Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b60d642-3248-3cf4-bcbb-c2f9b4913d06.roa
File: 5b60d642-3248-3cf4-bcbb-c2f9b4913d06.roa (raw, json)
Hash identifier: hEx3uBqRsmYnNGrJvNI4kdeuBIRkWttu6hiRqxnxDwg=
Subject key identifier: 48:75:21:96:6D:CE:BB:BA:44:87:32:12:38:53:54:F3:B1:EE:48:3D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A830CE46016D9B9735E09380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b60d642-3248-3cf4-bcbb-c2f9b4913d06.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 9498
IP address blocks: 23.201.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:ce:46:01:6d:9b:97:35:e0:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=23af3e7d-4b91-4977-ba9a-cb8630d91162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:31:98:2e:7c:7f:5e:d3:3d:74:c2:72:17:62:
53:b4:dc:bb:86:9c:d0:c0:37:d7:ea:f8:8d:24:00:
33:eb:08:66:20:06:6d:28:35:37:6d:9f:f0:31:fe:
e7:ee:0d:56:aa:22:65:e2:27:cc:35:f5:1c:3c:3c:
86:17:d8:2e:5a:03:4a:8d:ec:98:12:10:67:95:d9:
89:4e:3a:c4:5f:96:63:48:44:cd:97:13:6d:e5:af:
8c:d9:39:23:5d:56:ea:52:82:c5:d1:87:14:93:cc:
9d:d0:0c:a7:00:fd:0f:59:9e:0a:95:f6:32:d1:d3:
34:62:2f:d3:b2:47:16:7c:4a:a5:4c:4c:e7:ed:19:
3d:6e:fa:76:35:9b:c1:84:ad:5b:10:2d:cb:2c:1d:
8e:71:7f:fb:17:fa:04:f1:2e:e6:9b:c0:b3:c0:62:
23:41:0d:d6:01:e8:05:db:d9:e1:cc:a7:ba:d1:9c:
b7:8f:85:6e:59:2f:6a:1d:19:19:07:f6:5d:3b:37:
a9:57:9f:d3:08:47:40:85:2c:14:32:13:94:1d:c0:
6f:6d:f1:86:e6:a3:5f:e1:1d:d8:a5:d3:9a:bf:18:
73:2c:26:71:bf:4f:28:a2:91:20:a8:29:c6:e7:79:
85:38:8a:b3:47:5a:4f:d5:d3:8e:5d:2b:fb:bd:20:
3b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:75:21:96:6D:CE:BB:BA:44:87:32:12:38:53:54:F3:B1:EE:48:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b60d642-3248-3cf4-bcbb-c2f9b4913d06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.201.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:94:80:23:c1:1d:0e:74:3e:d9:ae:dd:a9:f5:8f:a6:6e:23:
25:91:43:99:da:0e:f6:61:a3:84:d0:1d:90:b1:1f:54:7f:39:
f2:31:c9:25:bb:2b:bc:66:f7:ad:0b:d4:3f:91:f2:9b:f3:8d:
58:55:4a:d3:8e:0b:e1:6a:a2:19:58:94:42:e4:3f:2c:90:4d:
08:32:32:a0:f0:7e:f2:c4:e5:4f:59:8e:ac:57:19:b0:66:f3:
1a:7e:44:3f:05:1d:40:f8:e4:3d:2c:54:46:79:9d:c6:af:90:
c7:08:db:d4:a0:94:6f:cb:70:af:e4:d5:e7:68:20:ce:7e:a0:
48:4b:0c:9d:de:ed:1f:67:d2:cd:01:f7:9b:09:50:62:52:76:
18:ad:15:4a:be:a3:d6:bd:20:47:87:53:aa:63:10:92:0a:bb:
e0:b8:0a:24:42:5f:7e:9e:8c:80:01:5e:e1:71:4c:8d:33:22:
77:3b:04:eb:0e:71:69:54:6e:86:e7:99:c9:10:8b:49:d2:b9:
2a:41:27:52:3c:cb:ca:fe:c6:4f:3d:d0:ce:56:51:bb:95:e7:
c6:97:04:a6:bc:db:8a:03:71:6f:7e:dc:80:3b:8e:4c:07:86:
0e:33:6e:85:5e:4a:4e:74:d9:7e:2f:78:f5:5b:62:a3:b9:f0:
02:ad:49:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:28:43 2025 by rpki-client