Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e61f9cec-d7e7-3ab8-a6dd-3b7aae112a47.roa
File: e61f9cec-d7e7-3ab8-a6dd-3b7aae112a47.roa (raw, json)
Hash identifier: prA9uaqH7Qwve5LbFVQ7w7DaSA26e0p+fGM4e7L8y+4=
Subject key identifier: F1:A2:8D:FF:EF:FE:AC:CD:1A:1C:F8:0C:37:4A:4F:BE:74:F4:CC:C9
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849244E9EBA0F5AD1E6310F2FC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e61f9cec-d7e7-3ab8-a6dd-3b7aae112a47.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.15.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:9e:ba:0f:5a:d1:e6:31:0f:2f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=77f65f07-106a-4e28-be49-10e2f1f10320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b1:05:e1:11:b3:52:3a:cf:e6:e3:90:f2:46:
02:81:cb:b1:b2:91:98:c7:30:bf:1c:33:de:08:30:
9c:c2:09:45:58:3c:57:a5:20:37:35:ae:19:6f:63:
39:ca:4c:8c:aa:3a:3b:89:f1:5e:14:4f:43:18:33:
9d:d0:29:db:8c:ce:01:5e:47:1c:0c:0d:e7:12:07:
19:a2:02:3b:d7:4b:6c:a3:bc:6c:c9:3a:a5:6b:7c:
b7:5c:5b:7a:05:41:9a:38:2c:0d:33:d3:83:01:d1:
bd:e5:4e:ae:47:7a:ad:ec:f5:d8:5d:f3:e9:13:2e:
5d:14:63:21:64:27:70:00:b4:b3:6e:07:97:bf:de:
55:33:09:a9:2c:a2:88:ea:a8:ce:6c:f5:e6:a8:af:
87:5a:5b:5f:93:de:37:e7:be:44:90:8e:fb:cf:d5:
7e:40:83:6e:f7:86:92:00:37:a8:c0:0c:fe:17:15:
5c:ec:8c:1f:66:72:e0:dc:ea:25:91:7b:56:ae:04:
ff:c4:dc:16:ca:7c:f0:ab:33:36:d5:0b:42:f4:56:
1a:11:af:1e:48:fb:1d:66:e1:46:44:38:28:4f:ad:
0d:ad:26:48:73:a7:84:62:a5:99:d8:6d:a4:44:c5:
54:95:14:ed:83:e8:47:3f:ca:a8:bc:a0:4b:cc:16:
55:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A2:8D:FF:EF:FE:AC:CD:1A:1C:F8:0C:37:4A:4F:BE:74:F4:CC:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e61f9cec-d7e7-3ab8-a6dd-3b7aae112a47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.15.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:7a:bf:2d:03:75:f7:e8:dd:f0:ef:be:ba:8a:ef:ca:86:23:
31:79:41:87:77:7f:55:7c:50:e2:b8:0d:14:87:05:7b:89:f8:
46:8d:62:e3:d8:6e:24:90:32:4d:ce:cd:a7:84:90:b6:ba:28:
34:db:a6:90:e1:83:db:2f:28:1a:0f:d5:fb:08:9a:23:11:91:
a4:cc:9e:47:45:c0:6f:06:88:ff:87:9a:0c:f3:6e:0b:4c:9b:
86:c2:51:cd:f2:5d:52:30:d4:82:f6:2f:99:4a:27:b5:77:70:
d4:c6:83:4b:15:c9:cf:a4:70:74:27:8f:ad:11:f1:28:c5:d5:
6d:4a:d3:d0:e7:2e:3b:22:ae:af:f5:52:df:ab:58:f0:1d:b8:
75:ff:4c:d6:80:0d:ae:30:b7:9e:e8:8f:bf:46:54:83:71:c3:
7d:1c:e9:91:12:02:0d:a5:97:97:ab:26:a6:55:33:2b:56:82:
4b:b2:dd:20:60:93:24:ae:f5:b5:53:12:41:a9:8c:52:ee:be:
05:82:9b:ac:a9:f4:4e:66:14:2d:54:16:b4:f4:20:53:a5:cf:
27:32:5f:37:e2:9b:55:6c:71:15:06:ca:ba:58:36:72:12:21:
dd:14:19:92:1e:9a:25:53:80:e8:a0:60:eb:be:bf:9b:a5:9d:
41:cb:07:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:29:07 2025 by rpki-client