Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af0bfbbb-fdde-3c67-9f2a-f96d27cda621.roa
File: af0bfbbb-fdde-3c67-9f2a-f96d27cda621.roa (raw, json)
Hash identifier: mmHVvTZxCI6vFyqw+O8GU3yPTGZJOeomEtiqmLfIBu4=
Subject key identifier: A2:F6:68:78:75:0D:26:33:45:31:C0:A7:38:EE:08:93:F4:CE:06:5F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A400DCAB246A568AFC1C9880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af0bfbbb-fdde-3c67-9f2a-f96d27cda621.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.194.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:dc:ab:24:6a:56:8a:fc:1c:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=db61ca3d-ac38-4b20-981b-0f9f11adf70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6a:f7:01:78:e4:1a:9d:e4:d3:e0:51:0a:d9:
0f:2e:52:c1:53:d2:59:a4:00:6e:f1:37:e1:eb:f9:
e5:25:27:bb:a8:3d:d0:cf:fb:b9:d5:a6:79:59:d4:
55:a2:7e:b7:c5:30:42:5e:cd:f6:29:ce:29:30:10:
52:53:e6:f2:a8:24:16:03:3c:a8:e9:af:cb:1a:56:
c9:69:96:a6:94:1b:be:3f:47:94:b3:6c:0c:98:fb:
7e:98:47:b3:1a:6b:5a:e3:75:e2:66:93:9a:56:d3:
8c:09:d9:90:4f:63:4a:1d:5d:b2:a8:8e:86:79:0d:
cc:b2:34:81:09:c6:08:a3:94:b3:fb:f9:c0:7a:7d:
2a:ae:90:37:91:f5:37:32:7e:8d:cc:7f:ee:96:e6:
55:13:08:6a:e1:d2:58:8c:89:76:a8:12:44:bd:87:
b4:a5:0a:92:c3:ec:6d:9d:fc:c7:9a:92:fc:a1:53:
52:a4:cc:5a:81:b7:d6:06:1c:01:df:d0:8e:3a:1c:
48:b2:8f:40:a2:68:fb:d1:56:02:19:cf:c3:8b:88:
30:65:ac:67:5e:41:21:3b:6a:b5:58:53:7f:54:e6:
86:05:37:1d:c8:45:0a:12:87:9b:b9:c0:5f:d8:a4:
67:34:3a:8a:e4:35:cf:94:9e:08:b7:36:69:cd:06:
9d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F6:68:78:75:0D:26:33:45:31:C0:A7:38:EE:08:93:F4:CE:06:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af0bfbbb-fdde-3c67-9f2a-f96d27cda621.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.194.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:64:53:3f:fd:12:d7:14:b0:88:d5:16:17:48:a1:09:72:c4:
8f:b5:9e:60:cd:18:94:1b:73:ed:f3:6d:2d:e7:60:06:14:6e:
00:ec:d7:e7:70:49:4c:89:99:07:6c:56:84:54:db:44:09:27:
29:99:b0:dd:c4:36:1a:9a:97:59:60:1a:35:73:ea:56:bf:17:
2b:12:e0:8f:4e:3b:24:1e:34:c4:78:2e:d5:5d:1d:2a:e1:8f:
fc:f2:f8:4e:25:ed:6f:45:b3:d6:e6:6f:a8:34:13:af:08:3e:
6c:e7:ef:79:92:99:6a:b9:e2:cc:56:8e:eb:9b:7e:5e:81:31:
fd:e9:15:de:33:5e:18:a3:64:36:b5:af:55:76:7b:27:e9:7b:
52:36:0a:09:a5:5b:3c:f8:e1:62:a5:b8:26:e5:9f:4f:bc:88:
52:62:4e:f9:f0:c5:06:a3:32:2d:5e:d4:64:1a:41:4f:05:0b:
47:14:b0:e3:aa:7a:69:cf:1d:20:b0:a2:fb:a2:3f:91:21:2b:
6c:7e:26:82:f6:4b:4c:58:51:50:6a:60:33:be:45:bd:37:57:
a6:1e:ad:e4:fc:76:a8:4c:58:36:73:f7:3c:c1:4e:41:d6:91:
ba:bf:54:ab:11:27:6d:69:12:5e:4c:70:12:1b:62:9d:3b:2c:
54:0a:0a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:56:07 2025 by rpki-client