Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/902227eb-6c48-3b5a-99c1-f3ef54fc1cca.roa
File: 902227eb-6c48-3b5a-99c1-f3ef54fc1cca.roa (raw, json)
Hash identifier: jPaoS6MI82KmDXuHMrj6oza4RZCcDWiI6h9ldxmohc4=
Subject key identifier: 35:45:C7:95:2E:5A:94:24:09:92:F3:53:D0:AF:A0:F0:16:F5:F3:A2
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584910E183160D50B370CD73D0D8
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/902227eb-6c48-3b5a-99c1-f3ef54fc1cca.roa
Signing time: Mon 03 Mar 2025 14:00:53 +0000
ROA not before: Mon 03 Mar 2025 14:00:53 +0000
ROA not after: Sun 01 Jun 2025 13:00:53 +0000
asID: 16625
IP address blocks: 173.223.128.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:e1:83:16:0d:50:b3:70:cd:73:d0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 3 14:00:53 2025 GMT
Not After : Jun 1 13:00:53 2025 GMT
Subject: CN=d5ee92b8-6cb5-4b7c-bd52-95d627d524f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6a:d4:0f:3d:de:2f:6a:da:38:fc:b1:4b:8b:
d8:db:7e:cc:8e:20:76:98:1b:11:11:ee:a5:f5:7d:
1e:5f:8b:5a:98:92:ac:83:63:37:40:2c:3f:a7:ff:
bc:ec:69:a6:fb:74:6d:4f:0c:13:04:da:21:19:c1:
31:2e:1e:44:72:4b:e1:21:25:23:75:1d:7d:a1:88:
8a:b7:0d:86:48:54:47:ab:e1:e2:be:2f:95:b8:83:
9d:e6:90:db:86:cf:10:42:ce:b5:41:d5:5b:6c:a9:
b0:03:96:b7:62:33:b3:d1:c4:4d:8f:da:60:02:cc:
69:1a:41:b4:93:6c:4c:a9:04:2f:57:22:f8:9b:ef:
2f:cf:d7:97:22:25:2a:1d:02:25:c3:1c:ec:2c:77:
38:70:84:0d:ac:34:91:d2:e4:75:70:22:1a:ca:de:
4f:5d:0b:4a:45:00:c0:69:3e:2b:3a:1b:38:aa:64:
ef:22:ef:60:8b:dd:30:2d:7a:85:20:f7:e7:a4:9a:
47:7c:b6:f5:57:0a:e8:95:bb:97:c5:25:c9:73:38:
b2:d4:ca:11:4b:84:4d:f2:b8:ea:fa:6a:65:e8:f3:
94:90:95:42:f1:68:35:30:6f:13:18:2f:17:fd:59:
61:11:4e:56:03:4c:e4:cb:66:58:e3:4d:04:85:f5:
73:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:45:C7:95:2E:5A:94:24:09:92:F3:53:D0:AF:A0:F0:16:F5:F3:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/902227eb-6c48-3b5a-99c1-f3ef54fc1cca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
173.223.128.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:b0:22:81:b7:2c:c5:e7:91:fb:8e:bb:46:3b:a8:f8:71:4a:
c0:29:39:be:9b:1b:84:25:91:e2:32:80:3c:0b:6a:cf:5b:8c:
66:d5:da:b8:e2:8c:01:ed:51:ee:ce:de:f2:c8:9e:39:15:c6:
5f:10:f8:ad:20:3f:8c:bf:ea:2f:df:3e:c0:ac:13:95:56:80:
f7:ab:92:e9:65:6c:d3:68:ce:fa:b3:b6:ae:85:01:88:96:e8:
9f:a7:09:2c:41:91:48:2f:79:92:42:3c:34:51:d1:ef:fd:4a:
58:ab:56:98:82:1d:f9:ad:87:f9:33:fc:22:10:05:05:11:b2:
b2:f4:ea:eb:cd:e5:e1:17:ef:97:cc:cc:0d:fb:ae:82:b2:13:
d7:8c:06:94:d6:a6:8b:47:54:0d:f8:09:0c:99:5e:35:1f:d6:
51:d0:47:a5:5d:a4:03:1d:3d:56:a8:29:58:64:be:dc:8d:e9:
c2:01:7c:3f:25:1c:b7:03:07:62:97:f3:5c:9e:9d:6b:ae:8e:
c1:ae:d3:17:24:ad:6b:2b:cb:bc:83:6b:bb:bf:bb:5c:01:40:
5d:c9:cc:d2:06:f3:3f:69:06:bb:21:a5:93:38:0e:e1:4f:a4:
72:a3:01:f0:be:65:c1:93:64:5c:7f:9a:8c:e4:13:d2:c6:41:
bc:7c:9c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:43 2025 by rpki-client