Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c748ee3-a3ea-3f64-a802-f795c4d6bbd6.roa
File: 4c748ee3-a3ea-3f64-a802-f795c4d6bbd6.roa (raw, json)
Hash identifier: ncO8+q16UwRzmBW05x3btpIXri2VtOiQmtoLUYUX5U4=
Subject key identifier: D6:07:92:1C:60:18:6B:C4:EA:92:0B:9B:6E:9D:C2:59:27:95:95:69
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A830C9F419850DBCE0524880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c748ee3-a3ea-3f64-a802-f795c4d6bbd6.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 16625
IP address blocks: 23.201.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:c9:f4:19:85:0d:bc:e0:52:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=4a0d1ffd-eb18-45c0-b3db-cb35799f4116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:08:a2:0c:78:b0:46:fd:11:f6:b3:1f:68:f3:
5f:74:44:71:dd:aa:6c:33:23:90:7b:0a:97:fb:68:
d8:ab:06:c9:32:59:c3:b3:0e:2f:c8:06:a5:03:ec:
8b:cb:03:8b:7c:e8:09:39:89:71:fb:e8:e9:52:e5:
80:29:3b:10:0f:9d:7f:de:62:aa:d0:6b:1b:dc:91:
23:81:35:21:b3:ee:b9:62:7d:79:9d:72:58:eb:3b:
14:fb:11:b0:7e:54:70:75:10:32:1c:81:f8:fb:8e:
60:ab:0c:32:b2:8e:bc:81:67:a9:57:d6:f0:8b:b8:
4a:2e:00:d4:9d:1c:54:04:64:54:81:94:ee:65:2d:
c4:43:21:e2:41:4a:e1:c9:12:9b:ba:d7:d2:ed:bf:
b0:ee:78:37:76:c5:c6:89:51:5b:8e:e0:b4:76:56:
79:b5:4e:aa:69:2c:6c:29:ad:0c:87:77:b9:15:8e:
08:cd:e9:8d:cb:aa:5d:53:c8:3f:2f:9a:39:0d:4a:
69:58:71:15:65:2e:91:8f:7f:a7:88:01:12:0c:ef:
2c:d8:e2:34:91:fe:ae:d6:ed:95:6e:11:05:18:26:
16:5a:0e:42:80:e7:07:23:22:08:2a:61:7b:fe:2e:
fd:a3:8e:aa:35:99:b7:b5:f3:51:95:89:18:cc:e7:
39:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:07:92:1C:60:18:6B:C4:EA:92:0B:9B:6E:9D:C2:59:27:95:95:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c748ee3-a3ea-3f64-a802-f795c4d6bbd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.201.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:d0:02:bc:09:ff:2a:7a:2a:07:dd:cb:06:94:f2:f2:d9:43:
53:8b:40:44:2f:b3:d5:b1:31:30:4b:ba:a6:ae:35:94:a8:19:
f3:81:d6:a0:a0:f8:d1:30:74:80:26:44:e5:fe:dd:9f:38:40:
b2:1e:aa:21:ae:db:4c:0e:93:ff:c5:b6:f8:ae:81:df:60:11:
bf:f8:a8:f2:a3:56:e9:48:e6:cd:90:9e:7c:0a:8a:0b:f5:fd:
28:10:ac:1d:5d:f3:04:f7:00:ee:6f:0f:20:60:f6:0d:a1:b1:
b3:13:4d:71:b5:fe:f0:34:11:d7:7a:80:3b:ec:eb:6e:f3:2a:
64:89:96:fb:b8:27:72:5b:a2:33:c8:9d:b8:e2:07:22:b4:19:
a6:86:da:9e:19:c2:ed:6d:9f:2a:29:05:68:52:a9:5a:0d:ea:
13:6f:b3:3b:1c:b4:65:af:43:40:fc:91:14:f6:05:f9:32:64:
3f:a3:6f:e0:8b:32:95:57:91:6c:33:4e:12:82:46:c2:af:1f:
4f:a4:3a:44:93:21:0e:1d:53:a5:e3:ef:b5:75:8f:3a:51:74:
b4:61:e3:0b:c9:55:10:26:d6:e0:60:91:8d:eb:8b:3e:e7:52:
f9:7b:10:1f:26:11:3d:16:7b:3c:5c:7a:10:07:ec:05:6c:3a:
b2:97:11:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:40:24 2025 by rpki-client