Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a20f8236-39a1-32d8-9efa-9f8b8973d345.roa
File: a20f8236-39a1-32d8-9efa-9f8b8973d345.roa (raw, json)
Hash identifier: f6UaoszZOkbp5DzotqDvfItd1uXDZsA+nQCwK7BrW5g=
Subject key identifier: 27:CF:83:FC:08:91:64:4E:B3:21:54:98:51:12:00:4E:9C:4C:DF:F8
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A830CCAB174FEDC1DE96E800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a20f8236-39a1-32d8-9efa-9f8b8973d345.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 24319
IP address blocks: 23.200.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:cc:ab:17:4f:ed:c1:de:96:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=024f7a16-e83f-4177-ab32-9eb55e5ddd61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1f:cb:90:80:c2:ed:87:ba:92:16:0e:b5:74:
f3:3a:c0:76:26:af:8d:97:1a:53:9c:9e:3b:e2:4a:
d4:52:2e:c5:29:a0:91:3c:25:eb:aa:b5:46:c2:f3:
26:6b:31:30:38:b9:b8:1c:e0:dd:74:b2:f5:5f:c7:
4e:6e:03:18:11:58:18:46:fb:0d:bf:1f:78:7a:76:
e0:ff:b1:66:63:a2:89:d4:46:05:a8:6b:2a:7c:d7:
13:c1:9f:3a:8c:bd:17:4a:66:bc:7c:e4:0b:82:21:
11:93:92:92:b5:06:8f:57:cf:43:03:5b:c6:b4:5c:
e7:90:e9:08:f1:86:2e:c9:eb:8a:fc:59:99:17:2a:
fc:d6:29:b9:2a:08:68:92:40:57:ba:f2:42:c7:0f:
cd:15:11:2b:d5:92:ef:d2:e9:a3:b1:b0:2a:75:56:
51:18:62:39:4b:95:8f:b3:5d:b2:c9:99:00:9d:d1:
0a:ec:91:37:a3:a6:4b:b4:58:95:3b:9c:a8:a3:4b:
a3:1f:dd:9b:b5:73:8c:ec:52:95:3f:f5:2c:fd:f6:
09:e1:ed:fe:13:b6:ec:9e:77:36:2d:c2:1c:97:17:
58:db:e2:81:42:3e:d5:15:f9:a1:fb:43:6b:88:01:
cf:59:85:69:fc:7a:6f:aa:c2:83:d0:97:46:25:f9:
1e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CF:83:FC:08:91:64:4E:B3:21:54:98:51:12:00:4E:9C:4C:DF:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a20f8236-39a1-32d8-9efa-9f8b8973d345.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.200.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:84:e9:b3:a6:3c:29:da:8b:3e:96:00:55:05:d0:5f:02:b6:
41:2e:3e:a5:cd:5a:ff:fc:90:72:32:e4:d1:67:8e:d7:4a:8f:
8a:33:37:ef:c3:be:5c:4f:0d:62:16:12:cc:b8:2e:4a:a3:4f:
d1:a2:0e:59:71:a4:5d:10:19:1e:19:78:e1:24:c7:91:99:1e:
68:69:50:75:70:e7:8d:92:33:25:32:32:39:b7:fd:d2:75:6a:
5d:42:e5:0d:59:c4:f8:73:95:9a:05:39:d1:89:55:2b:05:90:
30:6d:5e:74:c8:9a:c9:d5:86:5e:18:3c:54:34:5c:81:25:a7:
de:f6:9c:63:73:5f:0e:94:f8:5f:7b:e5:9b:1f:1b:1a:62:a3:
43:35:f8:b7:d6:a4:39:e7:54:13:bf:40:5f:e5:42:9a:2d:c5:
ed:93:c3:2e:ab:ae:91:59:9f:75:21:0b:ba:38:d6:0d:e1:67:
17:f2:29:d9:67:d8:10:66:06:2f:a6:df:30:80:2d:99:ef:3d:
b9:d4:b8:47:1b:ce:e0:fd:fd:f0:ed:fa:1a:a6:03:be:ca:9e:
66:a2:20:9a:6b:ca:b9:8a:45:e3:b8:88:a9:d9:16:94:ee:49:
c1:fb:0e:57:a4:5b:8d:6a:35:7c:73:5d:d4:1d:01:fd:6e:6f:
64:39:0d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:07:29 2025 by rpki-client