Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b590347-5610-3c95-bb8c-0c7515ddd025.roa
File: 7b590347-5610-3c95-bb8c-0c7515ddd025.roa (raw, json)
Hash identifier: l7YJm0SEXE+TaG5gHy71M/BCRtYmzKMn2E1mwEXCnm0=
Subject key identifier: 1A:43:D2:FB:47:FF:46:9C:99:C2:1F:4B:3D:96:70:D7:5F:56:80:FF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A400DBB7BCDEDBA655EE0C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b590347-5610-3c95-bb8c-0c7515ddd025.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.193.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:db:b7:bc:de:db:a6:55:ee:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=edeee59a-5129-412a-838b-ca1bffc275b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:09:59:e6:70:63:1e:36:32:a1:fe:66:fa:ea:
dc:fe:34:52:06:af:1f:fe:6a:40:17:f5:41:f6:71:
49:49:f9:bd:64:61:11:8d:45:39:2e:62:f4:bf:b2:
e5:8b:61:4a:7e:59:44:dc:55:d9:24:e9:a3:53:31:
3c:6f:20:cc:d3:51:ba:fe:2e:c0:0e:ed:0f:a4:82:
20:36:73:0c:fa:86:e7:10:74:70:71:2e:2c:4a:65:
56:ce:eb:6d:7a:2a:ca:4f:8e:fe:b8:a2:a1:2b:4d:
67:b1:70:00:35:0b:a3:df:2e:71:fc:41:28:bd:4b:
e5:b0:61:44:2e:c3:d3:00:a5:3d:58:e4:fd:97:2e:
45:b5:28:52:31:19:70:85:82:17:72:ee:9b:6c:a5:
7c:64:cf:cb:fd:5c:ca:22:f9:d1:74:4a:1b:f7:73:
80:a7:3f:fd:cf:4c:9b:85:b5:df:ea:8e:17:e6:19:
8f:ef:a7:65:53:9f:76:32:a4:9b:bc:41:8a:49:83:
79:91:2b:04:1d:d1:c0:aa:1a:1c:65:be:83:cc:a5:
6c:f3:d5:c5:89:09:57:37:7b:e7:7d:20:77:ce:9b:
81:0a:64:37:d3:76:f4:14:76:b8:1c:a5:47:65:6b:
78:2e:c6:5d:6c:e4:eb:62:67:02:8a:a8:20:dd:fa:
3d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:43:D2:FB:47:FF:46:9C:99:C2:1F:4B:3D:96:70:D7:5F:56:80:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b590347-5610-3c95-bb8c-0c7515ddd025.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.193.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:7b:78:4c:09:3e:fb:0e:27:83:7f:31:fd:6c:36:87:9a:8b:
85:d8:bb:00:ef:5b:32:5b:20:0f:00:b2:79:e0:5d:bf:22:d2:
7e:38:ed:27:1c:5b:75:7e:c8:00:2f:c7:3e:48:bb:48:b7:f2:
4f:b9:c4:e4:d8:48:47:ae:31:c7:70:ce:a5:c8:1c:e0:68:5d:
40:85:c2:77:32:b4:ab:64:de:5c:a6:2c:aa:4c:a0:6a:d5:8d:
65:cd:50:60:7f:13:4c:14:82:13:d9:31:5d:4b:7b:07:03:43:
a7:31:62:41:5f:33:33:e8:d2:06:f7:38:65:ba:fc:87:48:f6:
1e:80:83:32:74:ed:0e:10:7c:68:1e:18:8c:9f:bc:9f:88:b2:
12:25:0f:cc:98:2e:de:0d:db:44:9f:16:9b:bf:81:f8:f2:20:
56:c4:90:ac:f5:98:c0:fb:c7:b0:ca:ec:8c:7b:b4:17:c0:1f:
14:2d:0c:0b:54:81:05:0a:c2:f6:47:93:15:ab:db:75:05:fd:
ad:78:ca:30:b9:12:e4:8b:c2:43:fa:f7:b5:4c:52:c9:43:d8:
d6:4f:b8:8a:cd:80:f6:b8:43:53:92:54:e5:1d:3f:d2:15:42:
4b:e5:77:87:bb:28:70:27:f7:2a:a4:1d:70:a3:bc:09:1e:bd:
4d:b6:b0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:49 2025 by rpki-client