Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3454a8c0-e93d-3329-adaa-f853757f636f.roa
File: 3454a8c0-e93d-3329-adaa-f853757f636f.roa (raw, json)
Hash identifier: lSFsUiRMGIpV3ppkdygmImu2VRoRlgSftzqp2K0GS8U=
Subject key identifier: 21:70:09:19:F7:A7:43:C0:47:EE:C8:A3:50:1D:68:2A:68:F8:89:9A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584890760E81C00C23A08B2972F8
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3454a8c0-e93d-3329-adaa-f853757f636f.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 24319
IP address blocks: 23.200.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:76:0e:81:c0:0c:23:a0:8b:29:72:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=55c80d18-b8df-4d8b-9511-29cd702ebf86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9b:8f:9e:b3:1f:ae:ed:ee:ad:99:87:d1:57:
86:0a:18:a2:7a:37:19:51:bb:fb:d3:32:12:dc:6a:
c9:d7:98:6f:a6:a5:a8:c1:8e:5a:77:c9:52:91:00:
77:bf:66:40:78:90:37:22:3e:ec:80:6c:6c:44:e1:
d9:2c:2a:be:b5:3d:ab:84:ea:79:dd:b8:ab:1f:22:
cc:b2:4f:0d:cb:53:65:6f:cc:61:bc:0e:de:2e:90:
81:bb:b8:3f:83:cf:06:5c:df:66:07:0d:c9:d5:ba:
c5:80:95:c1:1a:a4:8f:80:aa:28:12:21:14:70:23:
5b:e6:7f:42:12:4c:f5:3b:dc:30:90:cb:2d:b3:a3:
ae:5e:c6:84:5b:91:4e:f1:1e:bd:e0:be:e9:71:5c:
20:c9:67:c5:fe:35:f8:16:2d:cc:8d:e1:8c:8f:c0:
10:7d:e1:03:b6:44:68:30:f1:82:b4:e3:e5:4e:00:
4f:b2:59:dd:c3:6f:6a:3d:2a:69:e1:06:8b:ff:3d:
4f:a7:35:5c:4c:3f:85:3d:c2:81:24:b8:41:bf:44:
f7:d7:bd:42:8d:91:cb:00:3a:17:7b:23:b5:61:56:
67:17:a6:41:7b:fc:78:67:e4:0b:56:7a:7d:04:1b:
6b:a2:a1:70:08:02:e1:ca:9b:94:ae:c4:90:54:8b:
d7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:70:09:19:F7:A7:43:C0:47:EE:C8:A3:50:1D:68:2A:68:F8:89:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3454a8c0-e93d-3329-adaa-f853757f636f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.200.65.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:fe:62:06:fa:0c:56:43:88:d5:95:60:b0:20:76:d6:cf:c2:
d7:8e:b5:d4:cd:e6:1e:b8:2a:ed:c0:89:52:30:3a:e6:dd:32:
2c:40:c8:ef:62:0f:9c:fb:10:26:b1:ec:bd:b5:3a:50:1d:bc:
eb:9c:de:e7:69:d7:b4:69:85:9a:a8:31:14:25:5b:73:84:17:
85:0a:9e:57:e9:69:b6:4f:11:8f:fa:c1:52:63:34:8d:f9:17:
3c:43:79:0f:83:41:4d:7a:94:44:c9:ff:14:c8:ed:5e:fa:03:
9a:44:66:2f:51:97:a9:5e:d9:6c:a2:27:f7:50:f5:79:53:96:
33:fe:34:5c:0b:22:1d:f5:af:5e:40:70:31:48:5a:d7:18:d1:
e5:da:08:8d:94:af:11:6a:4e:a3:3c:53:f0:ba:72:25:e0:93:
9b:32:cb:bc:0e:ab:6e:53:4f:41:6c:93:4e:1d:cd:e8:51:28:
f4:86:f3:9d:a1:cf:b8:fe:63:1f:89:b9:72:76:d3:48:3c:48:
36:52:c0:7b:ee:4b:cc:77:0d:52:dd:25:4b:9f:7b:d7:02:d9:
41:a4:a4:f9:b2:42:c9:32:b7:e0:f3:dd:51:a5:8c:50:3d:ab:
f0:ac:e2:b8:26:6f:93:86:fd:0c:79:7f:c2:35:c3:70:e0:2c:
22:cd:88:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:01:24 2025 by rpki-client