Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fdd0091-2f24-37c9-a47c-3fbd520b169c.roa
File: 5fdd0091-2f24-37c9-a47c-3fbd520b169c.roa (raw, json)
Hash identifier: bnSSIYDteahwYcNOQUHvZMPwWbwBOvvVp2M5sHXzTvw=
Subject key identifier: AF:C9:4E:41:3C:A1:F2:24:C7:F8:EB:F7:AD:DF:63:6C:14:EC:FD:4D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A400C68B42202BDA65958B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fdd0091-2f24-37c9-a47c-3fbd520b169c.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.194.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:c6:8b:42:20:2b:da:65:95:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=0895ed7f-7ca8-4f06-afdc-66f41df9282a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ed:f2:26:75:d7:11:91:39:67:cf:16:b6:de:
b9:6b:c5:68:5d:8e:ff:8f:77:ce:33:35:a8:87:ff:
dd:65:ea:09:aa:68:fa:4b:f2:cb:a7:a7:8d:36:db:
c7:83:c4:67:9b:d5:3d:dc:25:44:ef:32:c7:5a:6f:
4c:20:2b:70:a4:15:bf:a1:8d:35:a4:03:c3:2e:5e:
80:1e:89:5f:bd:5a:af:18:30:ec:34:57:d7:2f:60:
c6:4e:2d:94:db:e5:2c:25:58:e4:37:64:52:5d:ad:
c3:c4:36:23:2b:15:47:0d:b5:13:42:29:d1:e5:ee:
6a:6e:c0:2b:13:4f:ff:87:c0:1e:7b:79:be:8f:46:
ac:09:ae:37:e3:a0:e7:ec:6c:e8:d5:d6:65:6b:ff:
9a:f9:77:bd:46:07:17:11:97:63:21:84:0c:6c:b1:
f1:90:fc:29:88:ac:d2:af:13:c6:58:30:3b:2e:c6:
13:54:54:60:cc:68:86:e1:2a:b6:c5:27:79:3e:09:
9b:09:e5:cb:f6:65:dc:b1:be:91:96:19:f2:7c:6f:
a2:77:a7:f5:23:45:84:ca:2c:67:e4:dc:83:74:7b:
2a:8d:92:2a:14:e6:20:73:e0:0a:14:ef:ec:51:89:
8d:2c:70:9d:d2:85:cf:a6:13:a0:c8:80:8d:94:7c:
59:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C9:4E:41:3C:A1:F2:24:C7:F8:EB:F7:AD:DF:63:6C:14:EC:FD:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fdd0091-2f24-37c9-a47c-3fbd520b169c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.194.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:0d:d6:0b:b0:ce:21:61:8b:53:a2:4e:e6:d2:ae:20:67:a1:
4e:88:cf:b4:60:51:95:3c:c8:08:82:35:ac:ab:2e:f8:b8:c0:
45:4b:f4:96:3b:a0:fa:29:58:c0:ad:78:eb:ff:85:58:41:30:
b4:7f:c7:ec:df:c7:0e:0f:5e:5d:48:f7:ec:b2:e8:96:04:6d:
72:ee:dc:b0:b0:ab:7e:71:cd:68:ea:ac:66:1d:1b:41:0e:3b:
27:64:08:2d:23:d9:f0:bc:c3:9d:ad:15:cb:ad:c7:1e:07:e9:
1a:9f:6b:75:ea:ec:d2:5b:4c:5b:37:f6:8f:1d:e6:5b:2e:77:
b6:fc:a9:38:89:e5:15:a9:0b:e6:aa:e2:03:17:78:f3:56:c1:
a5:64:2a:23:7b:ec:fb:a5:a1:0a:34:4f:c7:12:d5:99:d0:de:
33:00:02:be:cd:06:08:a6:23:e4:88:f7:e0:61:8d:25:a2:72:
75:95:77:81:dc:57:fa:9c:f4:bb:42:d9:12:28:2e:61:d4:03:
02:80:7d:0d:16:a3:9a:f1:a3:1d:fc:39:ed:c6:9e:88:6e:43:
59:d5:c9:15:ad:28:c7:7b:1e:b2:18:ca:af:f6:ca:99:5e:7d:
bc:c1:9b:71:23:e7:a6:3b:b2:f9:f8:35:af:d3:70:d6:8a:15:
67:03:60:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:24 2025 by rpki-client