Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2cd75643-0abe-35fb-8cd6-cff5a404c092.roa
File: 2cd75643-0abe-35fb-8cd6-cff5a404c092.roa (raw, json)
Hash identifier: r4qNFjsKn/YsAakQ+dx5iFoD0UiJQE9By/V+KMLqutQ=
Subject key identifier: C0:65:5A:4B:C5:54:74:EC:27:F8:D7:9A:73:99:B7:A3:1F:24:08:B9
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A6CB6F5B48A794EDD8B9C400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2cd75643-0abe-35fb-8cd6-cff5a404c092.roa
Signing time: Fri 24 Jan 2025 14:00:52 +0000
ROA not before: Fri 24 Jan 2025 14:00:52 +0000
ROA not after: Thu 24 Apr 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.199.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a6:cb:6f:5b:48:a7:94:ed:d8:b9:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 24 14:00:52 2025 GMT
Not After : Apr 24 13:00:52 2025 GMT
Subject: CN=b7819a1a-4f19-419e-a661-cbf7c87eaef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:90:dd:d0:14:30:6e:44:0b:f9:ad:da:60:e7:
96:12:b4:d8:19:e5:4a:a4:c6:1b:fc:8e:9f:4b:24:
34:a7:8c:f8:c7:e5:9b:29:c9:9d:d1:90:da:5c:e7:
47:79:42:9d:45:42:53:d5:22:18:72:81:d1:da:a5:
23:1a:fa:ae:aa:0a:06:0c:52:78:18:f4:fa:4a:4c:
63:42:06:6b:e0:f3:a6:a1:99:82:ac:d5:40:98:bf:
30:0a:c3:69:fc:ae:d1:6b:3f:42:ab:47:ee:63:c9:
59:36:28:20:f3:6f:16:2d:1f:52:c5:a8:0b:11:1f:
16:f6:94:5d:fe:79:0c:6c:08:a9:b7:ce:ed:46:07:
27:df:1e:eb:8f:84:71:d2:d6:22:d3:b5:21:36:8d:
61:22:08:04:83:e9:e7:ec:bd:95:2e:8c:fa:d7:29:
7e:7e:64:8f:73:b8:93:c9:bb:73:d4:a1:ff:60:69:
83:6f:2e:29:7d:7b:12:63:7e:db:18:07:de:70:12:
66:0b:6b:57:63:0c:75:c3:9c:15:6b:e5:97:66:a6:
5b:c0:38:d6:23:75:ea:36:3b:84:a6:0d:a3:3d:99:
9e:fd:60:5d:02:ac:68:bc:39:6f:82:bd:41:ea:b9:
b7:f8:f9:8e:79:bf:6c:e2:80:d7:23:ee:55:6b:a7:
80:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:65:5A:4B:C5:54:74:EC:27:F8:D7:9A:73:99:B7:A3:1F:24:08:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2cd75643-0abe-35fb-8cd6-cff5a404c092.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.199.244.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:33:b9:9a:9f:b1:21:f0:dd:23:b0:0a:5b:4a:b0:23:41:24:
bb:cb:4e:7d:a4:9f:82:aa:cb:1f:28:99:40:79:30:71:83:b5:
f6:d4:fa:6c:9e:75:e8:d3:f7:90:f3:ea:73:6c:b0:d9:3e:b8:
a1:7d:3f:08:4e:a3:de:c6:54:0d:49:10:39:c6:33:12:41:c9:
9d:cc:9b:52:d9:43:ee:92:9d:65:28:1d:7b:0c:2b:84:97:6c:
a6:d4:c9:63:c0:22:62:68:a4:9e:31:92:ec:15:33:4e:8b:0a:
bc:25:25:8c:96:7c:76:ea:4e:94:50:09:b8:3e:00:d2:f8:ab:
9a:ab:5a:d1:5d:1b:58:b1:60:ea:11:da:62:5d:34:cb:22:46:
cf:c9:fe:59:fe:37:bb:41:6b:77:45:cf:21:6b:a9:b6:b5:61:
9b:ff:4b:97:f0:e4:39:2a:42:9e:99:7a:4d:5b:87:43:78:64:
e7:0e:26:8b:9e:92:d7:34:48:b4:84:de:d7:65:75:97:00:ce:
6c:b1:fd:e2:91:73:1a:e3:1c:28:cf:fd:31:d8:33:df:84:af:
64:2c:0d:d0:37:d8:a2:a4:e8:6d:b1:a2:c9:f6:4b:e7:63:22:
12:95:97:c5:d7:f7:bf:f2:47:41:d9:bb:27:fc:5b:ad:68:6c:
34:6d:01:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:56:58 2025 by rpki-client