Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ea62e908-41bc-31d1-8ed7-dfe5854dc6de.roa
File: ea62e908-41bc-31d1-8ed7-dfe5854dc6de.roa (raw, json)
Hash identifier: BXOyTQXJ3eKUSCZKBD7em1KYT1/7iYjw5Y33+lZxNGo=
Subject key identifier: 93:6B:48:E3:44:4A:C6:E1:B7:A0:D4:5D:A6:4E:47:A4:C9:28:A9:7D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A6CB6BA3511889812C5681C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ea62e908-41bc-31d1-8ed7-dfe5854dc6de.roa
Signing time: Fri 24 Jan 2025 14:00:52 +0000
ROA not before: Fri 24 Jan 2025 14:00:52 +0000
ROA not after: Thu 24 Apr 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.199.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a6:cb:6b:a3:51:18:89:81:2c:56:81:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 24 14:00:52 2025 GMT
Not After : Apr 24 13:00:52 2025 GMT
Subject: CN=8bde127a-bf99-47b9-a755-3f351591ebc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ff:0f:da:0a:7c:3f:d0:ba:43:13:18:36:56:
1f:d8:31:cb:b9:36:80:19:56:ed:31:f4:b4:31:95:
b3:6c:01:91:fd:79:74:5c:8a:eb:22:93:7b:8b:5c:
8d:92:a7:be:44:7f:ce:7f:23:bc:6e:d5:2a:1a:b9:
a3:5e:eb:5c:5b:0e:ae:a1:ca:2e:ef:fa:61:62:9c:
f8:b6:6b:b9:e6:cc:62:45:db:c6:d5:d9:90:8b:31:
18:29:29:7b:75:dd:70:fd:88:40:1f:61:46:5d:e9:
9b:b1:fb:02:0f:30:ce:88:f4:96:10:56:ef:a6:27:
ff:9c:e0:d5:ce:cf:6e:22:fd:75:7d:79:9e:31:f4:
0e:b0:86:3e:55:a5:2e:5a:67:e8:e7:06:31:a8:ce:
07:3c:2c:b5:34:26:40:80:92:a0:fc:7a:e4:5f:c1:
0b:ff:74:71:f7:53:96:0e:a3:fa:3e:b8:20:3c:8f:
02:d7:42:72:4d:5f:dd:66:99:a1:d1:e2:91:e0:ab:
4a:a2:3e:0e:7c:0f:b5:4e:4b:bf:66:eb:49:c9:b1:
54:d1:ae:a4:09:b9:ef:c7:7d:c7:83:2d:ec:29:52:
59:f4:d4:6b:26:23:59:a5:22:0b:3e:f6:ef:63:09:
e4:01:fe:66:3d:a2:b4:5f:fa:f1:c6:83:3f:1a:4c:
12:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6B:48:E3:44:4A:C6:E1:B7:A0:D4:5D:A6:4E:47:A4:C9:28:A9:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ea62e908-41bc-31d1-8ed7-dfe5854dc6de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.199.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:01:fd:24:56:20:17:4b:17:6c:c3:8c:af:15:93:72:c3:2b:
d4:03:b2:fa:47:63:12:dc:c8:e7:58:9d:ec:ee:8a:0d:11:21:
e9:cc:c5:e2:c0:25:8a:6d:ce:09:81:8f:cf:62:58:c0:d2:76:
9c:ce:cb:43:fb:cb:76:f3:56:b3:dc:d1:4b:c7:e2:5b:46:f5:
65:eb:aa:73:9c:ad:5f:05:fa:a7:78:70:68:22:a1:6b:05:96:
74:a7:ff:fb:3f:42:ff:ac:54:aa:89:a2:97:6a:b6:82:47:53:
f3:6a:48:c2:2d:f6:78:a2:02:de:c8:73:31:00:11:c4:58:83:
87:6b:3b:f4:5e:21:24:1b:dd:a9:f9:0a:af:83:ac:87:d0:42:
3a:9e:0d:09:d6:30:96:ae:32:d1:0a:39:3f:50:b7:12:7f:db:
75:69:ac:78:56:42:18:90:1c:5a:90:1d:fa:4b:b7:a9:22:ed:
44:3c:ed:42:84:1d:61:70:e5:1a:e7:01:6b:59:a9:8e:13:7c:
04:a9:4b:a7:66:a6:57:21:16:dd:41:93:9c:0e:20:9b:cd:94:
a6:ac:26:59:49:13:8a:70:95:3a:96:52:52:01:41:39:24:bc:
24:bd:80:5d:b0:00:b3:d1:43:1d:69:ee:83:9b:ad:e4:e7:31:
72:9f:6f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:07:19 2025 by rpki-client