Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1e68ce9-b763-3879-852f-84e317005158.roa
File: e1e68ce9-b763-3879-852f-84e317005158.roa (raw, json)
Hash identifier: 6lD02S2ozR1R8Nz+ND1DfjRLFS4ZsZAEaoUVvwC5y6o=
Subject key identifier: 71:0C:D3:44:4D:37:2A:55:13:77:81:E3:23:50:92:93:7F:ED:FF:73
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487CEB4B145CDB19BCE1FC0180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1e68ce9-b763-3879-852f-84e317005158.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.45.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:4b:14:5c:db:19:bc:e1:fc:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=03cb820d-73bf-4bcf-a59d-534debfebac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:98:3c:20:dc:4d:b8:0c:85:c4:49:24:1a:a7:
8e:d5:53:67:44:88:aa:04:74:1c:9c:1c:28:31:34:
94:fd:8f:f1:e5:d8:49:27:0f:69:be:9d:f6:1e:e6:
6c:45:3b:e9:bf:58:0d:c9:65:13:45:5e:6b:6e:af:
59:de:8f:f7:15:3f:8b:40:93:59:9f:6c:36:a2:cc:
7a:28:cd:d3:b1:49:d0:5f:69:04:96:8f:21:e7:09:
ec:19:fd:f0:ee:8b:49:f4:3d:67:ff:12:f0:c0:ae:
c0:90:fc:ce:c6:51:da:41:02:a6:c0:62:44:f7:3e:
63:ef:5a:bc:fa:d6:f8:24:d3:c2:90:cf:9e:c1:d2:
23:72:e8:fb:06:07:ef:8b:35:57:24:d0:45:5e:da:
ed:0f:96:5c:ef:8e:ed:f2:f3:7f:5c:e7:2e:78:68:
50:0b:02:53:a1:c0:32:b6:7a:d1:74:01:ec:77:f0:
c6:38:d8:0c:3a:c9:36:05:da:d0:c1:d8:61:07:64:
0a:b8:2b:be:47:26:81:02:7d:09:96:e6:f8:7c:04:
ab:a9:26:e2:b3:ff:33:6c:70:83:12:69:b5:e6:21:
2c:17:98:e8:c3:d5:08:90:79:22:27:1e:b4:50:93:
73:7c:c1:dc:14:9d:5a:02:cb:6e:49:fb:3c:ba:22:
2d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0C:D3:44:4D:37:2A:55:13:77:81:E3:23:50:92:93:7F:ED:FF:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1e68ce9-b763-3879-852f-84e317005158.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.45.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:eb:7a:dd:0b:6a:a2:36:53:e9:15:72:81:b9:59:07:5d:cb:
7c:26:76:ae:3a:44:c1:83:59:44:23:97:ae:f5:8e:95:e2:ca:
ea:3e:e3:49:9c:af:ce:0c:3b:c2:8e:76:ec:43:12:49:8b:59:
09:5c:ef:32:30:7e:1f:0a:6a:3e:96:d8:0b:5c:cc:55:2f:d8:
04:95:07:1a:c4:4e:b4:25:bc:ba:7a:01:25:11:2c:18:e4:06:
74:73:a0:d7:19:65:e3:60:86:42:6f:1e:09:81:aa:74:34:08:
6b:10:f1:2f:87:05:c0:cf:1f:ca:8d:50:dc:3f:58:aa:a7:70:
23:22:ae:a1:fc:d0:0c:78:48:e1:fa:59:75:35:54:09:d6:ba:
1c:f2:c8:77:d2:f7:af:96:fa:61:d4:c3:97:a7:13:fd:17:ed:
b0:4d:37:da:27:e4:59:18:aa:a4:98:4b:ed:95:bd:ee:cd:06:
d4:04:b4:a1:e1:a6:36:3e:e9:f0:16:49:a9:03:fb:74:31:a1:
35:3a:c4:39:4d:b5:3b:9f:cb:c4:09:86:45:05:2d:0c:89:7d:
89:5c:55:cd:99:aa:7c:0a:f7:88:2e:45:52:a1:b8:48:6b:09:
ed:09:6c:ca:6f:9c:13:19:20:03:73:02:ca:ff:ea:78:31:48:
56:31:d2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:11:23 2025 by rpki-client