Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e5da2c4d-f28b-3dc6-a589-d85d8f73576a.roa
File: e5da2c4d-f28b-3dc6-a589-d85d8f73576a.roa (raw, json)
Hash identifier: qtVpG1cx2WtMrlq+1Bz0tTVXD+5+m1XvjFvTY245/3A=
Subject key identifier: CE:A8:4A:A7:BE:5B:4D:2B:71:23:DE:C3:2B:EB:E8:6E:CB:8B:0E:07
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858488DAB60FB0F41D969279D1C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e5da2c4d-f28b-3dc6-a589-d85d8f73576a.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.60.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:60:fb:0f:41:d9:69:27:9d:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=4b20bb73-dc0a-4fd7-a3b8-e65c528b83cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3a:45:20:60:ee:08:e2:17:90:b1:47:0f:4b:
f2:5a:a9:be:b1:c3:2f:2f:ac:34:06:24:f4:60:69:
7e:f2:9a:cc:2a:78:c8:58:ec:be:49:00:86:a1:47:
27:91:94:96:43:33:81:76:76:03:b8:87:3c:70:18:
ea:36:00:24:f2:fe:77:e8:2a:b0:56:58:7a:fa:b3:
38:d1:ee:91:5f:2d:bc:f9:55:f2:96:3d:d2:ef:16:
0a:77:80:d6:ce:8e:5d:01:ac:7b:df:80:fa:44:0c:
ee:2c:69:ba:ab:4d:8f:2a:2c:0f:f2:91:e0:94:f4:
50:1a:cf:f8:8a:77:96:3a:63:f6:48:d3:84:ac:3f:
68:27:8c:56:31:df:ca:ef:64:d3:32:1f:5f:22:68:
5a:d6:2b:5b:ac:fa:67:1c:1d:88:41:55:03:88:74:
07:e1:cf:29:94:65:63:56:13:50:99:8b:53:ad:d9:
82:45:7c:fe:29:ec:4f:c1:c1:79:ac:f4:86:95:b4:
dc:77:df:37:3a:fc:0e:47:3c:37:16:4e:e9:4c:e1:
00:48:5a:60:00:b7:dd:7f:f2:73:8e:ba:fc:b5:a4:
dd:1e:57:09:20:25:c5:60:cd:50:69:17:47:89:af:
79:4d:e6:db:19:aa:16:f7:e8:c1:5f:64:2d:4f:1b:
21:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A8:4A:A7:BE:5B:4D:2B:71:23:DE:C3:2B:EB:E8:6E:CB:8B:0E:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e5da2c4d-f28b-3dc6-a589-d85d8f73576a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.60.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:da:57:15:86:e4:24:5c:4e:b1:33:63:7d:e3:2c:43:30:8c:
3b:a0:92:69:96:16:5a:75:78:6f:62:a6:cf:3c:08:f1:5d:68:
75:2a:01:ec:3d:9a:aa:d4:aa:c9:de:24:50:24:44:ec:98:3c:
a3:fd:3d:39:9a:0f:87:a2:67:39:0e:38:26:23:18:1f:82:31:
1d:df:05:08:35:97:8b:53:50:07:6a:8a:c2:fc:a4:e5:ae:78:
fd:08:a7:96:fa:9a:fc:b9:b5:e0:d5:3b:61:98:b7:3d:75:90:
61:87:54:67:ea:97:31:34:c1:54:15:c3:98:fe:d9:73:8c:b4:
1e:d2:e0:71:1b:37:76:ec:ea:45:58:d5:f4:27:66:e7:06:49:
aa:07:c6:7a:b0:f4:4b:5d:5e:40:a0:46:d2:9b:06:be:00:a1:
69:fa:67:46:22:f2:ef:df:37:58:10:a6:4d:72:2d:12:0a:ee:
43:25:fd:7f:59:b8:2d:38:44:ba:7b:d5:4d:da:c6:2b:b8:5f:
0a:70:f6:28:cc:b7:c1:d9:7d:0b:a4:2d:f7:07:35:f0:19:56:
41:8b:88:5c:6e:55:9a:4f:9a:e0:72:22:8a:09:14:ee:59:73:
03:05:51:da:9d:32:be:b5:f5:d0:1e:84:e1:28:85:54:a1:7b:
14:70:3a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:12:58 2025 by rpki-client