Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4461af8c-9be6-392d-b426-4a67dcabb74e.roa
File: 4461af8c-9be6-392d-b426-4a67dcabb74e.roa (raw, json)
Hash identifier: ug4/GOTX1/JuRaezwwOAzkuLp2FhPDVB1nXCdA6T4V8=
Subject key identifier: 40:EC:68:29:1E:21:B8:E9:D5:A2:FF:36:78:D6:B2:0A:E5:FD:A1:AA
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A6CB6C093D3D13BB7897A2E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4461af8c-9be6-392d-b426-4a67dcabb74e.roa
Signing time: Fri 24 Jan 2025 14:00:52 +0000
ROA not before: Fri 24 Jan 2025 14:00:52 +0000
ROA not after: Thu 24 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.199.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a6:cb:6c:09:3d:3d:13:bb:78:97:a2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 24 14:00:52 2025 GMT
Not After : Apr 24 13:00:52 2025 GMT
Subject: CN=5496bc7f-ca91-4f64-bbc3-557cd29e2863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:69:48:f8:71:0a:c6:7e:b6:d9:e2:7c:5a:a7:
22:6d:d3:fe:26:0f:53:d5:30:46:57:9c:d6:03:68:
f2:e9:4a:2b:41:c2:97:4f:72:79:15:ce:f5:00:eb:
cf:8d:50:9c:f2:60:63:d7:9d:bd:d3:d3:b2:42:c8:
66:a7:a7:17:74:9c:a0:eb:0d:a8:82:5a:f6:a5:5b:
0b:6e:66:12:08:c5:ef:52:38:b3:87:b3:b4:62:3a:
d9:89:6f:32:09:8e:74:44:a6:ff:fe:11:9e:87:5d:
1a:39:f9:dd:d4:70:28:62:35:09:0e:91:40:be:f2:
3c:3e:64:7f:c0:f9:62:16:e5:15:88:63:d3:57:0c:
c7:2d:68:c0:04:5d:82:1f:19:18:4d:60:6f:0f:db:
b7:fd:5c:02:32:78:b8:ba:a1:7c:58:9b:3f:71:6a:
d2:56:b4:51:20:af:fb:13:e2:58:c1:b4:c6:a9:1f:
f4:cc:0c:d8:de:31:43:f3:77:49:9c:07:5b:c1:f9:
84:2d:9d:0f:8d:a9:6d:1a:c8:5f:1b:70:fe:78:9d:
3e:23:cd:50:12:f1:53:47:f6:35:6b:30:a0:23:fb:
3e:e7:bf:90:ca:dd:e1:de:0a:be:67:db:27:e6:df:
b5:87:0d:a6:08:08:61:04:7f:35:fd:84:55:99:d5:
54:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EC:68:29:1E:21:B8:E9:D5:A2:FF:36:78:D6:B2:0A:E5:FD:A1:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4461af8c-9be6-392d-b426-4a67dcabb74e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.199.46.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:45:6b:f6:19:f9:c6:ba:c5:cf:67:06:a1:f3:46:16:3a:e6:
9d:b6:a9:45:9d:43:75:45:a0:6a:ef:29:14:60:5e:89:3a:48:
91:a7:ab:f0:5b:71:53:93:8f:7f:76:df:06:99:58:32:5e:4c:
4a:ca:34:64:2c:5a:3d:25:72:3a:d5:4a:db:77:91:c1:42:f5:
20:4c:ca:08:0e:99:09:5c:7a:51:18:82:ee:82:7d:3b:48:d1:
42:fe:49:5e:49:89:70:b6:61:dc:7b:78:aa:93:bb:b8:66:46:
0a:22:9d:be:ab:17:f6:f3:1d:f8:ce:74:f7:55:d1:76:c5:2b:
eb:e5:1c:35:d3:dd:a9:e2:12:45:ea:ec:49:aa:a7:30:ec:a1:
1c:50:14:d0:5c:00:49:2f:7e:01:9d:d0:13:79:3a:69:cf:72:
b6:9e:e0:11:d5:5c:ba:63:8f:95:2a:b0:ac:78:37:2c:14:17:
59:6e:6e:c6:c0:00:71:74:53:9f:c4:69:58:78:db:60:ad:18:
77:b5:1a:dd:a3:cd:a4:f7:74:89:52:30:97:2b:65:a7:a4:24:
f3:5c:fe:95:3a:6e:bd:89:22:67:b9:be:43:2f:65:40:f2:24:
82:b6:2c:15:9d:50:16:d9:7d:c7:b2:5b:24:be:aa:cb:87:c3:
b7:9c:f5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:23:21 2025 by rpki-client