Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f246c80-70b2-320b-b5c3-fba77d4cf329.roa
File: 4f246c80-70b2-320b-b5c3-fba77d4cf329.roa (raw, json)
Hash identifier: L3rVMmfk0MBNTIRekvjeUZFDZEd5r5bi/4Il51TEwxY=
Subject key identifier: AD:CD:E0:5B:6F:DB:B3:9F:D9:93:15:BB:57:7A:04:73:55:A3:B3:6D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A400C4189109D56D6D3F5F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f246c80-70b2-320b-b5c3-fba77d4cf329.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.193.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:c4:18:91:09:d5:6d:6d:3f:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=b192e5de-98e1-4e33-b6f8-fad0bd5cc235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8a:90:ee:38:92:23:8f:a6:01:a7:a7:98:1c:
cd:be:c0:db:e4:e2:9b:fe:be:35:f8:af:24:6a:98:
23:87:2d:f2:0b:5e:46:bf:f8:76:99:c1:2a:3a:87:
d9:cc:5e:81:2d:8e:3d:71:3d:9e:95:b4:a9:fc:47:
07:92:bf:64:56:35:7a:0d:01:b2:c7:0f:fc:ba:16:
70:a4:fb:b0:91:7a:6f:6b:99:8d:22:ba:0e:de:e6:
a8:a0:85:da:a0:70:71:58:e7:9c:7c:54:d9:b4:6f:
d7:6a:fa:4a:83:cc:3d:db:84:65:83:fb:32:f1:d3:
dd:cb:e5:5c:8f:36:e8:51:8a:b6:ee:03:ad:6f:36:
4d:fe:3e:0d:45:6c:b9:30:5f:60:47:43:14:98:b8:
af:c8:71:12:f8:25:c3:3c:11:30:e0:3c:15:20:42:
6d:ae:02:5c:bd:df:f2:67:b8:93:d5:11:b9:19:9e:
cb:9e:09:e3:de:73:d2:c6:5b:d1:5b:6c:3c:6d:3f:
61:e8:b4:1d:bc:b7:8b:0f:39:be:8f:a5:5d:0d:46:
33:8c:32:c7:8e:96:7b:4d:b7:32:63:02:25:13:9e:
a0:32:db:54:e4:34:75:5a:9f:d0:d1:43:51:cd:56:
a9:28:74:05:81:a5:0a:44:63:fc:9b:5a:ec:1a:f7:
21:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CD:E0:5B:6F:DB:B3:9F:D9:93:15:BB:57:7A:04:73:55:A3:B3:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f246c80-70b2-320b-b5c3-fba77d4cf329.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.193.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:7e:0d:a7:2d:ba:d3:d2:24:da:03:77:eb:fd:18:24:79:d3:
f8:62:d8:74:dd:7e:56:c1:cf:19:cf:2d:4f:f9:c6:1f:4c:ed:
d9:4c:57:75:d9:2a:5f:09:bb:e8:18:43:dc:b3:52:f7:96:d3:
c6:54:e0:13:57:e6:fc:64:8a:2d:8d:22:72:58:34:90:3f:15:
e1:b8:fe:be:64:90:b8:48:10:58:a7:a0:0e:9b:3a:6c:84:c7:
43:43:63:c5:db:02:9d:f6:35:49:84:33:d1:43:4e:1e:10:4a:
b6:91:a6:e0:e5:86:21:81:77:4c:81:39:c4:87:88:21:6f:ba:
4d:85:ca:ff:3b:5d:29:34:30:55:66:e0:48:76:42:42:a6:cb:
c3:11:d0:d1:7f:b2:31:5b:24:cd:c3:4c:bf:32:da:cb:9d:5c:
99:54:3f:35:45:9a:36:7b:06:20:be:4f:24:43:f4:16:2c:e2:
19:db:f2:f4:43:0f:ff:bf:16:3e:72:bb:fe:34:59:7d:3c:33:
35:a1:49:0e:a1:7c:6f:35:75:9a:74:a2:34:cf:6c:65:5d:dd:
06:f5:ea:27:0f:82:60:75:b7:6a:77:ef:ba:d3:7a:a7:8d:cf:
32:11:3b:e4:84:8c:3a:08:98:54:fb:ab:e0:44:59:8c:5d:39:
a3:e6:67:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:42 2025 by rpki-client