Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d207af8-de6f-311e-a680-cd8199ace67a.roa
File: 9d207af8-de6f-311e-a680-cd8199ace67a.roa (raw, json)
Hash identifier: nVZgmqBMki+Vznpp74leKvN7D07nRPoxQBU/niQmDO8=
Subject key identifier: B8:2B:C4:B0:B9:57:07:20:E3:8F:0D:67:76:1F:76:F8:A7:57:33:3F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A830CA315D0C9F887D8E70C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d207af8-de6f-311e-a680-cd8199ace67a.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.201.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:ca:31:5d:0c:9f:88:7d:8e:70:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=54a439fc-9048-409c-b7a0-4b866b3a787c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f9:be:0f:1d:29:70:62:cf:af:13:c8:93:b9:
2c:b3:37:17:c6:68:55:63:31:26:ed:9a:f3:78:31:
b6:c7:00:d4:86:00:ee:45:8d:8b:95:c0:ab:9b:48:
32:04:b6:48:aa:f1:57:e7:8c:0b:c7:8c:9d:0e:54:
e2:51:19:27:94:df:4c:1e:a0:a6:d4:2c:44:97:75:
ab:e2:d7:54:85:21:5e:ae:df:7c:99:df:1a:b5:b0:
c5:02:6a:5e:a3:cc:a2:08:94:14:85:96:dd:9a:82:
88:33:fa:c2:a3:cc:bf:50:c8:6c:8f:4c:07:b3:e9:
01:93:16:74:5c:f6:33:71:4a:3e:97:3d:b9:17:f4:
36:b3:ac:c9:29:16:70:73:82:ed:2b:66:f4:c1:54:
e0:91:13:05:2f:4a:4e:e1:58:05:a1:56:49:c8:0d:
71:01:a3:a1:f2:be:bc:0c:f6:92:ba:4b:c5:45:53:
2a:d6:a3:9e:ba:f9:fa:05:cb:90:2c:0a:50:a5:bb:
ac:57:1f:57:8f:42:eb:9a:41:fd:aa:d3:ec:7e:79:
2b:71:b8:a7:8a:40:66:e2:54:e4:3a:ab:bc:57:e2:
8c:2f:ae:09:9c:c1:d3:b8:da:c9:ed:87:cc:22:16:
a9:71:be:c1:c5:5b:28:c8:19:ea:4f:b4:f1:88:da:
7b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2B:C4:B0:B9:57:07:20:E3:8F:0D:67:76:1F:76:F8:A7:57:33:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d207af8-de6f-311e-a680-cd8199ace67a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.201.195.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:b1:52:27:ce:5c:9b:1d:70:dc:6c:a6:2a:23:77:90:85:a1:
4f:8d:94:4e:6f:07:64:de:55:ad:15:ef:d3:e6:77:e3:9c:9f:
31:13:fd:49:ad:53:5b:1a:bc:e3:91:1d:e9:a0:2a:93:a8:2e:
8a:cf:16:13:14:1a:3b:f9:34:2c:eb:ea:b2:4c:b7:00:61:3b:
b1:5b:e6:5e:95:79:c5:d1:52:92:d9:80:47:04:a3:d5:a8:4e:
7b:79:e2:4e:8a:43:20:93:79:a9:47:05:5c:d5:87:56:b9:38:
82:76:69:ff:7e:06:0e:e3:de:12:5c:44:a3:45:88:35:3f:d4:
0e:6a:63:dd:8a:1e:2b:21:ae:e3:b3:c5:42:65:1e:82:90:0a:
f8:c7:26:68:53:a5:43:59:73:12:41:62:87:8b:ff:e7:7f:11:
75:7e:76:79:d7:b6:7c:31:13:fe:56:96:70:1f:25:83:13:64:
ee:57:b0:c7:40:14:e1:57:ff:61:6c:e4:7d:40:82:74:10:1c:
21:5f:46:d4:df:69:03:7f:11:5a:e0:98:4e:2d:b7:31:df:fb:
f9:d0:f1:4c:1b:8c:95:c9:96:4d:fb:ed:98:df:71:ed:6c:bc:
54:f9:55:06:36:c4:a3:4c:8b:71:e4:c0:b8:20:d3:ff:55:fd:
4c:6b:8a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:26 2025 by rpki-client