Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/904bf9c4-3d6f-3503-bce9-b69b2a79fa4d.roa
File: 904bf9c4-3d6f-3503-bce9-b69b2a79fa4d.roa (raw, json)
Hash identifier: QtYOJ/J7me9TFyzvQ0hw5gj7nR7fLCvLgqmaYrPtLfM=
Subject key identifier: DB:B7:09:26:D5:65:88:4F:AB:37:E2:E6:DD:62:32:90:ED:8B:34:A0
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A830C9D648BDC5B4C502E540
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/904bf9c4-3d6f-3503-bce9-b69b2a79fa4d.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 16625
IP address blocks: 23.201.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:c9:d6:48:bd:c5:b4:c5:02:e5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=b1dcf9ea-e7b8-43af-9e49-2764e972879d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a9:d1:5c:21:b3:96:03:d0:0b:b6:0e:21:fb:
9c:f6:33:2b:e6:59:f7:e9:06:dc:4f:d1:ed:fa:bf:
2b:b8:5f:7b:d2:e9:39:7b:d7:05:aa:da:a9:a5:12:
23:17:88:48:65:c9:5b:47:aa:eb:dc:6a:2f:53:7e:
72:03:b1:b6:7d:64:15:c3:de:f9:a7:b7:a3:9e:75:
e5:c0:ef:93:bb:47:ea:48:c7:2e:0a:60:07:73:e4:
33:44:17:e5:0b:03:0d:45:85:33:bc:68:93:e9:46:
8b:77:1d:f6:d9:eb:4e:11:8c:28:c6:b0:c1:29:ac:
99:13:a2:43:25:31:6c:d4:d3:ec:ee:15:a1:cb:5f:
47:fe:f3:23:46:12:80:78:c5:78:86:50:4a:6a:e7:
74:17:dc:f8:25:1c:a7:48:9b:b1:3c:8b:ad:f6:7c:
48:d1:d3:b6:8d:5d:6e:e2:5d:42:a4:3a:ba:0d:82:
f8:c8:f2:0f:ee:00:df:94:55:e1:3a:42:6b:b7:b3:
8c:16:bd:55:24:45:8c:fc:60:4e:42:69:d5:84:a7:
d7:7a:1f:cd:f7:4f:aa:af:1f:5c:91:be:36:66:41:
df:d9:cb:82:e0:af:26:20:37:81:0a:5d:2f:41:ea:
d2:09:fa:69:65:2c:f2:6a:27:cd:99:28:45:e9:68:
e6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B7:09:26:D5:65:88:4F:AB:37:E2:E6:DD:62:32:90:ED:8B:34:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/904bf9c4-3d6f-3503-bce9-b69b2a79fa4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.201.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:7b:f1:c5:4a:08:de:97:b8:f1:f2:f6:ea:95:6a:19:1d:aa:
56:ae:56:45:c2:ea:d3:ba:0e:fe:ef:b3:63:33:0d:93:d4:a9:
f6:f4:d3:00:1c:50:29:b4:6b:65:2d:e7:3e:8f:9c:92:8b:e9:
41:40:ce:0e:b7:3c:4e:1e:79:ae:5a:4a:d4:c8:d8:69:aa:73:
59:66:2b:cc:0f:91:39:fc:9b:28:c0:5d:d7:72:bb:e0:b1:b0:
c1:b4:5a:30:df:71:79:9b:f9:4a:bc:88:5c:39:8d:a9:32:ca:
03:36:62:5b:ea:f4:6b:d9:ad:cc:3c:cb:ff:d2:98:52:1e:41:
ff:e7:cc:1c:fc:cb:88:f5:37:9c:43:3d:fe:82:dd:a0:ab:c7:
1d:4c:1d:c7:ca:2c:12:1a:a9:70:67:c4:ed:bc:a0:1f:2d:64:
c2:d2:ea:d3:e0:67:d1:66:33:66:83:3b:1a:8c:35:20:12:18:
dc:2f:f4:cb:69:0f:59:94:36:6c:28:60:89:15:23:33:df:67:
13:6f:03:8e:e0:5c:e4:89:18:f1:59:81:f1:6a:b9:da:4d:e5:
83:8d:3b:4b:4d:7f:23:82:d9:85:34:fd:d7:91:a3:c7:9f:40:
30:a2:ac:07:c6:9f:6e:e7:0f:c0:72:03:8f:94:bc:d0:3f:c8:
72:28:ca:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:32 2025 by rpki-client