Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1c88fb08-1d81-3d09-b9a9-483bda5f693d.roa
File: 1c88fb08-1d81-3d09-b9a9-483bda5f693d.roa (raw, json)
Hash identifier: orV5xQfwLFtABgzesRl8VSIvP8gFKyRJfoco1wwgjGE=
Subject key identifier: BE:B7:AD:9A:51:6E:52:AF:5E:A6:AB:14:35:82:FC:07:53:86:56:42
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F43285848E006618C93F342E60B1FB320
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1c88fb08-1d81-3d09-b9a9-483bda5f693d.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 19157
IP address blocks: 23.86.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:61:8c:93:f3:42:e6:0b:1f:b3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=96e9ef61-26b2-45ab-b6c2-1217cd339ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d6:d1:bb:20:94:b8:a1:95:53:c7:27:79:ce:
9c:9a:b0:0c:d6:83:68:8d:22:6f:e3:e7:84:75:6b:
47:bf:7a:20:32:c5:6b:0e:3a:9e:34:f9:c8:c4:a5:
f3:5b:0a:61:d8:ed:5c:16:39:a7:8e:94:b1:c1:e4:
0b:40:b7:a9:0f:34:6a:39:a1:f4:3f:ce:74:36:a3:
b4:3f:e4:88:39:cd:fc:2f:6f:01:d6:58:3d:8a:9d:
0f:ce:c3:f3:50:f2:98:f0:ae:d0:70:35:e5:79:02:
7a:2c:89:7e:5c:35:59:12:3c:57:a0:dd:a2:92:60:
b1:29:4e:ec:4f:4d:c1:5d:33:c2:53:e3:58:33:5b:
e1:4e:30:08:23:23:f7:9d:34:e0:03:6c:a2:1b:8f:
d1:10:bf:d5:e0:88:98:45:1f:d8:b1:ea:69:4a:eb:
f1:5a:7f:ad:37:b5:28:98:73:6f:7c:12:f5:30:89:
8e:95:25:6b:e6:57:1a:f9:71:7f:a8:ae:aa:81:39:
82:a3:bc:3a:10:39:0f:fb:e6:a0:69:a5:a9:4c:70:
29:4f:a2:23:8f:2c:ad:cf:96:40:85:17:87:bf:db:
6a:21:21:d1:e8:c7:e9:e0:ef:b8:a8:98:bd:86:b7:
42:b0:dd:a0:79:19:6e:09:4a:ec:de:1a:da:4a:bd:
fa:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B7:AD:9A:51:6E:52:AF:5E:A6:AB:14:35:82:FC:07:53:86:56:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1c88fb08-1d81-3d09-b9a9-483bda5f693d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
23.86.48.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:3a:bd:3c:2b:20:63:96:cc:67:df:de:1b:99:ff:b4:d0:93:
35:b2:49:9f:98:49:b4:76:94:97:fb:af:0c:b3:63:36:09:92:
19:df:23:50:2e:d1:4d:b8:69:6d:67:4e:ba:04:5e:ad:a3:50:
c2:e9:1b:44:c8:bd:33:e0:46:5a:6a:60:d8:99:d6:9b:29:38:
3e:da:dc:fe:27:16:6e:d0:0c:d4:bf:75:3e:7d:c5:9d:93:b4:
e3:bc:b2:1b:60:bf:7c:02:7c:d2:5c:17:69:e9:67:ec:6e:a6:
5d:67:79:78:fd:21:3f:ab:e5:0a:26:09:f1:61:50:6f:16:00:
97:b2:d4:59:c9:66:59:7b:6e:aa:47:66:76:0b:4a:fb:11:f5:
f4:fe:9f:a9:60:94:0c:7d:c2:7e:9a:f6:a4:3d:f7:3c:4d:c3:
28:91:dd:8d:91:7f:e9:7a:f5:5d:7e:05:f2:76:47:5c:bd:92:
ae:6e:15:cc:ba:a7:ca:55:4b:63:18:ab:7a:c1:83:5a:79:98:
8e:fe:b7:58:ad:19:f6:c0:23:ff:21:b7:3c:5a:61:bc:3e:48:
78:2c:f8:cb:7c:f4:7c:c3:6c:e9:aa:bd:54:b3:87:71:2f:56:
a8:6b:4a:47:26:f0:97:1e:a0:a4:42:32:92:10:60:7a:14:ab:
78:53:77:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:42:54 2025 by rpki-client