Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63f3f8a0-0691-3fd1-af1b-a2893b2e19dc.roa
File: 63f3f8a0-0691-3fd1-af1b-a2893b2e19dc.roa (raw, json)
Hash identifier: 2PJrkY1yBarIKOcoS+D3+SOJK/xK9j8v03moU/dukv4=
Subject key identifier: EC:72:9D:FA:0A:11:5F:3D:9C:3B:07:9E:9D:17:5B:10:92:BE:AD:45
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A830C92FE1E628844409C000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63f3f8a0-0691-3fd1-af1b-a2893b2e19dc.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 16625
IP address blocks: 23.201.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:c9:2f:e1:e6:28:84:44:09:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=6ff3ef63-c147-49c2-8574-700f70253c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:1e:e2:a7:6b:7c:61:a8:29:9c:90:61:82:
0e:c1:6f:be:30:b6:24:4a:ba:f7:67:7d:13:09:2e:
65:a6:35:95:47:96:1f:27:16:78:6e:e4:d0:ca:87:
78:cd:2d:3b:94:b7:ac:d9:a7:07:37:a7:74:1c:18:
38:fd:5b:ca:18:92:aa:85:53:06:40:b7:3c:c6:bc:
e5:44:5a:8d:3c:48:f0:21:9f:21:c6:2e:45:87:44:
86:fe:86:d5:79:71:63:2e:e7:79:dc:94:93:81:78:
01:b8:60:59:92:fa:10:99:95:15:44:fa:95:ea:9b:
35:22:c9:1b:32:3c:95:ef:ef:4b:2f:b6:8b:3b:13:
43:8a:ee:5c:5d:f0:d5:66:31:83:b7:06:32:41:05:
77:77:bd:8d:9a:68:56:4f:8c:03:ac:eb:43:65:b2:
66:d9:da:05:9b:35:a6:06:4b:63:8d:64:35:fa:c9:
f8:f3:52:5b:60:1e:5d:0c:6b:8d:20:cf:24:4e:97:
c5:9d:44:b2:3d:36:0e:87:45:33:1c:3d:d5:7b:e3:
f0:2d:97:29:c4:36:fd:90:d5:d3:f3:0c:38:2b:6c:
fd:c9:03:4e:88:c2:56:6f:d2:b5:7f:e3:30:e4:05:
0c:9e:fc:a8:47:8a:23:63:e8:df:5e:a1:ff:27:9e:
9a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:72:9D:FA:0A:11:5F:3D:9C:3B:07:9E:9D:17:5B:10:92:BE:AD:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63f3f8a0-0691-3fd1-af1b-a2893b2e19dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.201.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:79:9c:bc:14:68:9a:fd:98:bc:11:01:29:af:dd:f6:92:0c:
cc:30:75:5e:11:66:05:e8:7d:49:b3:ed:1a:94:89:7a:04:0b:
11:8c:75:98:4b:f2:7a:e9:5f:14:3a:3e:d5:83:f4:c2:29:99:
fe:29:fa:74:27:e1:cb:f0:2c:3d:02:4b:15:55:9e:92:27:71:
fc:bb:09:1e:41:27:36:2d:e9:79:19:40:7c:6b:a7:78:81:10:
87:63:62:dd:46:84:87:d2:13:81:f1:89:2a:b6:32:dd:cb:52:
d9:b7:cb:eb:3c:76:18:1c:17:c3:aa:fe:91:82:a1:76:f8:96:
48:7c:43:5a:42:a2:7f:10:9e:80:48:12:8c:f8:c3:8e:ab:6c:
be:de:2a:e2:ba:c1:da:54:f8:88:65:3f:a7:a5:6a:df:0a:29:
2f:c5:03:87:82:88:56:e9:f1:66:50:8e:f4:c4:89:2a:36:b2:
c4:fd:57:d3:b7:62:21:cb:c2:66:12:d5:56:e7:d3:c4:5b:a3:
0b:16:03:0b:e2:9b:78:c0:21:23:5e:a9:8b:c7:98:43:c2:4c:
b5:59:ac:18:27:88:dd:b1:3b:10:4f:45:10:fa:b3:0c:22:a1:
86:5a:7a:09:20:18:9d:f0:37:80:22:7c:58:8e:28:b2:d9:1d:
a1:a0:5b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:36 2025 by rpki-client