Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/09507aa4-1f77-3730-8e84-126fe9b595bd.roa
File: 09507aa4-1f77-3730-8e84-126fe9b595bd.roa (raw, json)
Hash identifier: 7EaIc4KIRneHYluo2GjGg8dJdkBJvAA9/6iTcP0Oxbg=
Subject key identifier: AF:D4:C8:BF:94:42:F6:33:0C:69:A0:9E:97:A0:13:51:E9:95:67:00
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584890760EE8388E60C671191A80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/09507aa4-1f77-3730-8e84-126fe9b595bd.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 20940
IP address blocks: 23.202.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:76:0e:e8:38:8e:60:c6:71:19:1a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=ad2995c1-cf95-4d14-adbe-aa07eba899e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:24:23:01:75:69:9f:45:4f:27:ee:a5:f9:84:
07:f3:4f:a2:5b:4b:35:8a:2d:35:1d:b3:34:bf:32:
b5:5b:59:e0:b9:4c:51:55:90:85:cc:b0:44:ae:cd:
3f:6c:d2:44:7d:f8:4f:cb:9e:13:ac:c5:ec:8b:22:
06:ea:3d:93:02:bc:10:66:52:13:76:da:e4:7c:6f:
90:c7:36:56:c9:12:be:2c:14:72:be:6f:6f:d1:d0:
83:04:f3:26:fa:86:cd:88:27:59:71:9b:95:de:34:
09:62:55:e7:14:8f:40:aa:ae:21:73:08:1a:8e:98:
fb:9e:b6:80:db:85:a4:59:0d:b6:b6:6d:b1:14:df:
f8:07:d6:fd:85:e2:1d:81:e9:76:bf:99:62:83:36:
f9:c7:93:b9:3b:46:bd:e5:44:dd:bd:58:5a:49:61:
e4:41:b4:67:bb:21:51:60:58:1e:43:d7:ad:a4:a6:
de:f5:db:08:ce:ed:50:66:25:85:d1:c6:87:27:1d:
f5:90:1b:72:9c:c4:81:3b:79:26:17:e8:13:74:56:
e5:1f:a3:c8:27:fc:5c:b6:2c:62:3f:32:b1:42:91:
56:58:f2:2c:0d:37:39:6d:af:53:d8:43:79:ca:fe:
61:e6:fe:30:79:8d:87:b8:24:d1:cd:2c:4f:f6:88:
d6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D4:C8:BF:94:42:F6:33:0C:69:A0:9E:97:A0:13:51:E9:95:67:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/09507aa4-1f77-3730-8e84-126fe9b595bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.202.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:fe:cb:f6:7b:78:8d:1c:43:b5:c1:15:0f:20:58:b4:02:d2:
ff:e6:2d:ed:b8:d6:99:1a:48:70:bb:0f:9b:b3:37:6b:88:35:
47:13:d6:f3:3c:02:0d:4b:5d:e2:07:d9:ef:99:04:89:87:0d:
8b:1f:2b:1d:47:2e:b1:df:8b:2d:54:fb:b4:ac:1c:71:bb:74:
bd:bb:07:15:a0:d3:f4:99:7c:ac:6a:1d:3f:cc:9b:5a:be:de:
26:b2:39:4c:d6:bb:ae:f9:35:b2:f9:54:8f:7f:bb:d6:b2:9c:
de:40:96:2a:17:15:dd:6e:4b:f9:82:43:a0:34:6f:e4:c5:86:
99:5a:a1:aa:4f:f0:e5:46:d3:35:a4:50:19:0e:57:36:5f:6b:
f3:a3:13:a1:1b:e1:7b:36:af:b1:f5:c9:23:5f:a4:00:5f:b7:
60:eb:bd:75:9e:11:a1:96:12:91:20:75:bd:b1:98:b2:c8:d1:
ef:fb:42:63:64:8b:7d:82:13:7c:f3:17:59:d9:9d:ac:cd:ec:
3d:78:f6:93:a2:dd:d9:02:f8:dd:de:fd:9f:0d:bb:77:14:34:
24:11:9a:c5:32:64:a0:6d:ff:3b:9c:5f:e0:7c:ed:6d:21:37:
59:70:f6:aa:74:36:fa:a3:10:eb:31:2d:fe:2e:00:7a:9d:df:
4d:13:2a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:40 2025 by rpki-client