Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/723520ed-b381-3cba-8bc5-30ec322bad2f.roa
File: 723520ed-b381-3cba-8bc5-30ec322bad2f.roa (raw, json)
Hash identifier: hufVA17jzLr0GgyjLUOTychqMP6psllb6YHQ+Oz8x+4=
Subject key identifier: 33:48:79:12:0C:A4:56:DB:91:FC:2D:AD:60:C3:45:46:0E:32:D9:A7
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584898D61D7F7B253066F7073980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/723520ed-b381-3cba-8bc5-30ec322bad2f.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.192.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:1d:7f:7b:25:30:66:f7:07:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=fb8dc414-d923-4f1f-b8a9-dcf66dc5719e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:60:46:65:15:73:9c:49:81:70:0a:e4:cd:d8:
6c:d8:60:a7:ca:61:83:0d:da:da:15:dc:fe:5c:c4:
ef:a2:ca:c1:6f:87:2b:70:00:de:32:69:38:88:66:
81:1f:4f:4c:f9:ff:c2:5c:4b:a9:57:6c:47:ad:8a:
a5:f3:c6:e1:f6:65:d6:80:c5:35:6c:ca:83:8d:af:
9d:54:6e:bb:f8:c4:1d:42:64:c7:c9:72:7c:02:1e:
13:23:cb:00:bd:d5:e4:26:55:b1:87:e0:05:eb:4f:
63:2d:13:64:80:0a:3b:f9:97:ef:be:ec:2c:a3:38:
10:c9:64:63:08:2b:c6:eb:80:a6:67:a5:d4:5c:96:
04:9c:47:46:aa:c8:0c:f5:db:3e:b4:34:ef:d1:c3:
0c:89:81:8c:0d:af:fb:60:d7:1f:6e:5f:95:21:7d:
ec:d8:3f:cd:53:f4:36:c2:6e:3d:1e:c7:ac:52:fd:
08:f3:a0:95:6d:a7:0e:b3:c5:ec:cc:68:fe:44:e4:
1c:e7:6c:30:e0:54:4c:35:5a:1c:6e:df:f6:0c:30:
42:03:03:e8:93:74:f3:42:48:c4:07:fd:cc:d7:b0:
cb:78:45:f4:69:cb:e4:3a:7b:be:49:3b:14:1a:3b:
0c:b8:ec:bc:d1:9b:73:c6:57:d8:fb:cc:2f:ed:bd:
80:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:48:79:12:0C:A4:56:DB:91:FC:2D:AD:60:C3:45:46:0E:32:D9:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/723520ed-b381-3cba-8bc5-30ec322bad2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.192.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:2d:6f:85:be:dc:96:64:03:42:ef:ef:ef:85:8f:c5:e1:ab:
3f:5c:2a:2a:c1:7b:03:ee:b7:91:e1:aa:92:5b:2c:7d:5c:74:
27:4c:7c:8b:c3:20:a7:d6:ee:04:2a:60:73:6f:3d:e0:78:f5:
79:b0:8f:a1:19:5b:e2:c2:92:17:a9:99:7f:dd:76:30:7d:48:
ae:80:40:cb:c9:fe:31:68:d1:64:06:ad:e9:5b:1c:08:d7:82:
0d:26:e5:7a:e8:9c:fe:da:d0:f4:a2:a2:5d:80:f0:11:fb:c3:
7a:11:b6:17:3e:56:5e:14:da:f3:f4:4c:92:87:5a:a6:40:fe:
0c:db:6d:d1:09:0e:28:d5:43:72:ae:b9:1b:9c:90:25:b1:21:
5d:47:42:40:7f:b4:8d:f2:c7:d9:a7:3e:43:60:ae:95:65:08:
ad:94:6f:87:a4:47:7d:9b:33:88:65:a7:ac:be:cf:0f:34:1e:
23:be:28:04:09:f6:c6:05:59:18:95:57:28:8d:e0:63:04:73:
95:38:7f:43:08:ed:97:7a:d7:bd:94:28:58:85:fd:ba:c4:b6:
4e:d1:c9:03:e1:82:56:56:77:57:35:91:46:58:5d:22:49:e6:
24:a2:ec:0c:20:c0:26:39:c8:65:d0:2b:8f:46:08:2e:71:d0:
79:bd:9c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:11:39 2025 by rpki-client