Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d319ca55-be2c-3f94-b6cb-5ac98563aafa.roa
File: d319ca55-be2c-3f94-b6cb-5ac98563aafa.roa (raw, json)
Hash identifier: SgzIt0EsVHp3qhG/BNWItRRwriisjqhS3j1HfNy9ywk=
Subject key identifier: C8:37:A0:09:0B:20:3A:5B:62:F5:3E:69:CE:20:CA:86:6B:9A:05:BB
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A400DBF0ABFF9FA3A6C34280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d319ca55-be2c-3f94-b6cb-5ac98563aafa.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.193.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:db:f0:ab:ff:9f:a3:a6:c3:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=e2ac58a3-9006-4d5c-ae8b-c795ad61b165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:54:fc:a0:de:55:e2:5f:4b:e1:72:02:91:28:
e1:48:ea:bf:ab:9f:7d:4a:71:9e:97:f8:83:71:be:
d8:13:bc:cf:db:85:b5:93:98:a5:eb:99:8e:de:4e:
d1:79:14:91:5b:eb:e8:df:c0:9e:55:58:51:14:ab:
07:3a:3f:5d:0c:a7:2c:fe:a2:3d:20:06:d6:49:8d:
81:63:9d:e2:7e:e2:f5:c5:c4:92:83:91:37:7f:ba:
d4:d1:94:33:65:db:fd:02:3a:7a:a4:4b:b1:90:5b:
e4:2f:f7:74:f0:32:cd:9d:54:1a:4f:9e:ab:90:38:
31:0f:da:82:31:db:3d:71:11:29:b6:4d:c4:51:4e:
93:41:96:1f:40:d4:23:60:bb:d8:a5:da:b7:87:2c:
bd:98:21:11:10:ee:c1:dc:a3:c4:73:19:f8:29:9e:
60:1f:9b:dc:b8:7a:85:f4:54:cc:fd:84:41:c9:c8:
bb:73:0b:72:3f:db:50:29:24:11:cc:65:d0:4e:04:
cc:cb:36:c9:c3:b4:b3:77:d4:f2:b6:09:97:58:71:
18:af:84:ad:47:8d:af:47:e4:9c:5a:ec:4a:d7:81:
8e:7a:42:83:76:30:b6:0e:8d:de:26:33:ea:c3:e5:
41:2b:54:fd:09:91:85:8c:2c:f3:a8:e0:0f:97:33:
29:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:37:A0:09:0B:20:3A:5B:62:F5:3E:69:CE:20:CA:86:6B:9A:05:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d319ca55-be2c-3f94-b6cb-5ac98563aafa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.193.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:33:90:53:c7:16:b5:64:20:90:62:a3:59:25:cd:e8:bc:04:
a8:75:9b:39:1f:12:81:91:c9:c9:a8:bf:d0:91:b4:32:af:59:
b5:9f:91:2f:ab:9e:94:8d:a4:27:6c:50:65:57:90:4d:3a:41:
6b:bc:7d:b9:52:c4:50:32:b7:4f:11:ba:e6:9c:cc:71:0f:46:
b0:50:ae:30:da:08:e9:4e:ab:2c:57:4b:27:bb:ae:f1:26:45:
f6:63:ea:d1:d9:5a:a3:19:a6:3b:d5:0d:43:aa:65:62:27:06:
96:24:ef:37:97:dd:6d:8c:63:0e:07:9c:d0:e5:75:f8:61:90:
b1:ee:a1:28:ea:5c:06:e7:c3:aa:95:3f:d4:cc:04:f0:8b:c7:
c1:9c:47:38:db:1e:0c:8f:77:23:c2:46:2a:fe:a1:b6:46:e7:
dd:40:f2:4f:80:01:bd:1d:d0:fb:f3:53:ff:9f:8b:b7:51:b5:
d5:b0:8d:be:e1:a2:b7:72:40:ef:68:d9:9d:69:42:08:0c:6c:
05:fb:bb:2d:d3:bc:0c:46:fc:b4:48:57:14:0a:01:3a:74:c0:
30:84:f5:e8:0b:f2:f7:e2:e9:0c:35:f7:98:04:20:95:a2:8f:
3c:8e:09:88:e0:4d:22:22:04:f4:c9:e9:61:7c:6d:22:97:93:
7d:79:88:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:01:48 2025 by rpki-client