Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9965c21a-d3d0-33de-969e-e44b520ca86a.roa
File: 9965c21a-d3d0-33de-969e-e44b520ca86a.roa (raw, json)
Hash identifier: nmWAJ1G1nDgu5K54nGZaki9vih0t8+tdRiRLxW7sPDM=
Subject key identifier: EC:19:8D:5B:AE:26:75:70:36:6B:B6:94:59:2C:CF:18:32:A2:10:55
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584900215FBEA92724D5A2573600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9965c21a-d3d0-33de-969e-e44b520ca86a.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 9299
IP address blocks: 23.44.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:5f:be:a9:27:24:d5:a2:57:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=99a834e7-2840-4bad-873c-7f58226778fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:be:d8:c7:f8:ff:e8:c3:12:aa:0b:3e:1a:9c:
36:d2:4a:f6:17:c0:a6:3c:b2:9c:3d:42:ae:d7:ce:
f6:f2:63:0a:ea:71:98:25:1c:90:66:04:5a:51:ba:
70:5c:d8:eb:3a:35:90:33:b4:39:7a:74:2c:21:eb:
78:ba:26:5f:5d:7e:9a:32:3d:ef:c5:f4:33:e3:fc:
88:96:62:73:b6:b4:34:34:c1:84:4a:18:75:82:45:
c4:20:54:3f:a9:ed:98:82:82:8b:56:14:6d:05:23:
89:a5:3c:f4:cc:fc:ee:27:c8:97:55:a3:e0:7a:a3:
77:0f:a9:2d:f6:1e:2d:af:3d:b7:a2:3e:c6:fa:bc:
06:32:25:8a:31:e8:91:5a:3e:04:8c:d1:6a:50:e4:
6e:d0:55:cc:54:7f:74:15:55:fe:16:f8:52:42:3b:
c5:88:e4:0e:f9:31:29:5c:05:8d:d2:b9:89:9f:62:
d4:fb:54:0c:74:89:7e:74:8a:b0:0e:16:9b:35:63:
8d:9e:a7:86:4c:e2:83:2c:99:8e:71:2c:12:9f:d1:
81:03:4c:f8:2d:c6:a2:df:84:c7:b5:43:2e:54:d5:
ea:d3:50:05:26:f0:41:61:f4:08:bc:f5:c3:d7:f2:
03:73:85:00:d3:f2:c2:ea:35:77:d6:76:13:02:dd:
75:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:19:8D:5B:AE:26:75:70:36:6B:B6:94:59:2C:CF:18:32:A2:10:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9965c21a-d3d0-33de-969e-e44b520ca86a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.44.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:45:5b:9d:cf:e1:64:0b:c3:52:16:c7:0c:f2:03:32:ac:4c:
11:07:2d:81:1d:fd:80:65:cc:7d:11:3c:66:bd:13:c5:aa:aa:
6a:14:71:14:41:65:c5:e3:65:0e:a3:b3:80:fd:aa:c3:22:a9:
24:a8:b3:5a:21:21:37:62:19:6a:13:b9:24:f8:95:cb:0b:de:
02:46:5f:10:23:3c:17:3e:49:58:69:99:fe:c6:f8:91:06:ed:
f1:dc:ab:98:94:95:76:27:11:8f:78:0e:73:11:66:e4:cb:6d:
2e:9d:f7:9c:94:b7:1e:18:c7:15:54:e1:5c:5f:a0:8e:b5:88:
3f:c5:f3:c6:3d:38:31:a4:48:20:1b:fd:f4:b5:e7:ab:86:99:
4a:e1:d3:50:df:26:cd:e6:42:44:22:00:61:4e:5e:41:a7:fb:
07:66:5e:f3:60:da:1e:c2:9c:1c:04:b2:14:a1:72:03:38:a2:
c0:dd:d2:64:34:08:27:35:c9:4a:91:28:72:41:0e:14:78:f9:
ec:6d:fe:6d:03:2f:94:cb:cd:41:a8:28:ca:0e:5b:88:0e:66:
fd:82:1c:ff:99:b9:ff:a9:bf:78:e6:c9:6f:d3:a9:cd:88:09:
26:6c:dd:ed:45:3c:e2:b4:77:42:af:3f:82:49:90:1b:b8:ae:
19:fa:de:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:26:31 2025 by rpki-client