Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1c4310f-ca7d-3d7c-97eb-0ad7bd8f66f9.roa
File: a1c4310f-ca7d-3d7c-97eb-0ad7bd8f66f9.roa (raw, json)
Hash identifier: qQ+JANpAd3OSHUq/Mw35m/Zu2Q1WL8+owDwWBRNlAB0=
Subject key identifier: C7:56:33:4E:83:4D:84:5B:BB:17:DB:2F:22:C9:C4:C9:15:EF:5C:26
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848BE863DE5BD46EDC710BF1680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1c4310f-ca7d-3d7c-97eb-0ad7bd8f66f9.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 16625
IP address blocks: 23.214.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:3d:e5:bd:46:ed:c7:10:bf:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=532962c5-b1ae-4e77-9cb9-376beb26b41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:65:4b:8d:6d:5a:9c:47:31:d0:99:fd:5d:97:
f2:ea:af:62:bd:32:42:6a:8f:ba:3d:5b:f6:aa:cd:
5e:e1:a4:db:f3:43:d4:1f:27:bb:78:87:51:01:1a:
2a:6d:76:73:67:c4:0c:37:1b:ee:3f:e6:28:7d:ae:
01:20:d9:6a:0e:1c:73:b0:ec:ab:ed:95:38:3c:b7:
d9:20:d0:3a:47:23:45:ab:05:14:4f:82:61:a5:07:
02:73:87:3d:5f:ed:a7:66:99:aa:18:af:9b:04:3d:
f0:f1:c8:74:fb:13:c1:64:64:06:f7:c8:ab:0e:55:
ff:81:c3:f9:c4:f2:3f:58:38:2b:e1:b0:6b:e1:76:
19:63:29:db:2a:97:b8:fb:63:22:7a:68:fd:39:fc:
33:ba:0f:9f:d6:4a:fd:0c:eb:45:73:55:d9:d7:ce:
18:69:42:25:cb:c7:71:cb:e9:64:52:c3:63:36:c8:
b2:fd:fc:05:b4:c8:e7:e2:04:4f:40:d6:a0:e0:26:
96:c0:f9:e2:2b:eb:49:5b:11:8f:e9:6f:c7:34:dd:
95:d4:9c:3e:ba:68:ad:ab:64:73:c4:0a:34:94:02:
37:50:ce:c0:0a:93:5d:58:23:a3:a9:35:95:af:85:
2c:24:20:ae:27:10:4c:8e:f5:1d:89:f0:ed:58:a7:
18:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:56:33:4E:83:4D:84:5B:BB:17:DB:2F:22:C9:C4:C9:15:EF:5C:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1c4310f-ca7d-3d7c-97eb-0ad7bd8f66f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.214.192.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:25:f2:03:80:5a:1b:80:26:65:10:bf:b1:24:35:e2:b7:50:
f0:d0:09:0d:ec:d4:3c:06:36:76:08:22:39:79:ea:bc:2f:83:
f9:1b:ca:13:44:75:22:c2:b7:68:95:eb:ce:e2:5d:32:69:56:
e6:b6:4c:ac:41:b8:65:3a:24:25:42:56:8e:0c:36:15:14:95:
7f:2f:14:38:e5:8e:fe:ba:05:9f:35:1b:22:9b:41:bb:47:41:
bc:46:15:15:6f:ee:69:48:08:b3:53:c9:91:c6:6b:f2:c7:e9:
ae:49:af:6c:89:39:c1:4e:ac:21:1a:13:e5:e9:33:ef:67:c1:
d6:d1:76:79:5b:a4:24:a7:c7:2f:34:b6:2e:41:3e:db:99:a9:
6f:37:13:bd:b6:1f:f7:eb:5b:4f:1b:9d:4f:39:0a:39:1b:f6:
41:fd:a5:28:53:9e:95:8d:93:42:16:56:f3:60:15:3c:52:77:
3c:4b:c3:ed:d2:42:f6:93:6c:37:5b:10:a3:b0:d3:6a:26:58:
fe:38:4c:3c:29:a6:58:0c:cd:fa:a6:c6:12:83:fd:7e:04:b7:
a8:6f:a9:c5:54:03:fe:4f:91:d2:c0:e5:51:37:32:43:50:1b:
2b:8a:13:6e:5e:99:49:14:f7:43:1e:db:8a:4c:11:c7:04:96:
29:a6:64:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:34:28 2025 by rpki-client