Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aebae198-ba3e-38c9-b501-b7f46f5c8dcb.roa
File: aebae198-ba3e-38c9-b501-b7f46f5c8dcb.roa (raw, json)
Hash identifier: PE3TxVY0zEr+lQL62KtDsyEcWZIc6fw3qNr1tm4hRu8=
Subject key identifier: A7:5A:03:96:1C:14:77:3C:8A:DD:D8:83:F3:4D:40:01:FA:59:9D:DA
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584898D61CD0E9CDFC8ADE15E400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aebae198-ba3e-38c9-b501-b7f46f5c8dcb.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.192.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:1c:d0:e9:cd:fc:8a:de:15:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=1797ba17-8399-4144-986a-8264960a098a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b4:25:31:f4:dc:d5:13:01:47:75:20:76:7d:
a4:77:d5:4f:58:1f:88:88:64:c9:ef:0f:99:cb:44:
f4:bb:15:ce:de:ea:60:79:03:0e:8b:67:d8:a4:66:
90:5a:44:f7:57:f8:89:a1:c4:b9:91:34:a6:63:4e:
03:77:91:be:a6:d1:23:52:c5:b8:5b:2e:24:d6:90:
98:18:28:30:d2:52:5e:ec:9d:b3:0e:3b:ec:b9:b3:
22:fe:d6:68:80:ff:77:cc:a7:b2:3d:43:9d:34:7a:
21:03:f9:7d:82:24:70:ae:6e:f1:21:c9:d0:0c:93:
6d:4d:99:eb:43:a3:c4:b5:ed:38:4f:78:af:49:51:
98:36:6e:cb:16:2e:53:03:d8:54:6a:4d:71:96:2e:
f2:f9:f2:12:3e:be:7e:b9:05:ce:b7:b0:36:b5:22:
07:5c:be:0e:d8:e9:6d:30:b0:2a:93:64:d1:66:94:
61:0a:bf:3d:fa:d3:9b:1a:7f:6c:7d:ef:ed:50:8a:
66:4b:1e:46:cd:19:03:bb:ac:7f:92:3f:5f:07:47:
37:b9:11:6a:3c:ff:1b:24:41:55:26:98:f8:b3:7e:
f9:be:8b:5d:64:45:50:74:14:f3:3c:ae:9f:29:0c:
ca:26:b8:f1:07:16:54:ea:63:3f:3a:83:bf:71:5f:
80:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5A:03:96:1C:14:77:3C:8A:DD:D8:83:F3:4D:40:01:FA:59:9D:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aebae198-ba3e-38c9-b501-b7f46f5c8dcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.192.179.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:ee:d8:d2:29:9a:ef:36:90:03:6a:bb:9a:6d:2f:64:3a:78:
76:ac:63:a0:c6:87:d4:39:7c:c2:07:9b:44:5f:28:79:9f:f8:
54:c8:4a:b4:4c:b3:c8:62:15:6d:28:b4:64:ff:b0:a2:e6:48:
b3:99:dd:2e:11:15:05:2d:ca:c4:c5:1e:5f:a0:dd:b7:75:d2:
33:8f:9e:b4:b2:52:88:7e:bc:b5:c2:01:b8:b7:18:87:dc:76:
e7:bb:42:94:06:c1:8e:db:8e:76:ee:61:60:31:9d:e7:62:cb:
d4:69:71:7a:3c:73:f7:16:4a:ef:80:9d:4f:d2:96:a4:fa:dc:
21:95:83:2a:0b:ad:18:a4:c7:fb:29:16:23:b5:81:f7:c9:1a:
96:68:b2:43:c6:29:a7:b5:6b:8b:95:aa:50:f9:1a:b7:6f:84:
ee:5b:e2:08:96:9a:a6:85:8a:14:6c:49:a9:66:1d:55:0a:12:
6b:67:67:25:81:34:c7:8c:32:fe:34:8e:26:bf:f9:42:7a:45:
f9:f1:43:71:02:f2:61:77:0c:d3:38:a2:fd:b1:fa:15:a3:d7:
67:2c:55:22:70:94:86:de:cd:83:f0:ea:ad:f1:83:3b:fb:ad:
2d:2e:5f:a0:c6:cc:65:39:2d:64:a5:60:ac:1a:d2:13:2f:20:
5b:d2:32:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:26:30 2025 by rpki-client