Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/93bcd1e5-7f32-3190-b0bd-c5b069234d42.roa
File: 93bcd1e5-7f32-3190-b0bd-c5b069234d42.roa (raw, json)
Hash identifier: vAYmyigJ1HQqJXIa8gomuQd8PsN3Gat+T8BToLTvw/8=
Subject key identifier: 54:38:34:D2:F7:FF:2F:6B:F2:EA:68:ED:D6:7D:23:8B:98:87:2B:D6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584890760FE2260F93F86950D600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/93bcd1e5-7f32-3190-b0bd-c5b069234d42.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 131702
IP address blocks: 23.195.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:76:0f:e2:26:0f:93:f8:69:50:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=ff6dbe17-627a-4fd5-9c13-94cd01742739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:aa:57:7e:b6:bb:9d:84:64:36:2b:2e:9c:
24:ec:8a:f4:1c:88:30:9a:e6:4b:a8:3c:cf:e5:ec:
fe:6b:60:bb:38:2a:c7:5a:5c:ac:9d:78:b1:67:9e:
fe:4f:d5:2a:79:3d:cf:b3:73:47:c5:b7:80:be:2e:
2e:c5:bb:12:b0:4e:1f:25:3d:f0:4e:0f:d0:9e:8f:
44:91:1b:1c:a1:3b:37:22:0c:1d:4f:e8:7e:ee:11:
27:80:1c:46:3b:03:89:5e:fe:01:cb:44:36:03:fe:
3c:f7:8c:56:5c:bd:f4:70:a0:29:92:66:ec:2f:79:
4a:73:be:3d:60:c5:07:46:f2:05:71:28:77:db:f7:
56:50:10:58:c2:ea:a4:07:3c:92:71:be:b2:17:82:
a7:be:51:24:07:9d:f1:cb:8f:c3:df:19:aa:26:47:
d3:88:ff:fe:29:bf:78:b5:63:9a:c0:cc:ba:ae:66:
13:d3:e4:00:2d:24:77:1e:65:89:ef:c7:0d:3f:47:
4f:a0:bf:ab:de:36:7a:c6:30:66:24:86:4d:53:13:
2a:08:77:47:08:87:6e:ab:29:31:87:f9:33:8f:c3:
c8:07:1d:09:42:35:fc:ea:e6:77:10:06:11:b7:64:
ac:e6:83:46:a2:1a:90:8e:3d:47:e4:24:e1:63:49:
5f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:38:34:D2:F7:FF:2F:6B:F2:EA:68:ED:D6:7D:23:8B:98:87:2B:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/93bcd1e5-7f32-3190-b0bd-c5b069234d42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.195.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:9f:f4:15:75:2c:27:b1:6e:4e:73:97:bc:68:d4:69:cb:ed:
46:c6:34:42:b3:da:cd:50:11:bd:f7:16:85:88:99:b2:90:cb:
d9:0e:44:97:ed:db:c1:e2:ed:d4:5e:53:2a:78:55:0a:84:7e:
85:82:01:98:df:9f:5c:dc:1d:42:3d:0b:3e:8f:f2:49:d2:2e:
4a:7c:59:1c:bd:5d:80:d5:20:f7:63:e1:48:da:85:05:92:f6:
86:63:ad:29:00:e9:51:66:14:b5:85:22:e7:2b:3f:61:37:5a:
2e:fd:74:05:ef:d6:e8:c0:f8:9e:d7:1f:c1:dd:21:20:35:d4:
54:c3:ff:f9:18:2f:e9:8c:bc:6c:3a:9c:75:d8:39:a9:af:61:
85:d3:b7:05:e4:b9:b5:c9:11:4a:e1:a8:4f:24:da:62:09:38:
63:b3:91:8b:5c:76:e6:f8:c6:04:94:b4:e0:fb:5b:95:ba:67:
8e:4f:82:42:e0:74:ac:e9:56:40:7e:28:07:36:5f:4c:b6:dd:
07:8a:1c:d0:d3:25:c9:49:3f:8d:db:e6:6e:5f:f4:01:50:98:
45:21:af:89:96:22:d7:dc:6b:08:d7:14:99:b9:4b:96:d4:5b:
d9:ed:46:55:57:a0:2a:a8:55:19:b8:a0:19:f0:51:f1:46:37:
84:49:4b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:49 2025 by rpki-client