Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b7b733b-9f50-37a3-9d09-addc41ae78b2.roa
File: 1b7b733b-9f50-37a3-9d09-addc41ae78b2.roa (raw, json)
Hash identifier: UHwfAu/SojaVuaw2H+rktHhIAuP0hcXhWtpD33A1jQM=
Subject key identifier: 07:ED:EF:1F:B4:8F:E4:55:7A:06:A5:03:E1:FA:0E:FE:9B:DA:53:B8
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A400E19076978698CCF53600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b7b733b-9f50-37a3-9d09-addc41ae78b2.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.198.104.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:e1:90:76:97:86:98:cc:f5:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=e2bbed63-3c9a-419b-afd0-e9493cda01bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c1:bf:a4:ae:ea:98:1f:e3:f4:0e:a6:52:f1:
0f:99:7a:97:52:20:f3:85:b5:b1:a5:3a:70:ab:86:
36:93:23:b1:fa:a6:a3:e3:2d:50:84:61:73:a0:1b:
f7:8d:90:78:7d:55:33:8b:49:9f:f8:61:ed:3f:17:
dd:80:98:79:b7:d9:3b:82:b3:b2:52:97:ea:7c:ec:
bb:fc:e2:65:cd:8a:d7:05:45:17:4e:6d:f8:e0:2b:
26:36:66:7a:c6:c7:e8:41:e0:83:ab:0c:05:91:71:
1f:a4:e3:4d:11:2f:86:25:07:87:25:52:db:e3:91:
28:99:30:3f:3e:56:e8:17:97:38:1c:9e:88:fb:50:
46:13:6e:f7:fa:1d:61:bf:4b:84:74:b4:33:f0:aa:
11:13:ad:20:72:4c:78:4e:8b:ca:e5:7e:ed:d0:f3:
46:3b:78:79:77:bd:1a:49:63:77:eb:b9:18:31:d3:
df:83:7f:ca:08:a1:ee:09:91:8a:7a:e8:c5:64:a8:
a3:73:c6:61:a8:ad:51:ff:d7:aa:79:a1:b7:5e:eb:
b8:49:c5:31:ce:b5:9a:58:c7:b4:4c:21:84:cd:8e:
42:09:5e:f4:1f:da:6f:06:0f:90:72:3e:ce:26:8c:
5d:8f:11:9d:fe:b4:20:ed:b0:f5:9f:38:03:50:92:
91:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:ED:EF:1F:B4:8F:E4:55:7A:06:A5:03:E1:FA:0E:FE:9B:DA:53:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b7b733b-9f50-37a3-9d09-addc41ae78b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.198.104.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:a2:ff:e5:67:95:e7:f5:19:6a:2e:6a:96:bf:a1:59:46:43:
b1:49:47:d3:c2:b0:0a:d8:17:09:f8:84:57:37:7a:96:e8:2b:
fc:6b:2a:59:d1:21:63:17:db:65:2a:30:05:81:db:81:75:ee:
27:4c:61:d7:32:23:6c:b3:21:6b:5d:90:11:c1:c5:ce:66:50:
9c:27:15:67:62:dc:a3:c0:ca:17:f9:2f:01:1d:a4:d5:9a:3f:
05:71:01:1d:09:00:1f:43:e7:0b:25:b6:87:d1:6a:43:e7:88:
6d:59:39:63:4e:6a:8e:15:b7:1e:93:26:3d:16:a9:48:27:11:
6c:a7:5e:cc:c5:52:ae:b1:1f:32:93:c9:4e:46:b1:f7:0d:8c:
e7:31:d5:78:3f:51:3e:bb:72:d4:78:cd:7e:4f:ba:2e:b4:ce:
11:cb:c0:0a:c9:fb:b3:e4:6e:c4:b5:76:76:ac:16:d0:6e:dc:
ca:bb:a7:a7:d1:a4:fc:67:22:ec:65:84:e1:f5:f5:b2:16:22:
3f:b7:e4:a4:0b:3b:6f:47:2b:70:3b:3d:81:5a:e7:9d:cc:85:
4a:0f:56:b7:50:6c:3a:ab:48:a0:f4:7e:71:26:f8:ab:8d:50:
fe:ad:f6:04:2c:7b:1b:eb:4c:2f:15:e6:31:d0:05:f3:bc:62:
8b:be:2a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:56:16 2025 by rpki-client