Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70f8290f-8f2b-3762-bcef-e6c8da943e75.roa
File: 70f8290f-8f2b-3762-bcef-e6c8da943e75.roa (raw, json)
Hash identifier: E/+TW+EKhJhwHGyC2EVyNdiULOSfuITXn78t32OQw5g=
Subject key identifier: F7:88:4B:F0:8B:10:C3:13:4A:F4:C3:2F:10:4D:BA:9F:C0:EC:5F:0A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487CEB4972E4F746A622F0BCF0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70f8290f-8f2b-3762-bcef-e6c8da943e75.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.43.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:49:72:e4:f7:46:a6:22:f0:bc:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=49e98a5c-3d55-46d1-8f0b-2322b11a077d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0f:b9:0f:4e:bc:17:c2:6c:fc:9d:50:23:c7:
c5:bc:23:80:c4:fc:4e:2e:5f:63:c7:49:b1:8f:ac:
fc:a1:8e:fa:b0:50:20:fc:ce:d3:86:2a:55:12:c1:
9d:12:9a:2d:02:82:a6:c2:1a:fb:b6:48:ee:d9:68:
ad:5c:51:62:cb:fc:1d:c1:94:45:c2:6c:68:79:12:
8a:20:71:80:96:0e:a4:f6:fb:29:93:85:22:96:0a:
e2:a6:a6:ea:6a:93:0e:af:c7:82:7c:34:43:6c:51:
b9:db:07:91:c5:25:24:48:71:4c:46:9d:22:e6:5c:
bc:67:e6:8a:d9:fa:44:df:3b:2e:96:01:2e:86:93:
fc:13:1f:3a:3e:7d:2c:5a:68:8f:3f:a9:3c:bc:f3:
ed:b4:25:9a:d5:0e:5b:2c:d3:cd:94:75:fe:3d:13:
2f:28:b4:a6:d1:9c:a7:55:2b:93:3b:5f:ee:3e:33:
d8:94:35:35:5d:0b:5c:68:32:44:3b:30:f5:10:f0:
5a:c2:1a:22:bc:21:d9:3e:94:74:34:06:0a:12:cb:
93:d9:49:3d:a7:3c:d8:c6:7c:44:59:a5:94:31:21:
99:5e:e4:64:cd:56:46:fa:e8:e2:2a:ac:1c:72:19:
85:97:c2:f4:91:0d:13:b6:45:a0:cb:83:bd:d9:87:
18:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:88:4B:F0:8B:10:C3:13:4A:F4:C3:2F:10:4D:BA:9F:C0:EC:5F:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70f8290f-8f2b-3762-bcef-e6c8da943e75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.43.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:6c:c4:3d:7f:93:ec:14:1b:3d:82:67:5b:aa:1b:dd:3a:d7:
e7:71:bc:56:5c:5c:e2:59:a8:16:75:1c:c8:c5:23:f3:cc:0a:
94:d5:fc:b5:27:17:7d:2e:14:02:ec:54:2a:7e:83:57:9e:07:
8d:80:c4:67:8a:f7:15:71:a3:a4:44:82:2a:cf:ac:d9:80:90:
77:91:6d:97:8e:a9:23:bd:e9:9f:ce:db:9f:f3:50:db:c9:88:
2a:11:59:aa:ac:8b:27:d9:a9:5e:14:a1:32:04:a7:82:d4:bd:
c8:27:04:e5:30:92:91:1a:ea:e8:02:98:a3:da:5a:5e:41:bd:
43:93:f0:80:f4:98:3c:34:f7:1c:5e:4c:0a:1c:09:35:fc:9f:
1c:c2:0c:7b:4c:f8:4a:14:36:28:22:d2:3f:b9:1f:6a:2b:d7:
1f:ae:ca:54:6d:20:f6:47:02:70:ec:61:e0:36:cb:51:93:a5:
b5:38:ef:1c:1b:93:99:22:67:77:7e:3b:87:05:c4:86:e3:a6:
d1:58:8b:24:14:fc:99:57:d1:d0:ff:a0:3a:b8:68:cd:ba:a1:
94:40:99:7e:90:4d:f6:1e:e8:1f:11:a3:1e:0f:da:70:89:c6:
fd:61:93:91:d4:c0:bf:d8:9a:a1:96:24:18:25:3d:be:57:9b:
f2:64:75:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:58 2025 by rpki-client