Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0525096-6162-39e8-b85e-049a6d8408fb.roa
File: a0525096-6162-39e8-b85e-049a6d8408fb.roa (raw, json)
Hash identifier: VDsCpYHeYWlep/zZ/Prl3GtcAJOvUSaUwknPzhq7mSQ=
Subject key identifier: 34:16:8F:C5:5D:EE:92:40:CA:5F:E3:72:A1:3B:1D:45:A8:25:D7:C8
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A996619AD61D5570A0BE4800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0525096-6162-39e8-b85e-049a6d8408fb.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 24319
IP address blocks: 23.202.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:61:9a:d6:1d:55:70:a0:be:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=e1283e2c-c6fe-47c1-b81f-fdccd12359f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:79:a8:96:4b:ab:38:82:2d:a8:09:04:59:86:
5a:b4:81:49:07:02:f4:af:c6:d1:3e:68:8c:ba:36:
3a:33:b9:1b:04:ac:ae:06:4d:fb:7e:9c:bd:10:e7:
18:51:7f:ed:33:5f:1e:ba:68:0a:fd:da:91:e8:68:
09:9a:dc:d3:d5:3e:81:a7:76:b6:1a:75:0c:5d:72:
90:ed:b3:59:72:b8:bb:55:95:dd:79:f6:2f:0e:69:
dc:63:d2:ac:19:c0:4d:04:91:ea:c4:5a:84:bd:8e:
67:bd:14:a7:a0:e1:d2:10:55:83:91:77:21:f8:95:
11:85:a0:89:a1:64:8c:01:50:9c:ac:84:9e:0c:b0:
38:6c:1c:20:58:12:71:01:9a:4d:64:b1:e2:fc:52:
90:69:af:68:30:24:2d:fb:e2:5e:89:15:91:6d:13:
c6:2b:b0:fa:25:e9:4d:95:9c:c3:ff:1f:19:bd:5c:
30:3a:e7:c7:c3:4c:59:6c:4d:0f:c9:69:01:90:ec:
3e:cf:1e:7c:d3:23:e9:9c:e1:a9:24:38:16:12:55:
40:31:17:41:61:50:5a:d6:07:81:4b:af:c7:69:51:
82:3a:be:83:20:e3:39:13:d6:37:ed:e0:a1:90:f1:
57:2f:07:b9:9a:b6:c7:9b:de:f6:9e:07:dc:dc:d3:
96:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:16:8F:C5:5D:EE:92:40:CA:5F:E3:72:A1:3B:1D:45:A8:25:D7:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0525096-6162-39e8-b85e-049a6d8408fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.202.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:d5:5e:e3:c8:52:0b:00:82:24:fb:d2:0b:b6:56:16:e0:46:
1d:e6:95:9c:27:ab:a3:e3:29:6f:39:42:63:51:93:6e:af:ca:
7c:a7:23:75:d8:97:f2:d9:be:52:d9:c4:6c:a9:97:49:9b:d7:
42:00:33:58:d2:70:d7:52:dd:70:2d:be:34:7f:dc:a0:1b:f8:
94:e8:3d:15:44:8c:3c:09:dc:0f:63:48:a9:1b:48:c2:b7:01:
59:de:0d:5b:20:47:2d:73:55:b0:98:24:29:9e:38:ec:27:8b:
c2:0e:b1:78:c0:10:88:e4:44:87:0d:f6:87:bb:b4:7f:9b:e2:
64:a5:01:a5:48:a4:12:c1:6b:8e:c9:06:f7:71:9a:42:c7:d0:
f7:a5:7c:c8:61:da:c2:6f:44:9d:e7:84:7a:89:fb:3a:03:4b:
07:26:ee:49:c0:d5:e9:26:2b:60:0f:e6:5f:78:36:38:c1:45:
a4:7f:0a:a9:98:06:6b:ca:66:f9:68:e0:32:6e:05:30:ca:e4:
e0:07:92:5b:e8:93:d6:c0:b3:e9:10:e5:a8:8c:79:1f:72:36:
ab:7e:71:1a:e3:18:1a:c6:95:2a:5c:b8:26:02:80:fe:9d:d6:
2d:e5:2d:69:b4:3a:69:12:d9:7e:fd:18:31:1a:ec:3a:38:70:
3f:81:3c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:33:22 2025 by rpki-client