Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ca553fb-cb13-3a66-94b1-0efd6079c673.roa
File: 8ca553fb-cb13-3a66-94b1-0efd6079c673.roa (raw, json)
Hash identifier: N0gfxWnmSuZmkc/VJjJZ6UNOAlzQYaOqADT9ZoOcttE=
Subject key identifier: 2B:B9:AC:34:9D:90:A7:C3:F8:CB:18:4B:1E:50:B2:CF:CF:9A:22:44
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A400C963D6A3E0E6669CF000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ca553fb-cb13-3a66-94b1-0efd6079c673.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.196.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:c9:63:d6:a3:e0:e6:66:9c:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=854d0bc5-ea38-4d91-90b2-79fc15413777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:97:88:07:e6:c8:d0:47:59:a9:a8:84:09:ce:
4e:88:e4:b6:a0:7a:d6:43:90:a3:9a:07:ae:6d:d5:
88:1b:74:35:e2:4b:fc:05:88:9f:9f:07:a0:c6:79:
6a:25:e9:53:d0:3b:8e:29:4d:ff:3c:bd:0d:b9:6a:
00:9d:cd:f4:92:84:31:d7:b9:99:2b:78:2b:08:22:
32:a6:ba:be:87:c5:1b:94:af:25:d7:a1:94:21:5c:
00:5c:6e:c5:22:e9:57:6d:f8:9a:24:74:b8:36:5d:
51:44:12:d0:db:37:27:c4:96:4e:00:07:e3:cf:9f:
36:0f:7e:d1:ce:8a:6e:b5:13:3f:07:c3:69:98:b7:
3d:01:f1:e7:e8:30:ca:db:e2:c2:5c:37:0f:fa:e2:
97:ac:19:53:b1:63:f7:e9:8d:91:c2:5f:6f:01:2e:
80:e6:fb:ef:d2:6b:28:f7:0f:15:e0:e1:60:23:d2:
69:f5:b9:06:7a:9c:56:00:6a:2c:cb:51:fc:b0:24:
93:7d:d3:c9:1c:2e:7f:2c:97:34:fa:a2:4a:a2:bb:
79:c1:0f:1c:d5:05:c9:de:50:9c:5f:96:ad:59:18:
00:e1:70:68:e1:1e:bb:ff:45:79:29:af:a5:e5:ba:
44:89:32:6f:00:c0:43:0e:fb:ff:b7:c7:1c:94:4a:
32:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B9:AC:34:9D:90:A7:C3:F8:CB:18:4B:1E:50:B2:CF:CF:9A:22:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ca553fb-cb13-3a66-94b1-0efd6079c673.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.196.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:fc:67:cb:4c:75:78:21:1f:80:b0:f5:33:23:6c:1d:bd:9d:
f8:67:35:66:59:db:19:e4:01:57:b4:96:40:11:05:65:43:b4:
f8:c3:0d:e1:cf:52:19:a2:ba:e6:83:84:e1:d0:9a:79:b7:9f:
a3:d2:6a:52:a9:8a:14:7f:be:fd:75:7c:d7:99:d2:2a:a8:94:
f7:92:12:ac:cd:54:7f:73:01:19:20:31:5b:5c:6f:14:25:6a:
85:d6:2e:8f:2d:3f:92:4a:b8:ee:4b:53:45:d4:69:18:ab:ad:
6b:18:35:c0:64:61:e6:11:af:02:93:10:a7:b6:1a:0c:f7:63:
ee:73:46:13:b5:cf:df:23:1d:9e:38:9b:78:47:aa:50:7e:e6:
f8:14:ad:e3:7c:b3:74:d5:f1:fc:17:5f:d0:f3:b8:01:d4:8a:
55:21:2a:02:81:63:99:29:34:85:00:8a:72:4c:7a:cc:c7:2d:
43:71:79:57:cb:22:ec:10:45:8d:3c:aa:e5:f6:c7:c6:f1:2f:
39:43:e9:96:c0:c4:0d:2e:c7:4d:f1:cd:25:ee:b1:fb:f7:28:
83:78:d6:3f:11:7a:29:4b:29:55:55:3a:44:c4:04:ba:ea:ba:
6d:96:6f:fb:50:38:c0:54:10:6a:70:ab:0b:00:3f:39:68:4d:
78:79:51:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:48 2025 by rpki-client