Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4e92d24-2e4d-358e-914d-6a4e6605b456.roa
File: c4e92d24-2e4d-358e-914d-6a4e6605b456.roa (raw, json)
Hash identifier: VFM/6zuwsYeqfvxukXOMJZh6XoHu/lbKWLlmJXlvWZg=
Subject key identifier: F1:98:5B:14:B4:54:64:41:34:E2:44:B7:2C:F6:84:A4:70:F5:18:0C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848CC7BAAEB1973FE37E48B7280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4e92d24-2e4d-358e-914d-6a4e6605b456.roa
Signing time: Fri 07 Feb 2025 02:00:39 +0000
ROA not before: Fri 07 Feb 2025 02:00:39 +0000
ROA not after: Thu 08 May 2025 01:00:39 +0000
asID: 55836
IP address blocks: 23.221.68.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cc:7b:aa:eb:19:73:fe:37:e4:8b:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 7 02:00:39 2025 GMT
Not After : May 8 01:00:39 2025 GMT
Subject: CN=525d50eb-c396-4600-928d-ceb91e64b213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:54:3e:61:a2:48:c1:6c:9e:79:79:42:0d:11:
ab:31:0a:09:c4:3d:4f:5b:a0:20:d3:6c:19:f9:c0:
99:77:dc:9e:d5:54:00:03:a8:c8:ad:fa:4c:44:f2:
d7:97:42:7b:c9:56:56:e8:62:8e:6d:50:bc:e0:5d:
3e:c8:6f:f1:24:07:be:f4:5e:e2:a2:b7:04:98:b2:
15:7f:51:48:1d:3e:d0:f6:bc:38:b7:6d:7a:06:23:
fb:53:52:81:6b:88:79:84:b0:10:a2:62:16:49:15:
27:26:90:ca:01:84:b7:1a:b9:85:da:18:97:87:65:
7d:50:91:0b:58:65:5d:ad:21:a3:e1:8a:da:f1:fb:
6d:82:b6:c7:00:74:27:b3:c5:1d:cf:8b:aa:dc:c6:
74:7f:f2:07:b2:4e:58:80:4d:be:a3:96:5f:b3:fb:
a8:f8:38:e3:18:80:57:cf:d2:a7:02:26:3c:44:bc:
e3:af:e1:f2:ac:7c:22:21:2c:69:c4:82:2b:73:73:
7d:6f:a3:45:5e:62:6d:ca:62:73:a0:7a:0b:ed:cc:
7b:35:02:40:b6:af:34:f1:bf:5f:72:6f:da:e0:8c:
4a:8c:4e:c2:dc:89:be:53:39:96:8a:b0:3a:5e:69:
d6:80:02:f9:e9:ef:49:c4:49:41:9a:c4:76:32:1a:
92:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:98:5B:14:B4:54:64:41:34:E2:44:B7:2C:F6:84:A4:70:F5:18:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4e92d24-2e4d-358e-914d-6a4e6605b456.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.221.68.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:91:c4:27:04:a9:72:18:1b:c2:5d:80:24:e2:c7:b0:66:a3:
eb:60:d9:a9:ac:ea:6d:c4:5d:09:ab:cd:7a:76:f8:e3:09:c8:
42:9e:43:db:0c:f1:98:5b:9f:15:25:93:56:4b:2d:e8:c2:9e:
d0:1d:5f:9d:66:67:36:c5:d3:3d:67:6f:26:b5:5c:6c:74:a8:
f4:7c:cd:d7:d6:53:4f:bf:fa:cd:4f:b9:40:98:e6:ba:05:84:
b4:dc:26:06:41:58:d0:b8:e8:61:0c:43:bc:24:64:95:5c:e9:
bc:fc:d2:85:ae:6f:ba:10:58:9c:49:50:ad:68:af:ca:2b:bb:
c5:a2:4a:f6:f4:b6:ef:cf:a4:cd:11:a5:19:2b:5e:f6:d2:19:
3d:77:f4:7f:fd:90:6c:c9:8d:fd:a1:8d:31:82:03:b6:78:df:
52:20:ac:46:26:f9:f4:61:16:f9:4f:9a:05:8e:03:51:1e:bd:
2a:c0:b6:26:48:a6:43:2c:1d:50:c3:38:e2:51:2d:b7:a6:48:
8d:8e:50:78:97:42:57:7a:37:bb:37:97:62:63:dc:53:88:75:
86:51:5a:ae:0c:04:28:8f:ba:e8:25:97:12:4c:11:d6:f8:4c:
04:45:4d:c8:e1:e8:1f:83:7f:ab:a2:7a:78:7c:ec:1d:81:4c:
fc:22:58:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:55:32 2025 by rpki-client