Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f43c145-7001-3200-a840-f7cabef5ed3b.roa
File: 3f43c145-7001-3200-a840-f7cabef5ed3b.roa (raw, json)
Hash identifier: cSGC2ggiAvXu/d3DMfgYkyot9nusDUiP6vU6s/QWYAs=
Subject key identifier: E7:E5:04:3A:6A:22:5F:2F:A3:AD:D9:D1:D9:9A:A0:46:75:69:B6:1D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A400DD36FF98563075C51100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f43c145-7001-3200-a840-f7cabef5ed3b.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.195.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:dd:36:ff:98:56:30:75:c5:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=00f7ca9c-6d40-4b6b-a7b4-4a797c4c8c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:40:4f:5a:eb:6e:40:6a:60:af:ed:3f:79:
c8:48:04:9f:94:73:9e:6b:61:d3:ca:07:32:63:4e:
e5:9b:48:9c:17:60:59:b0:f0:b1:5f:e7:c5:44:d3:
af:43:dc:3d:11:e2:a9:38:97:96:5d:f6:68:28:8e:
43:43:47:70:1f:88:35:06:f3:b0:ac:27:a8:08:6c:
7c:76:4b:c9:4a:6b:ca:a5:09:6d:17:c6:c0:96:67:
e5:a7:6a:e1:69:84:bf:42:5c:f9:ad:77:35:cb:89:
9d:4f:f2:8d:78:1e:e3:22:b5:4d:9e:e4:8a:fb:b9:
98:b2:1c:95:a7:0d:81:76:c7:27:52:ef:e7:b4:84:
06:86:06:4b:d3:96:a0:28:bb:9c:a6:94:91:4b:a0:
26:ba:fb:87:c2:b3:e8:c6:4e:22:55:0a:ae:d6:04:
71:bf:01:eb:d4:0b:68:34:f0:8e:cf:59:37:a2:e2:
f2:74:87:39:18:a9:1b:75:8c:2e:30:96:3e:d3:e1:
7f:60:cf:26:f9:f3:eb:a5:8b:74:35:aa:d9:04:f7:
38:7a:fe:56:e1:90:7f:5b:97:53:11:f1:00:68:e3:
5a:4d:b6:7d:20:7a:9b:d3:bd:b6:45:dc:9a:5f:c6:
8e:6f:cd:98:c8:84:1f:5a:0f:7a:73:5c:d8:e8:fa:
e9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E5:04:3A:6A:22:5F:2F:A3:AD:D9:D1:D9:9A:A0:46:75:69:B6:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f43c145-7001-3200-a840-f7cabef5ed3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.195.12.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:ab:54:5b:5d:0e:01:c5:88:fb:2e:09:cf:5a:29:8b:1f:5e:
78:91:c4:fa:7c:90:fa:c5:e7:7f:04:d2:c0:6f:ba:0d:1e:dd:
23:35:bc:45:5f:87:a1:57:d6:1d:4b:9b:5f:ee:c8:cd:11:f3:
b0:2c:6d:c1:df:9d:f6:35:33:98:16:6a:f1:46:43:4c:c4:da:
2b:15:d4:23:22:9c:d6:fd:34:01:9a:df:e4:16:74:f6:27:8c:
94:c7:b2:0c:26:80:97:4e:1e:92:d3:dc:25:d7:29:82:17:dd:
b6:f3:f1:f3:18:84:f7:33:93:cc:20:b4:c9:ac:9b:08:ad:9e:
96:d0:4e:c1:7c:c6:2b:f1:21:d6:25:21:5f:35:8b:70:55:82:
a6:b5:ba:ec:f5:d8:8a:dd:10:a6:1d:51:72:e6:1b:5e:0b:48:
07:1d:d3:63:a7:44:b8:8d:ad:e9:e1:2b:d0:53:52:d6:9c:bb:
80:00:dc:45:39:0f:d5:4b:25:4b:8e:2f:60:c9:3c:a7:5a:d6:
5c:69:f8:a9:14:0c:bd:aa:8b:ee:7f:d5:10:eb:53:45:10:b9:
4e:4d:4f:96:f6:b9:8e:65:c6:f9:14:48:8f:53:0f:c3:fd:1d:
b0:c1:a2:3a:71:bb:73:f0:3f:96:9f:00:c2:a2:ab:2b:52:9c:
f1:0a:5a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:56 2025 by rpki-client