Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1c4eb76-1361-3637-a9f7-647873c1c94a.roa
File: a1c4eb76-1361-3637-a9f7-647873c1c94a.roa (raw, json)
Hash identifier: 327twx1gho4jnRiQ4Vbsx1CaM91vZ4zh4USxl4pYa8Y=
Subject key identifier: 0C:6D:9E:5B:A3:BC:CC:7C:4E:68:0D:AF:6F:F9:D4:9A:65:94:72:F1
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A6CB6D3FDB31A4422DEC1860
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1c4eb76-1361-3637-a9f7-647873c1c94a.roa
Signing time: Fri 24 Jan 2025 14:00:52 +0000
ROA not before: Fri 24 Jan 2025 14:00:52 +0000
ROA not after: Thu 24 Apr 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.199.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a6:cb:6d:3f:db:31:a4:42:2d:ec:18:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 24 14:00:52 2025 GMT
Not After : Apr 24 13:00:52 2025 GMT
Subject: CN=63c3511e-4411-47fa-a541-2787048aaba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e0:d2:f1:aa:6b:43:e9:78:dd:09:18:b7:bb:
a9:ff:21:b5:6a:4f:cf:81:75:d2:50:bd:45:6b:10:
52:09:04:ea:95:15:f3:50:e2:76:8b:12:37:ac:73:
23:da:89:29:24:2d:5b:ba:cb:a6:e4:c4:92:b0:32:
9f:84:56:31:bf:3d:53:ab:0f:42:a3:bd:37:03:5a:
c0:f3:d3:50:30:db:4e:ec:40:a3:94:ca:9f:7a:fe:
33:89:6a:5e:d0:8a:34:7e:4e:a8:9f:ef:49:06:58:
61:af:dd:c0:03:38:59:78:35:58:7f:66:b2:bb:00:
d2:60:2c:40:c7:5b:c1:21:99:56:d4:bf:89:23:1a:
bc:9e:14:92:78:67:99:c7:23:7a:e6:7a:a4:63:15:
0e:cf:e0:52:a1:cc:a0:69:b7:9a:2e:a7:62:b0:b8:
1b:66:65:01:cf:6e:8f:45:04:81:67:d2:6a:cf:4b:
29:81:ca:37:53:4d:d3:49:27:d2:ab:70:98:8a:8a:
89:dd:0b:86:bd:27:26:87:70:a3:60:72:fd:4e:9e:
20:36:11:97:a9:96:84:80:cf:1e:64:01:fc:25:cc:
17:be:bd:f1:7c:9a:b4:fe:ff:85:24:ba:1c:0f:9c:
cd:29:8f:7d:6c:a4:ae:b0:b6:66:43:1e:60:98:2b:
99:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6D:9E:5B:A3:BC:CC:7C:4E:68:0D:AF:6F:F9:D4:9A:65:94:72:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1c4eb76-1361-3637-a9f7-647873c1c94a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.199.80.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:4b:ad:3f:b9:53:bb:bc:48:a6:77:12:d2:57:9b:ab:25:7e:
bb:7b:5d:67:d8:b7:df:52:81:8e:ef:ca:bd:ff:de:7c:ea:68:
8a:a1:45:a7:de:7e:6f:dc:38:3c:15:74:61:d2:1e:04:bb:9e:
25:33:b6:76:f6:49:f6:a9:b1:4d:0e:17:09:65:5f:e1:7e:a7:
94:3f:42:50:8f:95:80:03:41:e8:ef:00:49:92:bb:0d:d4:df:
88:c2:33:99:a5:5c:df:b5:0a:68:6e:8f:67:15:15:5a:a8:4e:
7b:d9:fc:9b:be:48:9a:9e:8f:f9:79:b7:c4:7d:7c:71:06:9f:
de:a5:ca:8b:1c:32:c6:1f:8c:3a:82:fb:b7:b5:4f:65:59:75:
5c:66:7d:93:ab:f2:9e:d6:75:07:fa:1c:4a:c8:1c:47:7b:14:
31:2c:5e:b0:8e:7d:0e:b2:9d:dc:3f:50:46:c1:5b:57:c2:9a:
4a:b1:e0:f4:85:75:56:ce:aa:fd:41:8f:08:d0:a7:53:5c:c1:
c3:81:18:6e:e4:c6:85:86:39:66:1a:ea:82:8a:9c:74:82:27:
e1:0e:9a:f2:af:16:91:84:5e:69:48:e2:03:fe:bc:ed:9e:91:
ff:cd:6d:5e:43:3a:78:24:28:69:3f:57:db:38:9f:24:1f:42:
bd:fa:4e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:24 2025 by rpki-client