Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5f2852b-94f4-31ac-807f-a8e899311941.roa
File: f5f2852b-94f4-31ac-807f-a8e899311941.roa (raw, json)
Hash identifier: KoqfKJ/JdI8WH6bEBQQ6hDrDlbddmQg6e5cPcwgVfrQ=
Subject key identifier: 4A:EB:D3:EE:16:4E:74:D9:D6:B5:88:66:66:7D:C1:EA:BD:32:5C:F1
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848C9B0DCAA2EAC02F89E75BB00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5f2852b-94f4-31ac-807f-a8e899311941.roa
Signing time: Thu 06 Feb 2025 02:00:39 +0000
ROA not before: Thu 06 Feb 2025 02:00:39 +0000
ROA not after: Wed 07 May 2025 01:00:39 +0000
asID: 16625
IP address blocks: 23.59.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c9:b0:dc:aa:2e:ac:02:f8:9e:75:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 6 02:00:39 2025 GMT
Not After : May 7 01:00:39 2025 GMT
Subject: CN=ef09dbf2-6593-42fc-81ae-8874caa4455a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e8:16:c2:0e:25:39:88:30:fe:5f:37:58:9c:
ea:5e:41:d7:f9:e3:fc:b1:17:7b:85:c1:e8:ad:20:
1d:b0:97:f8:f7:0a:2c:6e:87:0c:7b:e5:65:df:36:
a6:62:e6:58:76:48:9b:7a:77:20:81:26:f1:1f:e3:
8a:7b:ae:7d:47:e2:7b:d5:66:cf:8a:cf:34:e8:1d:
72:a9:1f:79:b7:d6:9d:d6:76:af:24:e8:e9:08:35:
48:41:65:d3:c0:8d:80:7b:ad:6b:0f:97:03:6a:87:
ba:64:c5:02:24:8e:6e:ee:37:02:28:0d:11:d5:a1:
43:1e:48:86:d5:8d:7d:c7:4e:5b:26:bd:af:e4:c7:
5b:54:a8:6b:cc:bb:8a:7a:74:39:21:6e:21:34:e1:
74:d5:ed:39:c9:da:43:23:ee:21:17:a5:b2:12:f0:
63:78:bf:80:c1:20:bb:2a:15:fe:d7:e9:31:9a:08:
61:d8:6f:b5:8d:0a:d3:e1:e4:35:9f:cf:3a:fd:32:
28:41:0d:68:03:92:ba:b6:67:07:6a:c1:04:b0:2c:
5b:f2:8e:fb:11:d3:ad:20:e8:c8:16:06:65:db:44:
74:ff:ed:db:63:5e:73:1d:89:e5:2a:16:12:83:f5:
9f:2b:52:06:e9:27:56:8f:00:80:6b:14:52:5c:77:
69:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EB:D3:EE:16:4E:74:D9:D6:B5:88:66:66:7D:C1:EA:BD:32:5C:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5f2852b-94f4-31ac-807f-a8e899311941.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.59.76.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:f9:28:81:18:df:e7:b3:06:02:02:82:a1:87:26:72:1b:50:
c8:22:1c:69:2c:98:48:1e:06:88:fb:e4:08:26:6a:3b:ff:cc:
d2:b8:17:4d:ae:83:21:f7:a1:42:d7:ae:db:60:72:15:23:81:
dd:41:2f:08:13:78:09:72:cf:50:97:14:d3:a8:ee:6a:96:cf:
d8:a7:3a:1a:80:86:29:03:36:43:a2:e4:a3:16:01:92:26:9a:
50:a0:d7:79:21:eb:35:4c:42:69:6d:30:f1:64:ad:08:c6:3a:
96:66:de:cf:00:7a:87:f9:5e:db:8d:fa:3a:f5:16:3b:2c:a0:
bb:3b:41:9e:41:1e:ec:a1:ae:90:41:7a:4e:80:24:1c:76:2a:
91:e4:c4:2a:58:52:f3:ee:6b:e4:79:07:02:78:14:7f:50:9f:
5b:3a:3f:5b:8c:8f:00:7a:d3:c4:d8:db:08:da:eb:5c:94:fa:
d5:fb:2b:37:c4:00:6d:57:bd:34:56:19:10:7b:d0:ff:d1:1b:
05:22:18:94:e1:a6:70:5d:fc:8d:dc:76:0a:f9:cc:8e:00:40:
9b:de:aa:6e:57:70:81:f3:72:97:6c:4a:7f:a9:3d:db:05:fc:
54:44:59:ad:bf:f6:8e:05:84:19:25:cf:47:64:46:56:10:2d:
ce:4e:99:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:05:14 2025 by rpki-client