Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dc3d110c-dcb8-36ba-a198-62230815f7dc.roa
File: dc3d110c-dcb8-36ba-a198-62230815f7dc.roa (raw, json)
Hash identifier: 3gomqrban5yoKgxB4W9zVRLY3C7Fl6dbImf/bsDEe/U=
Subject key identifier: C6:A8:22:25:DB:E9:46:1D:E2:AD:B7:A8:6B:3E:7F:ED:64:FE:0A:4C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A400E00800C38C3D60B49D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dc3d110c-dcb8-36ba-a198-62230815f7dc.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.196.230.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:e0:08:00:c3:8c:3d:60:b4:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=f46a38b6-0855-422c-9af3-2acb452bcdd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:47:58:36:14:42:96:6d:c7:08:cb:8a:81:
6c:56:77:e8:13:2c:55:69:1c:7a:f9:61:d9:d8:68:
f1:32:10:3d:b9:de:35:79:83:ba:53:94:17:85:94:
53:8b:8f:b3:45:08:09:93:79:f2:a6:96:b0:dd:97:
9f:37:f2:3f:06:b3:24:c6:29:6d:10:93:0d:59:6d:
a4:52:06:bd:86:63:77:76:33:87:05:ed:2f:90:83:
c1:c9:09:61:05:44:aa:8b:b7:2e:9f:d8:30:43:95:
3e:86:c0:fd:59:c9:de:a3:af:fb:97:de:c5:22:70:
80:68:d9:13:eb:6f:61:88:20:20:0f:51:5b:01:49:
e7:cf:17:9e:cb:b2:55:7f:70:73:4d:26:6d:c3:37:
7c:ec:23:2a:f7:34:80:62:77:4f:f7:cc:b6:3c:fd:
8e:75:a1:f5:76:a6:c8:72:82:b1:85:ad:1a:20:cc:
43:76:b5:ae:76:88:3b:c8:fc:79:3d:5f:a1:9a:5e:
82:09:7e:12:a9:d2:bc:68:33:a9:f4:8e:ab:ba:50:
31:49:5b:aa:c1:a9:3a:72:d3:06:88:f9:06:bb:e8:
9c:fb:ba:ba:dd:f4:82:86:14:82:9c:3e:5a:c3:16:
ad:ea:9a:4e:49:a8:0c:b0:06:cd:6c:80:bc:af:fe:
8c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A8:22:25:DB:E9:46:1D:E2:AD:B7:A8:6B:3E:7F:ED:64:FE:0A:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dc3d110c-dcb8-36ba-a198-62230815f7dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.196.230.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:fc:fe:20:1d:28:51:b9:02:ab:4d:de:3f:8b:59:f8:19:73:
29:fe:1c:d8:bd:e9:d4:84:12:94:87:d4:f7:77:21:1f:7c:77:
09:f1:09:5a:f0:c3:d8:e4:61:67:b6:02:22:ca:3a:3f:5f:1b:
44:88:eb:92:f5:b1:36:13:24:5a:07:41:70:52:73:25:83:b5:
f0:c2:a9:0f:c4:16:a7:3f:71:88:e4:55:76:51:9f:df:8e:47:
f4:0d:22:3c:c3:c6:92:17:7f:40:fa:c9:4e:c8:31:be:21:49:
f2:e1:d6:5f:e6:5a:a3:9a:a3:fa:4e:89:b4:47:cf:fb:71:39:
54:e2:3a:11:26:14:ff:a6:9e:44:dd:70:bd:18:94:03:ad:b1:
1c:7c:7c:a7:51:b8:e1:98:b9:8d:1b:cf:87:92:d2:f9:2c:a7:
a4:64:a1:fd:07:2c:00:3e:ac:45:ca:68:0f:67:01:50:1d:68:
10:f4:a8:b3:f6:20:da:24:71:95:14:4e:33:83:24:a6:04:99:
da:80:32:05:ee:41:8a:cf:20:dd:74:e3:a6:aa:b7:7d:94:39:
ec:8a:87:d8:20:95:e3:87:b9:4c:a6:61:2e:98:be:da:d1:da:
36:69:68:3d:da:0c:6f:fa:a3:c7:f5:6d:8a:d5:7f:91:34:ed:
32:bc:ae:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:23:23 2025 by rpki-client