Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79d9eb96-df10-3c0b-8000-ad96cbaa3710.roa
File: 79d9eb96-df10-3c0b-8000-ad96cbaa3710.roa (raw, json)
Hash identifier: zEeoYgpaOwqA5/GUMG8nMYu2MBEZrd74X0d6OZWPQIk=
Subject key identifier: 57:17:1E:72:C3:99:7D:96:32:CF:5B:36:8D:3F:9D:DD:19:4D:B6:DD
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A99667C9C081026CA3EDA600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79d9eb96-df10-3c0b-8000-ad96cbaa3710.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.202.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:67:c9:c0:81:02:6c:a3:ed:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=5cab2beb-c947-46af-8666-8f02be202148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:23:e2:42:f0:d3:53:2f:ee:89:8d:87:5e:35:
1c:42:fc:d9:6e:be:48:fe:82:f0:d1:f0:bb:61:68:
0a:4b:c4:cd:11:1b:10:cf:24:3b:fe:10:24:61:dd:
67:fe:b6:de:70:a6:6c:7e:b6:52:d6:f2:7b:f2:71:
34:97:b8:34:6f:52:06:c8:7c:89:f5:3c:bf:a8:d6:
6d:03:0d:05:78:3d:87:65:e8:65:b2:68:bf:da:b1:
a4:f0:0f:23:1f:1c:0a:b5:f7:2a:64:5a:19:3c:4c:
b7:34:f1:f2:a5:d0:78:e0:74:22:11:75:62:02:fc:
50:a3:69:d7:f6:9a:3f:b9:dc:2a:ce:7b:9f:84:66:
72:73:95:60:8b:4b:10:95:b3:2c:3f:60:c7:51:d2:
c0:5f:0a:42:df:b9:b2:c3:f6:6a:01:44:3f:29:ff:
34:08:ec:9a:0f:4f:48:7b:3a:9c:c9:d8:ca:78:df:
8b:12:c7:63:80:4e:be:94:5b:a2:05:c1:8e:7a:8c:
74:da:6b:42:f8:55:c8:c2:ed:1c:14:c5:aa:4a:e5:
db:9c:25:e8:65:0b:76:2c:1e:df:39:e2:62:ae:73:
57:fb:ff:55:ce:cb:95:58:02:c2:ad:7f:aa:d5:a0:
39:7d:ec:aa:b7:26:1c:65:e3:c2:92:62:66:b7:30:
bc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:17:1E:72:C3:99:7D:96:32:CF:5B:36:8D:3F:9D:DD:19:4D:B6:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79d9eb96-df10-3c0b-8000-ad96cbaa3710.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.202.48.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:30:d0:32:23:27:08:0a:ab:ff:0a:d9:a7:89:b4:87:fb:f8:
f1:6d:82:22:cd:e9:7d:bb:b4:c3:1e:75:bb:87:12:5a:62:52:
90:aa:a5:bd:64:ae:77:38:dd:89:cd:9a:b8:1f:b8:44:d6:ed:
21:b1:ab:6d:70:8c:aa:87:b5:bc:1a:ab:b4:62:7d:6a:61:68:
d6:09:ac:6b:50:5f:ea:41:f0:dd:8c:bb:a9:51:a8:60:02:8b:
90:13:e2:ff:96:af:ba:b5:9a:37:a8:cb:2a:ca:2c:80:0e:6a:
27:1c:4b:9a:e7:19:c1:f0:1c:e6:75:a3:fc:51:ec:d7:ec:32:
75:27:93:3b:6c:3d:35:93:40:30:df:ba:07:e6:28:cb:16:93:
5b:33:bc:0f:2b:89:6c:e6:66:b0:89:ee:46:8a:43:b8:fc:51:
89:4c:cd:6b:88:77:ae:3c:57:b1:cf:33:ab:03:6e:4a:53:22:
e7:f2:54:ca:ec:d5:7a:53:5c:2a:a9:db:5d:a1:96:a1:36:1c:
4b:7a:ad:2c:37:09:9d:30:46:3d:0e:19:7c:d9:40:f8:9e:a9:
22:68:2b:5c:03:a0:40:6c:10:0d:8a:f3:ef:c3:81:e8:90:6d:
e6:87:cc:b0:00:88:88:5e:d4:b8:8c:e2:a3:48:b0:f1:ea:c5:
dd:4e:34:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:04:11 2025 by rpki-client