Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/221526a2-3a18-345a-b8aa-8efe56cba662.roa
File: 221526a2-3a18-345a-b8aa-8efe56cba662.roa (raw, json)
Hash identifier: hkhk0Kyt+tOtZ1hd1e70rYYa1QFACFapGqne1tLyrFU=
Subject key identifier: 91:9E:D7:2E:E2:A3:93:A6:44:49:B0:30:73:16:48:F3:25:EF:7D:8C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A400DB60FABD5678E2E3E700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/221526a2-3a18-345a-b8aa-8efe56cba662.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.193.174.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:db:60:fa:bd:56:78:e2:e3:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=15d4773f-3a8f-4f00-ba04-ab862305244f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:22:e2:d3:ff:01:15:b9:7d:1a:7e:4d:0d:7b:
e4:c3:09:0c:8f:e7:c7:b4:29:91:2e:54:b6:43:6d:
11:ee:c9:d5:4c:1a:02:4f:cb:35:10:89:bd:7e:3d:
d3:88:a4:f8:2a:cd:f2:70:d4:a3:38:bc:d7:6d:a8:
1c:61:4c:ed:ab:19:5f:29:f8:64:87:c3:e3:87:22:
90:17:e5:ac:eb:34:a6:26:04:c6:4e:7f:76:19:66:
67:05:ee:84:97:27:92:a2:73:d0:5e:f9:27:bb:e1:
c7:e3:08:15:7c:a7:3e:32:e6:d8:47:7a:12:2b:4a:
9d:30:58:f0:77:33:02:3c:d2:ad:3b:fc:50:8e:9c:
4e:0f:d0:7f:5c:70:e2:6d:35:ca:bc:65:cb:4f:45:
ee:4e:f0:bd:a9:9b:8f:93:d3:23:58:72:23:aa:3f:
81:96:05:04:3a:25:82:17:49:8e:60:d5:42:ff:c7:
3c:c6:f8:44:88:7c:04:98:8d:87:41:ae:0d:ce:cb:
43:ba:d2:3d:dc:6d:37:ee:36:05:78:3b:1b:fb:0a:
8a:60:5e:40:8c:1d:ff:14:10:45:0d:52:da:58:b4:
04:44:1e:4c:83:18:00:25:a0:57:5f:8b:f0:5d:bd:
8b:c2:fc:d7:2a:a4:62:32:09:de:e6:b0:9e:0f:25:
db:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9E:D7:2E:E2:A3:93:A6:44:49:B0:30:73:16:48:F3:25:EF:7D:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/221526a2-3a18-345a-b8aa-8efe56cba662.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.193.174.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:21:ba:6f:60:26:eb:56:e1:fe:22:e3:b6:0a:fc:e4:a0:0c:
1a:ad:be:40:50:59:33:62:bc:ec:f1:d4:bb:c6:ea:af:81:b2:
f7:9e:64:40:c6:e2:2e:10:72:e3:ad:9a:eb:66:44:f4:7e:42:
ee:6c:32:c1:27:cf:c1:29:b7:a9:fd:f4:b1:a0:95:71:34:c6:
0f:a5:bb:ea:7c:52:f9:ae:67:ca:f4:b3:31:1f:c3:9e:91:c6:
b5:14:40:ea:1f:e0:7f:24:b5:41:7f:35:99:11:c3:ac:09:98:
b4:ea:03:d5:28:d0:d8:93:99:63:c8:3d:35:8b:d7:78:97:a8:
4b:73:e8:8f:d6:8d:d1:e8:3f:43:be:8f:ad:cf:c1:bb:6a:bd:
81:0d:4e:41:5f:a6:ae:2c:36:af:aa:5a:45:a6:a5:5b:88:3f:
8f:14:51:f6:1e:87:0a:90:61:0f:65:d9:8c:d4:67:f7:28:d5:
6a:0d:b9:4c:54:9f:ae:3a:4d:17:c1:6f:6f:31:ca:ef:02:84:
ab:ec:a2:48:e8:53:28:1a:05:b0:48:2b:db:98:5b:57:ac:52:
e1:cb:c5:bb:3a:f2:00:98:60:1d:b0:6c:b2:9b:9b:ef:c8:7c:
64:5a:a0:15:0f:b9:7a:7a:56:34:8e:81:e7:fb:e3:b8:f0:49:
4f:39:34:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:36 2025 by rpki-client