Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/540bea6e-5daf-3b5e-b7aa-5e460a1b6665.roa
File: 540bea6e-5daf-3b5e-b7aa-5e460a1b6665.roa (raw, json)
Hash identifier: 1miEkW8OTdVr50NZ0oG1ZJSdRuRnfnwavRoiLiijrTs=
Subject key identifier: DE:49:A8:2B:79:E3:A5:18:DD:21:A0:6A:65:66:FB:E4:BD:69:C1:AF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487CEB4A664E9B9DDE78ED77E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/540bea6e-5daf-3b5e-b7aa-5e460a1b6665.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.44.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:4a:66:4e:9b:9d:de:78:ed:77:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=0ef2f951-6217-45ff-b606-d25cd2c6c387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:50:2d:7a:7f:e4:96:b6:1b:3b:52:b6:60:83:
57:23:89:ee:f8:b2:f7:5b:30:23:b8:86:3b:6b:d2:
78:ec:a4:7e:78:cd:ed:72:fb:fe:1b:ed:1f:40:f7:
38:e5:c3:9c:0e:ce:06:1c:f6:ce:17:77:f5:fb:fc:
57:c3:50:6a:e5:06:8d:b9:e6:13:81:79:90:ed:69:
e7:16:71:3f:68:10:f1:1a:2a:4d:01:78:69:eb:d3:
b8:7d:6f:8d:c7:90:17:69:4a:7b:b0:34:64:49:fe:
57:1b:1a:dc:e2:46:24:ea:b1:bc:65:5a:0a:f3:cb:
dc:22:44:63:41:9d:3f:e3:41:22:c9:b8:d2:d8:4e:
cb:47:5f:34:71:49:7c:8b:58:86:cf:e2:64:ef:fb:
1b:ff:37:d8:26:fa:ac:b2:09:97:fe:fd:c2:08:6a:
71:25:04:96:34:c0:1b:46:91:7b:03:97:e4:2a:fd:
84:7a:77:6e:9f:7e:e6:a5:ac:8b:9b:1c:6f:48:41:
b6:91:b7:c0:9c:61:e3:c2:15:11:9a:3c:a1:4f:46:
c4:c1:d4:c1:b1:ca:3d:10:42:6c:eb:e5:30:77:71:
b0:27:25:7e:53:14:3b:2a:5a:b6:12:42:4b:8a:e0:
84:cf:ea:cc:90:7f:f9:bb:21:ac:87:e8:fa:b6:60:
32:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:49:A8:2B:79:E3:A5:18:DD:21:A0:6A:65:66:FB:E4:BD:69:C1:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/540bea6e-5daf-3b5e-b7aa-5e460a1b6665.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.44.76.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:24:42:60:bd:97:ae:bd:bd:1f:08:b8:36:c2:ca:d7:e7:86:
18:93:ca:96:6d:1a:aa:0c:56:bb:55:a8:ad:69:72:2d:5f:31:
c7:33:78:19:f3:e6:fc:4c:f9:10:d2:32:2d:52:32:d0:72:25:
cd:bb:e3:b5:7e:75:d5:f9:7b:59:33:ca:02:e0:53:6d:1a:9a:
5f:01:c3:f1:0d:5f:27:78:41:ce:e8:7c:dc:9b:4f:6d:94:93:
e6:9d:19:ea:83:a1:75:4f:8b:af:a6:8e:18:aa:12:43:da:00:
26:20:a1:44:02:79:54:79:e3:77:21:10:8f:f1:06:c7:9e:54:
91:7d:97:70:4f:a0:e0:6d:a8:5c:3f:54:d7:b0:33:40:4b:e5:
85:b4:0e:22:f9:14:dd:6e:46:5f:b5:46:7c:89:61:81:c3:c2:
79:82:d7:4e:8c:66:a5:0e:43:3e:c2:b2:c9:4b:bc:9b:57:31:
02:e6:24:9f:c6:68:5d:89:5c:eb:ac:ce:41:32:b6:09:4b:27:
99:fb:ee:ba:43:b5:dd:97:50:a3:d4:09:7d:59:7b:9b:92:15:
74:08:22:d3:e8:4b:ae:18:a2:02:88:ae:d5:1e:88:f8:93:d9:
ce:99:b5:6d:ae:24:56:7d:c9:e2:c2:01:f3:12:73:fe:9d:00:
57:42:77:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:32:45 2025 by rpki-client