Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9656a256-7935-3b94-8ac3-1297b820d2d7.roa
File: 9656a256-7935-3b94-8ac3-1297b820d2d7.roa (raw, json)
Hash identifier: BjC+EO3t/1WdXFnCldLjaqO4D+TJ6tQopcQSuTtwl6k=
Subject key identifier: 36:72:F0:40:5C:2F:9F:C5:B4:71:CC:76:2C:DB:B1:C3:33:76:93:87
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858488F108294201E506E051751A8
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9656a256-7935-3b94-8ac3-1297b820d2d7.roa
Signing time: Thu 16 Jan 2025 02:00:39 +0000
ROA not before: Thu 16 Jan 2025 02:00:39 +0000
ROA not after: Wed 16 Apr 2025 01:00:39 +0000
asID: 16625
IP address blocks: 23.62.192.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8f:10:82:94:20:1e:50:6e:05:17:51:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 16 02:00:39 2025 GMT
Not After : Apr 16 01:00:39 2025 GMT
Subject: CN=eb079d57-bcb8-4fd0-b443-02add782cd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c7:3f:7b:cd:71:0e:c4:e4:c7:a5:47:06:72:
d4:8c:56:e8:af:b4:a7:20:1e:9e:d1:83:ff:7b:d4:
28:c7:49:53:a5:3d:8c:85:49:62:b0:d7:2b:96:25:
05:29:38:df:79:63:d9:ea:fe:7f:5f:ff:34:0d:fd:
9d:79:5c:71:d5:10:bf:43:7f:47:f5:fe:a6:37:45:
27:0d:22:27:3d:ed:4d:a9:60:10:48:45:ef:25:96:
17:8c:7d:e4:df:80:4c:b2:a1:d7:f6:29:36:c9:ca:
14:a5:5c:15:fe:cd:fa:32:14:ad:2b:5f:71:d6:dd:
21:df:1e:d6:e7:46:a1:7c:ca:0a:14:cc:5b:51:50:
1f:26:f3:9d:55:ed:aa:c9:dd:cc:ae:80:36:83:71:
bd:6c:a0:bc:28:48:ff:8d:d7:37:c2:18:08:5c:47:
0b:7f:65:a9:30:27:1e:33:b7:45:b5:e8:e0:9c:99:
be:d0:c6:22:26:e2:cd:d7:fe:57:3b:52:a9:75:72:
e5:d5:df:2d:f3:27:78:69:86:9c:89:e1:55:2a:7f:
53:84:0a:22:66:63:77:2a:c1:6a:34:79:43:83:42:
49:aa:ea:ec:a1:10:40:f8:85:d1:e1:03:ea:55:4b:
1e:43:a2:50:9b:68:6e:20:7a:ae:cf:6f:eb:64:78:
f9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:72:F0:40:5C:2F:9F:C5:B4:71:CC:76:2C:DB:B1:C3:33:76:93:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9656a256-7935-3b94-8ac3-1297b820d2d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.62.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:0f:66:73:1f:e7:5f:88:55:b0:a1:ca:0a:0b:40:f6:15:cc:
90:ca:03:50:11:d8:c0:45:77:1f:18:c6:4d:5e:6d:84:27:99:
cf:a1:89:28:e2:27:a0:bf:97:90:a0:89:c4:ef:f6:df:2a:20:
93:ce:8f:d9:be:3e:04:91:43:5e:1a:5c:56:43:6a:5e:91:0f:
19:48:88:08:61:ec:15:b9:02:01:ec:8e:9e:bf:7c:ee:e8:4c:
a8:fb:30:ea:00:0b:30:8e:10:e2:de:5f:43:d1:b7:18:da:ea:
b9:16:91:c6:8f:ad:7b:52:eb:09:df:5a:6a:3f:7c:49:65:b8:
e8:1a:96:b2:16:be:cf:52:88:b1:77:cc:e2:e9:e0:73:a1:30:
5a:5e:c5:d6:9d:6c:49:cf:2c:18:09:2c:90:da:ea:13:13:d2:
6b:1b:0c:eb:32:fc:a7:e1:ba:df:ef:7f:ae:b8:89:f9:da:9f:
b2:38:5b:85:48:a9:41:ea:99:74:e8:52:a8:8c:c0:f2:50:48:
c9:2c:72:93:49:5c:33:0f:13:71:a7:af:39:36:0f:8a:bd:33:
3e:eb:89:cf:9e:be:8f:65:22:18:e5:d8:9e:bf:a3:69:ab:95:
c4:49:ed:1a:7a:ac:23:a0:60:01:69:aa:dd:79:88:79:f1:fb:
ea:97:72:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:26:30 2025 by rpki-client