Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19ad0137-9ad2-37d1-a5c8-f221e1a0e841.roa
File: 19ad0137-9ad2-37d1-a5c8-f221e1a0e841.roa (raw, json)
Hash identifier: bysJSE4tS83L5YUhhPL7A/fD92SSx/luB8hl0j4WEUg=
Subject key identifier: A4:DD:0E:19:C7:47:0D:15:E9:DC:A1:A4:4C:C4:8B:2B:D2:09:17:C1
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A400C78CBE69EE1C74F0EE80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19ad0137-9ad2-37d1-a5c8-f221e1a0e841.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 23693
IP address blocks: 23.195.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:c7:8c:be:69:ee:1c:74:f0:ee:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=75fedeb5-8677-4e78-a935-0c98887f9525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fb:c4:2a:a3:51:45:80:2b:bf:63:f9:7f:57:
12:a5:83:45:8f:6b:89:ba:98:30:8d:05:4c:4d:38:
26:b0:8d:63:b0:1a:f0:1b:ec:3c:9e:31:55:b3:24:
b6:d2:dd:d8:d9:8b:78:c6:7f:a4:d1:55:4a:17:3e:
88:1c:79:c8:0c:81:5b:5d:b3:31:2c:34:5f:68:25:
ce:67:72:ab:26:fe:ef:57:c8:46:9e:61:00:c0:f3:
5a:aa:a6:dc:f0:ac:e4:78:6c:1d:a7:7e:d4:b8:dc:
ae:47:49:dd:4b:e1:13:cc:9d:54:a5:e2:c5:ea:06:
39:9b:65:91:37:2a:8d:47:e1:75:9e:8a:4a:b7:31:
2f:0f:7b:fc:9b:ba:ca:61:bb:4a:24:5e:2d:b3:a8:
7b:6c:89:3a:29:2e:d3:6a:cc:05:cc:83:4e:f3:2c:
87:9c:83:ec:75:c7:14:fd:e5:5e:2f:24:f4:3a:70:
57:09:d4:52:5c:16:2e:d4:59:31:10:7b:20:06:6f:
a3:8c:79:f4:8c:d1:92:a0:61:69:c6:a3:fc:87:44:
fa:50:23:e8:db:37:bc:bf:f2:69:b4:30:95:c1:ab:
f7:bb:9f:3e:23:9e:46:fb:ad:15:58:51:71:05:5c:
ec:16:48:3d:94:93:69:34:65:de:85:cd:4a:d5:21:
63:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DD:0E:19:C7:47:0D:15:E9:DC:A1:A4:4C:C4:8B:2B:D2:09:17:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19ad0137-9ad2-37d1-a5c8-f221e1a0e841.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.195.56.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:1f:ba:6a:20:ee:9c:dd:5f:71:85:a3:b8:2c:e9:8b:e0:31:
ba:8f:ed:27:ca:8b:51:99:67:31:c8:d2:45:31:b5:55:c3:3a:
38:85:48:d5:f7:0f:da:ae:86:87:eb:55:82:de:87:03:ca:dc:
a8:31:45:5b:84:01:c6:62:83:e7:8b:e3:cc:b0:b7:be:f6:92:
b9:bf:51:d8:ed:ed:c6:cf:27:4a:17:00:88:4b:1d:ef:69:ac:
3e:b1:f4:1d:f6:28:8d:87:62:a3:f1:92:d3:c7:96:71:0a:16:
1f:eb:c1:32:8c:83:08:62:71:7b:d6:8b:ff:53:74:f7:be:c2:
63:4d:b4:24:6f:2e:ec:e0:13:de:b8:2c:4e:b4:ad:49:a8:bb:
d0:f8:31:f2:53:f4:e9:45:cd:c0:7d:7d:3f:49:1e:00:ab:ef:
c5:fd:41:e6:68:7b:74:d5:43:cb:71:d9:0b:a5:a1:7b:37:cb:
8f:40:fa:b2:92:3c:73:ba:ab:ec:6a:c6:d8:c2:a8:74:52:e2:
4b:49:54:8e:f5:9a:a3:58:72:5f:85:0b:b9:23:86:eb:c5:af:
82:3c:fe:eb:f3:eb:66:2e:13:5c:a8:3c:b7:5c:4e:15:ae:52:
4f:98:a8:a8:20:4e:d6:1e:9c:eb:54:2b:b6:94:df:88:dd:94:
da:87:78:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:05:02 2025 by rpki-client