Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ea979e6-03c4-3b0a-ac4e-ca0ddd95fdd4.roa
File: 2ea979e6-03c4-3b0a-ac4e-ca0ddd95fdd4.roa (raw, json)
Hash identifier: tsQjpL4IHtKS4P3jC08CxR9jmtox/kHZgpv8LJPyQiw=
Subject key identifier: BF:66:A5:D8:DE:DB:52:61:7E:24:83:AD:E8:19:3F:C3:93:D2:F8:D2
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487FB5F0AAB79218BBAFA85F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ea979e6-03c4-3b0a-ac4e-ca0ddd95fdd4.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 12400
IP address blocks: 23.48.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:f0:aa:b7:92:18:bb:af:a8:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=0cf22941-151c-48e0-81ef-656216fb91fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:84:6b:c6:e9:f2:c6:19:d8:20:c8:18:bb:af:
74:4c:f3:80:02:17:7c:22:18:4a:92:c6:f5:ae:84:
ae:91:14:97:33:0c:a0:34:d1:18:58:0e:9a:ad:ad:
c5:14:64:2f:ca:19:a8:b1:f7:31:33:b8:92:1a:e5:
40:18:f0:62:fc:4b:a8:e7:95:17:ab:db:81:fa:bd:
32:14:b5:e5:c8:a9:ba:b3:32:96:a4:e0:ed:1b:38:
4c:ca:5b:1f:90:35:5c:aa:1b:98:f5:47:8d:b4:eb:
1e:29:5e:9b:cd:42:ea:5b:ff:ee:1e:50:fc:22:ff:
97:4a:3b:5e:ae:ba:76:eb:fc:d6:f7:72:01:1a:1d:
77:e9:9d:e6:51:92:b7:53:40:fa:f2:9b:e5:78:48:
78:58:90:25:55:72:47:58:a0:e2:4e:75:ac:84:cf:
20:d8:13:3e:49:fb:69:a4:6a:29:ca:6e:db:df:82:
23:3b:46:2b:62:1b:4f:87:9f:37:33:85:55:6d:af:
aa:9f:b4:4a:af:4a:26:42:7f:70:cf:64:41:64:4c:
60:38:bb:72:a8:2a:d2:b4:9e:9a:89:26:27:ea:65:
e0:f0:03:e3:d3:59:76:26:f2:6a:79:18:16:31:26:
fd:86:9e:5a:93:c7:32:b7:3a:5a:85:7c:17:44:0a:
59:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:66:A5:D8:DE:DB:52:61:7E:24:83:AD:E8:19:3F:C3:93:D2:F8:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ea979e6-03c4-3b0a-ac4e-ca0ddd95fdd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.48.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:c6:59:0e:c6:a0:2e:7c:7f:d1:07:2d:26:de:4d:05:17:d5:
ba:2b:06:26:3d:f5:45:69:3c:7f:7d:54:0f:c0:94:44:ba:37:
76:49:b1:1b:87:ad:6f:d8:99:4a:a2:af:f8:77:86:a9:4e:1f:
97:88:54:bb:ff:a6:1f:fd:47:eb:1d:2a:02:e1:41:9a:9a:a9:
28:b3:61:cb:b4:95:e7:56:0d:b3:73:3c:c9:2c:1e:70:b3:0a:
c4:3e:a5:1d:b0:ba:c4:f5:f5:db:76:c1:cb:ff:65:87:df:f6:
26:b2:52:dc:27:59:15:18:5d:88:71:70:77:24:d2:34:dc:00:
23:0c:b4:23:db:e9:45:eb:28:b6:32:03:ba:a2:6d:de:06:c7:
5f:b8:61:a6:f7:b5:76:62:25:2d:ea:1c:b3:44:3c:62:4f:f8:
aa:d5:70:a2:ea:6b:36:a7:3f:79:34:e2:3b:da:95:9d:d7:7d:
c9:de:ec:bc:25:8e:3e:d5:d4:13:06:da:3b:43:bd:64:b5:16:
df:c3:47:2d:8f:85:1b:a8:0d:59:73:ba:8b:87:76:fd:e2:9a:
4f:c3:67:1c:a7:b1:a2:03:65:0e:0b:2b:30:10:1c:18:03:44:
13:e2:68:da:5f:b5:70:2f:e9:be:9e:eb:13:b7:45:09:46:c0:
3c:55:2b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:26 2025 by rpki-client