Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a819cec2-68f8-3231-b345-08ade12beb40.roa
File: a819cec2-68f8-3231-b345-08ade12beb40.roa (raw, json)
Hash identifier: Ij1Q2YCR3NH9R7ZpQ19Y6mIlGerv5MMri0PLxqhMQPU=
Subject key identifier: 66:8B:16:DB:86:B5:56:0B:76:7B:C9:69:3E:1C:44:4D:23:AD:44:C4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A830CB99D805334F5ECFE978
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a819cec2-68f8-3231-b345-08ade12beb40.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.200.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:cb:99:d8:05:33:4f:5e:cf:e9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=620e963f-a20f-4bf6-9f6e-edaea1d12f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fd:23:11:17:73:2d:9d:fa:bb:95:89:d2:67:
b2:03:fe:99:cb:c3:09:be:69:25:6e:c7:65:b1:45:
f2:5e:0a:2d:d4:91:40:cb:40:95:c9:4c:82:f6:d7:
e3:f4:d5:5d:b0:ee:af:3c:86:06:c1:8b:89:4a:cf:
00:c6:6a:aa:d3:e8:72:4f:4a:a6:17:d3:25:21:ae:
e3:ed:16:e2:da:e8:1f:4b:3b:cc:f1:c5:8c:ac:b9:
9f:51:e4:e3:60:7e:c2:4c:a9:d7:d7:99:0d:21:9f:
d1:5f:37:90:81:a1:05:0e:5c:47:c1:e3:19:05:7e:
06:4e:84:9d:2d:10:8c:41:e0:8c:7e:c6:fd:b0:fd:
37:3a:01:b7:f2:e9:65:c6:cf:9c:db:12:6e:8a:5d:
02:3a:6a:27:80:d9:29:c2:cf:3b:4d:e1:b0:e9:81:
4a:ed:ee:e2:17:76:21:c1:03:41:20:6e:6d:81:b8:
31:a0:c0:b5:3a:f7:69:86:9b:ed:0d:cb:b9:ba:6a:
59:b9:78:06:82:75:34:ba:b8:41:26:78:fc:40:d4:
e7:f6:54:d6:ff:ff:01:e5:52:56:4f:9d:26:0c:68:
7f:a4:49:45:ca:36:23:cf:44:35:5b:0e:9a:90:16:
ab:5e:97:55:0f:c7:86:b4:94:2f:b0:b5:1c:6a:ae:
42:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8B:16:DB:86:B5:56:0B:76:7B:C9:69:3E:1C:44:4D:23:AD:44:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a819cec2-68f8-3231-b345-08ade12beb40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.200.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:c5:01:bd:69:81:ec:57:a9:b2:ce:9d:e7:a0:49:aa:99:53:
d9:47:c7:b9:9b:d0:8c:15:00:2c:89:35:09:b6:fa:8f:8c:b1:
f9:63:c9:03:83:88:a5:62:59:52:e2:f3:71:c3:d5:e0:9b:83:
e8:e9:df:5f:80:c5:a8:86:e3:15:75:d8:55:eb:04:76:a5:42:
48:64:80:ee:ef:8e:f8:a7:45:61:57:e6:25:97:08:fe:d8:6a:
45:6a:83:ee:e3:a3:94:23:07:ba:a2:50:e4:f4:9b:fa:88:de:
14:60:31:c8:57:27:80:54:e7:12:72:7d:77:c7:fc:75:11:6c:
ca:fa:66:7a:d7:05:db:9c:0a:66:98:3b:23:6b:7a:f3:07:ec:
03:9b:42:e1:62:63:cd:8f:61:7b:d0:a2:62:22:6b:71:f2:98:
09:87:11:e0:11:42:e4:03:8b:d0:f4:be:15:25:b7:6a:ba:d6:
79:35:8b:80:4e:60:26:b3:fb:44:fd:e0:4f:7e:78:e1:b6:f6:
f1:7f:54:55:24:cf:dc:c9:c6:45:d5:6b:3b:56:55:3f:91:6d:
3a:77:6b:9f:49:1d:46:1a:11:bb:73:cb:73:88:d6:1c:1a:14:
1e:4b:5a:d6:42:79:2a:53:01:0d:02:27:3f:09:f8:53:8f:6e:
61:4e:e7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:55 2025 by rpki-client