB:C1:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fcee2650-0c45-3367-907b-92fd6f8b07cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.213.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:d3:69:33:f0:88:06:76:e5:ff:e9:9d:9d:c5:94:c8:42:ee:
48:6e:06:71:b8:a5:e0:61:1d:43:5e:bd:e8:da:bd:dd:1c:57:
ca:f1:30:0b:e9:43:2e:65:ed:c6:a2:c3:0b:30:ef:13:25:eb:
a1:55:88:2a:c6:30:d0:86:32:14:9c:aa:3b:85:d9:d3:87:fc:
f5:4c:5b:49:6a:3c:8e:2b:d6:6e:53:0d:95:74:b7:6b:2f:f5:
ba:cb:1a:f5:af:a0:f3:e7:ae:67:57:37:4f:26:43:e4:63:b2:
af:bc:55:41:ca:ec:70:3a:ae:61:40:80:65:bc:57:e3:50:ea:
a2:aa:6e:9d:59:48:22:f8:09:38:b1:68:99:2d:ef:c7:8c:96:
24:26:3d:18:00:aa:10:ce:92:82:71:fc:ae:1a:ab:71:2a:50:
7c:2b:a8:49:24:59:52:7e:8b:33:a1:a4:19:aa:19:a4:47:75:
d9:7e:56:1a:07:30:9d:0e:aa:f6:9d:ea:cf:38:55:1a:01:a7:
b3:b4:7c:05:4e:85:a8:b1:8f:83:83:e2:95:dc:7d:02:0d:e1:
4a:2b:f7:c0:a5:d7:bd:ed:b4:f1:b0:fc:72:2e:16:04:02:dd:
4e:7a:a8:0f:bc:87:13:53:14:cc:c6:76:7f:ea:8e:a0:4e:d6:
31:55:a8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:59:34 2025 by rpki-client