Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60d6a03c-9d49-3be1-ac00-54752ae1a578.roa
File: 60d6a03c-9d49-3be1-ac00-54752ae1a578.roa (raw, json)
Hash identifier: 9xCF8PHN7iYuI08U9DgVylTsxdQMHEhhkJQf9TQWUA4=
Subject key identifier: B3:88:39:46:B5:62:E1:3C:EA:E6:B9:DA:A6:B3:12:F3:88:13:56:FB
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A400CAE54CCA9CAAF6933000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60d6a03c-9d49-3be1-ac00-54752ae1a578.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.197.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:ca:e5:4c:ca:9c:aa:f6:93:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=c0a29b9c-989f-494f-a29b-521fdd95442f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:b0:49:ea:50:0f:f0:40:6c:6f:94:e4:09:
c8:10:52:c2:28:7c:73:e6:d8:c4:69:84:7e:9b:d5:
fa:7e:ed:53:b6:52:bf:bf:ad:fa:36:e4:84:5b:57:
07:05:5b:55:89:81:99:97:0c:9e:c1:5e:5d:5e:f1:
7a:5e:01:17:35:35:ce:d9:19:41:39:20:27:96:5c:
f9:36:5e:a1:1a:ae:e5:c0:1f:ee:74:ab:5d:2e:30:
b1:f3:b9:9a:ef:dd:38:c1:30:81:98:be:83:80:27:
c7:72:ef:3e:28:da:05:47:38:5e:9f:c0:b9:a1:18:
9a:ee:f4:05:7d:ac:4e:05:03:63:15:9c:12:7e:2c:
2b:9b:d4:17:ab:c4:9f:25:54:1d:c3:25:8c:42:5c:
87:c6:24:8e:81:4f:36:48:ae:e4:35:f7:52:52:d2:
7e:03:b7:2c:ff:f3:fc:86:c5:85:03:7e:b1:68:13:
1a:0f:82:4c:2e:22:8a:9a:b2:a4:61:95:bd:62:7f:
2f:bd:d2:17:37:f4:b4:e1:a5:5b:01:59:f8:b1:bd:
9d:a2:5f:39:b6:ea:ed:67:9e:53:fc:56:a5:66:e6:
e7:5c:da:09:56:bc:97:b6:c5:7f:e8:67:8b:7a:e1:
7c:fb:c7:2d:f6:d5:cc:77:8f:7c:95:b3:72:d4:cb:
75:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:88:39:46:B5:62:E1:3C:EA:E6:B9:DA:A6:B3:12:F3:88:13:56:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60d6a03c-9d49-3be1-ac00-54752ae1a578.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.197.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:e0:dd:b9:ab:e4:aa:f6:ce:5e:02:c3:3a:2f:79:d6:ef:1d:
bd:3b:6a:38:0c:d5:b6:b8:0a:9c:2d:ea:3e:56:a1:59:02:0e:
13:53:be:00:d8:75:f9:d8:f1:b9:f2:e7:4b:69:8e:03:4d:23:
94:87:fd:56:a2:42:8c:8f:6c:4b:0a:b4:e2:42:4e:d5:cf:4b:
b9:bb:0d:b4:eb:46:64:18:64:55:b4:ff:84:a8:f6:7d:f9:84:
c3:8f:f5:88:ad:86:5c:2a:59:48:ed:c9:51:56:3a:1c:3d:d7:
e8:82:df:c8:42:da:18:99:a4:8b:bb:d0:98:03:ce:fd:c7:d4:
37:13:b4:67:33:d4:19:2a:0b:d9:53:f4:ad:e2:1f:e2:86:61:
6f:c6:42:3d:35:cf:78:2e:80:5c:aa:3a:63:b1:da:1e:48:17:
fc:94:66:97:d3:f5:38:a3:78:7d:69:32:e5:a5:63:a0:bd:ed:
67:25:8f:75:26:a8:fc:d3:ba:89:68:28:ea:65:c9:f1:54:e8:
54:d7:f6:0e:95:ca:00:27:7b:e7:1e:68:c4:2e:a7:b8:f8:ef:
e9:49:cf:41:58:3c:d2:e9:b3:7c:ba:2d:2d:26:f2:63:a7:82:
66:65:06:76:a9:e0:7f:84:66:6f:66:f7:b3:f4:f3:d6:72:99:
a9:60:7e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:58 2025 by rpki-client