Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/035c4380-a5d7-3c49-b3cb-ea1bea93c037.roa
File: 035c4380-a5d7-3c49-b3cb-ea1bea93c037.roa (raw, json)
Hash identifier: y0/mQxTWheNRzuvlTvPWxrQFUs9ODBE7q/LqQgDtZ5U=
Subject key identifier: 2A:CE:D7:8D:27:DE:17:F2:34:F7:02:BC:77:05:2A:AE:87:49:A2:6F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A830C97CDE6DF66597558F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/035c4380-a5d7-3c49-b3cb-ea1bea93c037.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.201.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:c9:7c:de:6d:f6:65:97:55:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=3a26592e-bf43-4752-b09b-b6eb962e41d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:44:71:47:0f:41:ba:47:85:b5:4e:c8:e8:77:
57:3f:89:b9:64:36:a7:92:1f:5a:2d:60:af:a2:46:
31:40:c0:a0:8d:82:ed:2b:d8:a1:9e:d1:34:34:bf:
a0:26:da:62:f4:22:8a:8f:5d:94:b2:81:5f:eb:33:
d2:55:9f:48:3a:d7:ad:cc:52:4e:2a:c1:58:07:4d:
30:b0:af:95:db:39:fb:6b:dd:d7:fe:1f:c4:09:c4:
64:21:96:d3:f6:2b:36:3f:c2:97:25:69:95:1a:7a:
89:76:34:53:73:a3:d5:16:b7:29:7a:d8:10:4c:16:
05:bf:fd:65:c7:d2:2f:57:7e:e2:f2:8c:ba:29:56:
91:bd:e7:23:c0:06:e4:d3:e2:80:71:1f:31:c4:38:
a9:60:67:51:20:25:b3:46:79:0a:01:b1:f1:f2:2b:
fc:c0:07:06:a5:1d:6d:e8:c2:f6:67:2f:89:c1:c4:
4e:64:84:f5:6d:8d:21:c1:90:37:2c:42:05:e5:4f:
15:5f:a3:03:65:bb:0c:7c:d8:8f:3f:eb:73:95:cb:
e5:fa:15:d9:fa:81:7f:94:ba:88:78:1a:73:43:1e:
e5:24:66:15:df:72:9a:e0:aa:9f:ad:02:41:c0:9c:
4a:31:ba:fc:94:22:2d:81:da:56:8f:20:d5:12:e5:
d6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CE:D7:8D:27:DE:17:F2:34:F7:02:BC:77:05:2A:AE:87:49:A2:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/035c4380-a5d7-3c49-b3cb-ea1bea93c037.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.201.103.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:80:b7:72:75:40:cd:97:b6:ec:c4:8a:84:20:03:4b:58:1f:
65:59:94:95:2c:b5:24:a3:8e:d6:84:6d:2b:8d:fb:75:76:74:
b6:a0:89:0a:a6:ef:5f:bb:4d:f5:ba:b2:ff:2b:f4:41:55:2c:
9c:af:26:0f:6e:6f:98:37:a1:87:33:13:6f:1e:98:d2:13:6a:
71:2e:c3:25:12:bf:64:84:38:a0:8f:df:d6:5c:c6:47:49:3e:
ed:5f:23:02:e6:6e:4b:b5:53:e5:1c:0b:15:c1:47:ee:60:3d:
10:6f:cb:6a:7b:97:51:a0:3a:ec:1d:2d:04:06:b2:27:ce:46:
fc:f3:39:89:ab:8a:69:28:52:86:f5:7d:36:aa:ed:95:45:e7:
6a:1e:01:b3:ba:da:e2:a7:0d:4f:e1:27:7c:ef:31:c6:4d:37:
10:88:6c:71:d8:fd:a4:d9:d9:51:89:ad:4f:23:bb:2c:1e:4b:
20:21:14:aa:f4:c8:ae:f2:61:77:e6:bf:3c:b1:7d:f8:ec:06:
a1:6b:83:bb:be:41:d5:24:65:26:cf:88:e7:3e:29:67:83:fc:
61:35:68:c6:06:04:9e:17:75:e4:00:a1:81:84:de:e0:8a:a3:
d3:8b:8f:15:08:b4:8f:1f:42:ac:ea:1b:0d:e6:f4:47:32:dd:
0d:fe:cb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:12 2025 by rpki-client