Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c92b53e-1ba5-3178-ac23-1f6d177b6310.roa
File: 0c92b53e-1ba5-3178-ac23-1f6d177b6310.roa (raw, json)
Hash identifier: aW/O8z8f0x3/ZBFlJzfwOFGrC2kaYo3bil9aKqQtfW0=
Subject key identifier: AF:1A:14:92:7D:B7:E7:48:C7:5A:BC:64:C7:D5:E5:81:39:70:2B:61
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584898D61C24892C36F2A06A2A80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c92b53e-1ba5-3178-ac23-1f6d177b6310.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.192.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:1c:24:89:2c:36:f2:a0:6a:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=31f73a06-5521-49df-bde8-13ce57eaf9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:df:35:69:a1:ab:e4:ee:9d:bc:0a:20:78:cf:
0b:4a:15:c5:0d:45:56:cf:1b:89:80:ea:a5:a4:2c:
ad:00:7c:16:34:80:be:8e:2f:eb:2a:ec:6c:1e:9b:
8a:fe:9b:12:46:8d:04:47:67:91:f4:36:0a:e7:4d:
44:60:9c:9c:dd:91:26:20:16:9f:5c:6f:fc:e3:84:
0b:b4:3c:0c:04:11:3e:db:99:ec:7e:f9:92:b8:00:
fc:86:c1:32:9e:d4:a8:d2:a8:c1:61:1c:b2:d3:80:
5a:5c:31:11:be:69:e7:52:ac:c4:cd:64:19:67:5d:
b1:a5:e9:ad:da:09:8b:c5:6b:4f:97:0f:21:95:44:
34:a6:f9:60:a7:7a:a5:e4:8a:5e:30:99:2e:fb:66:
b9:e9:30:5a:b1:48:7d:d1:52:da:92:fd:13:bd:06:
25:47:fa:ba:94:33:0e:b3:55:11:e8:8c:16:3b:38:
78:46:87:65:bb:4f:6b:4c:e8:d1:8a:8f:75:f2:16:
eb:df:18:4e:e1:f9:52:09:15:fe:ee:37:2a:e8:21:
d5:aa:1d:fb:4b:46:f1:76:2b:2b:46:b8:45:c4:08:
8f:38:01:73:1b:74:bd:aa:20:85:2d:8a:18:43:78:
c1:54:1c:f6:e5:e1:1a:9e:4e:b9:cb:c3:b0:20:83:
43:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1A:14:92:7D:B7:E7:48:C7:5A:BC:64:C7:D5:E5:81:39:70:2B:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c92b53e-1ba5-3178-ac23-1f6d177b6310.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.192.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:d0:65:06:c8:38:46:75:df:a7:ba:d2:49:31:52:8c:81:ef:
ad:f0:76:b5:bd:f0:6b:0e:bd:1d:df:37:3e:65:0f:98:3f:3b:
e6:a0:47:41:74:3d:a1:5c:5a:82:a2:87:8f:a0:91:10:af:ee:
87:a2:05:57:69:a2:da:ba:89:6a:a4:02:5b:c0:2c:62:3d:a6:
f8:18:bc:e5:de:29:90:11:f8:89:c8:e6:5c:53:98:a2:ee:d1:
56:20:ab:9c:4e:f9:bc:c2:3b:74:ea:41:cb:88:a4:7b:e5:be:
6e:01:5b:9d:8e:81:c5:6c:4d:f5:c6:29:75:5a:92:f6:ac:4e:
78:e9:bd:40:fc:66:7d:36:fe:23:f0:85:00:66:45:b7:37:11:
6f:77:f7:7c:2e:d2:fe:04:fd:e6:5c:d9:bb:a2:7a:9b:07:0d:
b8:11:48:fa:f6:bb:a2:8b:33:2f:72:3e:86:ba:18:ec:c6:75:
f6:fc:92:3d:10:58:39:66:7e:78:88:2e:4a:bc:77:82:02:1b:
66:c7:48:77:e0:1e:08:55:3a:49:d2:34:9b:3b:89:77:8e:7e:
60:07:c3:3b:ca:8e:dc:05:5f:fc:c5:4a:22:47:72:26:9e:f0:
8c:06:3c:39:7b:70:04:a7:3a:54:13:a3:36:4d:47:5f:df:06:
99:6d:92:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:02:38 2025 by rpki-client