Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f223c15d-352f-38ac-90db-a291132bed33.roa
File: f223c15d-352f-38ac-90db-a291132bed33.roa (raw, json)
Hash identifier: pWwyhyyl1lCYL72ChBndiuhEUSsAipGvPnrXwfLHZ30=
Subject key identifier: CA:CF:3C:E1:2D:C2:5F:20:40:CB:EE:2A:E9:74:A5:EF:C2:6E:D0:19
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A400CCD4C0E097AC88A027C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f223c15d-352f-38ac-90db-a291132bed33.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.198.106.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:cc:d4:c0:e0:97:ac:88:a0:27:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=97411cb1-727e-4f6a-8e58-395e7296b595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f5:24:3f:a3:e7:32:e1:71:e9:9c:22:86:9b:
58:bf:e8:1a:5d:1e:2f:3c:fc:0a:49:bc:9f:50:82:
ae:69:e8:ef:0e:e6:9a:95:3d:0f:26:cc:0b:9e:86:
3a:f2:6a:b0:28:8e:12:b7:07:bf:b8:9d:09:45:3e:
27:79:bb:0c:a0:14:47:9f:04:48:f6:91:d1:4e:46:
44:3c:0c:eb:08:3f:66:0b:c9:f3:21:d0:c6:6c:17:
b5:7a:dd:6d:59:3d:2b:40:1a:ac:2b:0d:da:ab:d2:
fd:d1:72:ce:42:f6:b0:f4:be:d0:c8:aa:57:b6:71:
8e:d3:ec:c4:49:27:b7:ef:7a:c3:4e:62:40:9f:70:
b6:65:32:cd:85:0d:b7:6f:ed:e2:80:df:99:2f:a8:
d9:f0:0a:3e:df:bc:63:57:c5:d8:e1:e6:56:0b:ac:
19:4e:f7:90:e0:39:10:bb:fa:57:82:22:f0:da:b0:
ae:72:ea:53:49:5d:8f:8c:ec:01:96:16:56:a7:46:
6d:5b:07:ef:de:7c:2c:4f:80:bc:a9:1b:8f:66:d3:
e0:8e:d3:ed:74:67:bd:d7:04:2b:26:8b:4d:d5:3c:
c8:d2:81:29:cb:ff:4b:9f:65:27:91:9d:8d:3d:5b:
4f:d3:25:3c:66:d7:f8:0a:11:1b:ff:d4:db:ca:51:
35:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CF:3C:E1:2D:C2:5F:20:40:CB:EE:2A:E9:74:A5:EF:C2:6E:D0:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f223c15d-352f-38ac-90db-a291132bed33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.198.106.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:7f:9a:46:44:67:12:ec:0e:48:c5:cb:90:e7:ed:08:37:43:
59:8b:4a:47:a1:96:42:8d:3b:9c:b1:57:70:23:d3:ac:ab:da:
50:75:b2:62:7b:ff:1b:70:84:61:25:25:3a:0c:33:2b:0c:6a:
fb:03:34:a2:43:a0:05:c0:2f:f6:61:ac:6d:5e:e5:a1:0a:b9:
31:81:b3:8b:45:dd:04:94:b0:67:df:b8:ac:5a:13:34:c6:38:
33:b7:26:12:c5:75:e1:99:58:05:d3:cf:c9:c3:32:c9:a7:e0:
88:34:80:49:6c:fe:e2:66:4e:e3:d1:c3:52:79:f9:98:1d:45:
c5:64:98:52:43:f1:6a:a8:49:a6:7b:d8:b7:92:8a:57:ba:e2:
45:b3:c2:14:86:e1:31:76:fb:f0:f3:5d:92:d2:22:ba:70:d2:
4e:e5:b4:72:5e:c9:7c:8e:3e:75:22:b6:d9:05:83:28:31:9f:
03:dd:5f:81:be:e5:70:25:5b:9c:9d:88:6b:d3:79:47:4a:4e:
b9:60:7c:ac:ba:d6:53:e5:b9:51:60:45:09:c9:09:92:35:19:
9f:9c:81:94:3f:49:10:1e:e6:9b:de:81:c1:38:09:e8:3f:20:
cd:4d:28:79:3c:d7:09:ed:83:b3:ad:18:b9:43:02:4b:c7:a3:
66:f7:61:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:56:55 2025 by rpki-client