Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f370c9e5-fb67-349b-a1fe-049404b08141.roa
File: f370c9e5-fb67-349b-a1fe-049404b08141.roa (raw, json)
Hash identifier: b8olshGsdJ9P/ofNDTdeYsr3azoeEqpxqxZb/fp+dEs=
Subject key identifier: F3:1D:DD:F0:10:0E:0E:D8:38:57:10:39:BC:6C:DE:5F:3B:47:C4:90
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584890760F6717D076E175ED0700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f370c9e5-fb67-349b-a1fe-049404b08141.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 20940
IP address blocks: 23.193.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:76:0f:67:17:d0:76:e1:75:ed:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=40b409ae-fb40-4a0a-9c37-294a9c5fa095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:59:72:b8:a1:da:4e:a2:b4:be:8d:7c:bd:9b:
6b:10:dc:5b:b1:a9:ff:75:1e:a0:7a:c1:f6:f4:bf:
e6:4e:96:63:01:b3:26:4c:f0:0d:88:f0:d7:a0:45:
f8:aa:1f:0e:22:1d:7d:ca:97:1d:0c:3b:16:a7:4e:
05:d1:70:d1:8d:1b:63:f8:6d:c9:93:03:0f:0f:c1:
bb:bd:24:c0:87:77:4e:fe:6b:36:17:6f:17:67:8e:
12:40:ed:e7:04:19:83:c0:a5:f8:94:00:7e:60:87:
e0:88:cd:28:a1:93:61:62:c0:0f:5f:fa:ca:e2:54:
3b:f7:49:14:e1:6a:48:ad:bc:c8:77:77:7c:4b:f9:
62:32:5e:fa:1d:9a:27:5a:6e:af:9e:d0:8b:44:ba:
fa:a7:e9:1d:70:89:8f:b0:4e:4a:ae:e6:63:d8:31:
dd:c7:cb:ef:ce:a7:df:0d:fc:a2:e3:f6:4f:ba:9c:
dd:ea:d0:75:d2:2b:98:1e:55:2f:1f:c2:4c:6e:74:
40:34:32:a2:c2:4d:54:67:65:d6:81:68:09:9d:7f:
af:9b:21:82:65:20:69:fa:15:bd:bb:53:70:58:10:
56:05:6b:f1:17:44:34:b9:f3:77:ed:83:f2:93:e5:
e2:cc:c5:47:04:bb:99:78:1f:37:b3:c3:52:db:cb:
34:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1D:DD:F0:10:0E:0E:D8:38:57:10:39:BC:6C:DE:5F:3B:47:C4:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f370c9e5-fb67-349b-a1fe-049404b08141.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.193.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:96:0d:4b:fb:72:9d:b3:d7:5a:ce:bb:dd:b8:c4:9e:57:ec:
eb:5a:53:6e:fe:2a:d7:41:bc:50:56:a7:d1:ea:6c:31:b4:5a:
30:32:d2:28:e2:fb:30:d6:03:70:e6:24:20:f8:c5:ab:91:54:
19:f1:1d:71:3b:00:f7:1d:cc:07:6e:2a:aa:ad:b3:0f:03:3c:
5f:fe:0d:e8:2a:cb:e6:cb:3f:31:e3:2a:a3:00:fd:54:ca:75:
64:ca:c1:de:70:d9:42:d0:79:7a:1d:da:0a:e9:41:3b:67:3e:
02:22:44:e6:fd:cf:15:c4:7e:0c:d6:83:7f:7a:a2:aa:32:1d:
81:b6:60:64:b3:b6:2d:fe:ad:53:0a:5a:38:9c:94:b2:2d:ce:
b4:39:95:05:cf:ba:49:94:c6:9b:e1:f9:d9:21:89:ad:48:cd:
31:9a:c1:c5:e6:44:50:d7:35:ea:da:7f:2a:95:f6:3e:67:a2:
0e:b0:de:e8:8e:f6:8a:3e:f6:7a:34:5e:bc:a3:09:94:65:d3:
15:be:57:83:4b:23:3b:60:7c:0a:08:22:2d:6d:5c:2b:fa:9a:
fd:c0:a2:d5:ac:7a:f2:a8:36:2f:cc:d9:8e:2b:96:39:49:4f:
3e:f4:d3:a0:dc:9c:40:04:03:34:51:2f:ff:93:3e:8f:19:89:
ab:0c:c3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:27 2025 by rpki-client