Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f59f28a-b976-3a47-be82-92735952419c.roa
File: 7f59f28a-b976-3a47-be82-92735952419c.roa (raw, json)
Hash identifier: hS+MfU4NVApeXMM6EKx3V8aAMM40m2EV5VMIImzx02A=
Subject key identifier: 7A:10:C6:2D:5F:90:0D:FF:C4:E1:02:BA:E5:CB:5D:54:94:4F:C7:79
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848960B634E69386AFA20E74540
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f59f28a-b976-3a47-be82-92735952419c.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 4788
IP address blocks: 23.220.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:63:4e:69:38:6a:fa:20:e7:45:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=394e1ef0-51ed-49f2-9f7f-5e9a1624403d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e4:31:2f:f7:4f:27:42:0f:bd:2c:81:f1:91:
13:81:b8:b6:54:d7:6c:0a:a6:7a:24:99:57:c8:82:
58:c7:17:8b:e1:f0:1b:3a:7e:fe:17:03:6a:ce:5d:
fe:3e:de:5a:cf:63:b4:e7:ed:9c:45:4b:da:34:36:
90:e0:04:21:c9:57:e8:7d:db:ee:0b:95:2b:b1:e9:
54:4e:91:57:85:ce:1d:e9:39:db:38:4d:4b:6b:83:
a1:6b:8c:5a:27:f8:5a:60:c5:57:eb:65:b7:05:17:
c7:2f:4f:b0:51:f5:4f:39:8c:da:40:26:0a:c2:cf:
38:3e:af:d4:2a:67:a4:ee:ad:be:f8:5a:b7:51:71:
32:98:5d:ef:97:af:58:4b:f3:d0:0e:a1:2d:0f:d4:
81:35:cc:85:cd:99:ef:fd:9e:74:26:c6:11:54:ab:
fa:8e:98:8b:f6:dc:c9:ab:2d:c3:ad:95:5f:f6:02:
1a:f5:04:76:a6:57:4d:31:8a:63:de:d0:3e:2e:b0:
56:82:35:09:a5:f5:a5:29:8b:b6:01:22:b3:9c:54:
ec:b8:cc:cc:d5:8d:ef:f1:f6:d3:ca:fc:8b:78:bf:
df:b8:2f:16:cf:c4:86:05:ed:42:11:f5:c7:42:a7:
76:55:07:16:84:ca:e1:96:ac:0f:65:54:31:56:e9:
f6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:10:C6:2D:5F:90:0D:FF:C4:E1:02:BA:E5:CB:5D:54:94:4F:C7:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f59f28a-b976-3a47-be82-92735952419c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.220.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:07:f3:3b:83:fb:c6:9c:bb:34:5b:f5:75:31:91:89:ff:fa:
f2:b4:c0:21:35:5f:bb:8d:f9:08:74:44:74:b8:90:a8:2f:42:
0e:4a:8c:1d:1f:ff:a3:5f:84:01:70:a9:99:3b:49:34:1e:28:
35:84:25:3a:2a:f8:e9:44:77:2c:47:a8:b3:be:00:46:11:df:
11:29:99:5e:28:9c:51:6d:43:7d:01:d2:e4:87:4b:79:e0:8a:
2a:d1:71:08:23:3a:1a:11:c3:06:60:8e:84:40:93:50:c2:94:
01:39:d8:47:3f:33:1f:fd:4a:3e:09:15:e2:41:b5:69:5b:6f:
ee:9e:d6:55:9f:38:00:56:35:00:28:02:2a:19:b4:4a:e0:00:
85:91:87:da:62:fd:ca:05:19:cb:19:0c:60:dc:6d:4f:49:a6:
d1:c5:36:0d:d1:fa:64:cc:90:67:c3:35:81:99:8c:e6:4c:d5:
b7:6a:9a:dc:1f:fb:32:8b:e0:c7:dd:c2:93:ea:5a:79:75:e7:
b5:87:7c:81:88:4a:4c:51:cd:14:07:84:2d:e8:b0:d0:c1:88:
ed:5c:01:ac:77:a2:92:6f:47:73:c6:d1:6e:b7:92:70:3d:cf:
20:48:91:09:a7:28:10:00:9a:5a:0d:1c:ea:45:a0:82:1c:d9:
b1:a0:1d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:18:50 2025 by rpki-client