Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68411e85-9e3d-3498-8379-62706668bebe.roa
File: 68411e85-9e3d-3498-8379-62706668bebe.roa (raw, json)
Hash identifier: 1vAvmkm/rKIo92+E3EqZEXxqQtTsaDq5ryKzK2pFCd0=
Subject key identifier: 45:32:49:36:5B:9A:34:F0:FE:70:24:A5:7F:72:A8:BE:C3:39:35:25
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A400DEE3CE327EF4735A0E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68411e85-9e3d-3498-8379-62706668bebe.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.195.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:de:e3:ce:32:7e:f4:73:5a:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=5dded21a-8a61-4928-92fb-5f42ca948fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a7:2e:a7:f3:63:d0:5d:cd:e1:c3:ce:71:2f:
2f:e7:1e:6a:dc:4c:0a:87:41:3d:a8:29:20:8c:61:
cb:e0:ed:84:50:85:a5:b9:ae:10:b0:34:f5:9c:f0:
5f:01:2f:49:b3:c9:62:e6:55:0e:20:ee:81:7e:70:
75:88:c3:c2:9b:af:c5:8f:57:e2:38:1a:a6:42:2e:
40:4f:0c:29:76:0c:34:bb:f2:bc:3f:cf:fa:0b:5a:
f0:d9:c9:65:88:d3:36:c2:bd:9c:43:ee:df:0f:02:
50:91:0f:55:12:17:54:ea:fe:0e:01:ce:de:51:80:
7d:b3:e6:4a:08:c9:09:56:6c:34:33:51:8f:dc:3f:
8f:bf:ab:81:dd:24:10:dd:1f:02:75:60:12:d1:15:
d7:b8:af:f4:41:ce:8c:07:a9:34:8c:22:71:41:1b:
cd:50:c7:a4:43:88:4b:5a:fb:cf:dc:16:19:a7:16:
8a:31:a9:58:b9:f5:32:4c:a2:03:56:e0:01:c5:dc:
a8:83:d1:8f:97:d4:12:32:23:8f:fb:e8:d3:51:45:
cd:54:9c:4b:f5:79:0a:29:21:5c:60:9b:8f:be:26:
69:b9:df:7b:3b:cd:6f:ec:56:5b:91:69:54:22:a2:
b1:c6:be:3c:42:8f:c7:77:a5:50:b1:8c:b2:a9:1b:
37:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:32:49:36:5B:9A:34:F0:FE:70:24:A5:7F:72:A8:BE:C3:39:35:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68411e85-9e3d-3498-8379-62706668bebe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.195.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:39:30:b7:6b:09:3a:b9:0c:1c:b4:a3:f5:de:80:2d:8a:9a:
f6:bd:29:7a:e9:85:e1:0e:5f:ea:85:e6:d2:3c:8b:41:74:11:
32:38:16:da:b6:7b:94:63:a3:93:eb:c4:a4:15:a8:26:e6:d3:
b0:e1:e6:7c:cd:92:64:39:93:aa:94:d7:61:26:ef:cc:51:db:
3f:c5:6f:d1:38:84:28:8c:7a:b9:b3:df:f2:36:92:bf:61:19:
9e:0e:01:93:59:62:92:06:60:ee:ca:e9:99:ef:43:53:72:09:
10:e8:b2:90:fe:c5:6c:1a:ad:f0:4f:e1:ee:e0:ed:a8:68:59:
7b:ce:ae:31:0d:df:7b:85:28:5e:c4:26:fc:12:57:d6:f8:3b:
e1:e8:b2:a4:3d:77:b4:61:d1:7c:93:15:e0:eb:36:6c:0d:70:
32:a8:a2:9a:96:27:ff:7d:a6:50:26:57:73:56:a5:77:56:82:
41:35:7e:d6:fc:a1:09:17:4f:6d:3f:54:52:83:74:33:e5:a4:
9c:19:6f:1c:35:88:43:47:4b:3a:5f:20:c3:95:09:a3:4a:1c:
cc:78:a0:8a:15:03:c2:d8:ca:c9:cc:96:80:6f:3e:55:c4:28:
03:c1:35:b1:2a:0c:6b:f1:a2:64:04:24:99:03:9c:c3:69:75:
b4:3d:0f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:06:00 2025 by rpki-client