Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c26bbfee-76d0-3e15-aa11-7d1c7ad26995.roa
File: c26bbfee-76d0-3e15-aa11-7d1c7ad26995.roa (raw, json)
Hash identifier: 1dcMjiNtH9+rSCTi29YXiNVKoCeSC3pJPaz+ZYPD0xk=
Subject key identifier: 84:13:23:D2:47:0B:3A:DA:87:9D:3A:74:32:0E:20:60:80:08:F6:32
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A400C80860239C3EC1228200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c26bbfee-76d0-3e15-aa11-7d1c7ad26995.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.195.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:c8:08:60:23:9c:3e:c1:22:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=513fc4dc-7b53-4088-a9f3-58eb032e3b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:bb:88:a4:97:42:a2:dd:7a:a5:fb:c8:75:b5:
ef:8d:95:78:81:28:17:ea:b2:ae:b8:bd:31:aa:52:
d1:ee:e2:d7:fb:c7:15:0f:fd:ee:38:f7:b1:08:f9:
cf:a0:7d:b0:71:93:8d:f5:be:e5:a7:a6:6e:33:b1:
21:55:bb:05:a5:c4:a3:75:f6:48:33:b4:88:a8:2d:
04:b6:de:93:34:a7:81:8f:c0:54:b3:25:52:ee:b3:
ea:52:5d:4d:be:47:d6:58:ea:56:0d:cd:3b:7a:a2:
d5:b4:5e:05:a3:44:0e:cd:f0:cd:aa:c3:51:a9:57:
a9:9b:bd:28:e0:ee:74:4f:1a:60:ea:87:ae:81:6d:
de:22:50:63:6c:d5:ea:42:15:40:8e:75:65:72:59:
f2:2d:93:a0:3f:dc:59:6e:bf:e0:dd:92:dc:7a:78:
b9:ba:32:3b:ac:07:b2:40:34:39:7d:4c:d0:73:9e:
b3:f9:a4:c0:f1:d2:9c:47:88:c9:d1:9a:b0:39:05:
f9:ca:ae:cf:83:9e:7c:34:00:dc:91:87:8f:87:33:
86:93:ff:d0:c6:d1:4b:08:f1:39:0b:8f:d5:67:9a:
d3:13:4e:18:40:74:f7:89:eb:52:42:f4:30:08:e6:
3b:12:94:33:92:ca:32:eb:1e:1e:4b:9b:fe:29:57:
3c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:13:23:D2:47:0B:3A:DA:87:9D:3A:74:32:0E:20:60:80:08:F6:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c26bbfee-76d0-3e15-aa11-7d1c7ad26995.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.195.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:95:00:a0:5f:8d:26:c8:e8:1d:d7:f1:ed:08:01:68:7e:f5:
fb:fc:53:e0:6c:20:75:a9:0b:7f:60:81:19:2c:1c:1e:61:33:
32:72:bd:53:85:2c:4d:39:da:c3:42:91:a8:76:3d:0c:4c:4e:
50:fb:14:ae:dd:35:49:68:57:56:cd:39:6f:b8:08:db:39:40:
62:63:35:d0:b3:c6:e1:20:46:4e:e5:f7:77:59:ed:c2:f6:af:
ac:93:4f:8a:2d:63:9f:64:a3:36:a3:e5:df:07:ae:a0:71:04:
05:57:3c:fc:ab:98:6e:c7:43:45:fc:9c:84:1e:b3:5a:8e:5a:
c4:fc:d6:5b:50:22:5b:d3:7a:2c:e5:12:14:33:62:cf:f2:40:
10:99:26:14:04:97:ee:5a:fe:5f:9f:78:09:79:6b:9b:e3:2c:
e9:59:9b:0b:8e:23:5d:d2:c7:7a:a5:d6:f6:80:c1:08:75:84:
46:98:a7:3b:12:13:1d:5c:ec:61:fd:af:b3:0e:f3:c1:6c:81:
ce:cd:78:92:d5:32:21:51:e7:a2:14:f4:ce:9e:36:13:eb:21:
7e:65:62:a2:03:4f:77:03:fe:d7:6d:8d:8b:31:6d:30:2e:34:
cc:29:ea:da:7d:23:bf:b2:6e:fe:6a:64:37:2f:9d:b0:55:d6:
af:71:74:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:55:43 2025 by rpki-client