Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f95605ad-a507-300d-bd92-82abf898904c.roa
File: f95605ad-a507-300d-bd92-82abf898904c.roa (raw, json)
Hash identifier: EA2ujmVSprmDMx8+VlcoB92HQCGCMul3I+Ai7Y3oSoA=
Subject key identifier: C8:1F:C1:E1:03:BC:E1:45:79:CC:CB:14:E7:D0:F5:35:D4:07:EB:80
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584898D613F069459604F078B940
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f95605ad-a507-300d-bd92-82abf898904c.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.197.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:13:f0:69:45:96:04:f0:78:b9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=78e679c0-0286-4a3f-a7d3-46d5f9c25c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ce:0a:ad:6c:95:39:db:4e:32:ae:7f:f5:5a:
46:84:06:09:96:75:e0:c9:a9:b6:da:98:45:37:e4:
26:38:1c:e9:bc:86:ad:ef:7a:74:44:89:b3:f8:e0:
90:c2:6f:68:ab:90:bd:60:50:8d:e4:54:6b:31:2e:
df:50:84:e5:66:ca:43:26:2e:6a:d9:aa:f5:2f:4a:
92:73:e9:5d:f4:45:c4:03:c5:02:cb:04:a6:cd:2f:
4c:62:73:29:3e:57:8e:f9:03:f2:7f:4a:30:1a:34:
dd:5b:cc:10:a9:9a:88:fa:f3:3f:4a:b8:bb:8a:d0:
02:50:66:29:ac:d2:0d:30:61:19:0e:c4:5d:69:ed:
cf:c0:20:9a:17:04:0e:a5:d4:0c:18:ec:02:f6:fd:
df:35:9a:7b:43:5f:d4:3a:f9:48:58:01:23:66:b1:
a1:fc:6d:5b:61:5b:ec:e2:8f:ef:0d:6d:17:93:ea:
01:fe:67:fc:19:f8:fc:40:c1:1b:32:05:93:c2:14:
9f:04:38:03:de:80:bc:e5:56:47:cb:b1:96:34:24:
78:dc:69:2a:c2:b6:59:a9:9f:ee:4f:38:64:ba:a4:
99:68:7f:bc:96:1b:f0:c0:16:5d:ab:db:cb:8f:89:
e5:42:d1:d1:50:9b:b7:67:3f:63:f3:d8:8c:56:81:
de:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1F:C1:E1:03:BC:E1:45:79:CC:CB:14:E7:D0:F5:35:D4:07:EB:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f95605ad-a507-300d-bd92-82abf898904c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.197.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:7c:88:44:43:dc:88:69:45:7c:c5:7e:9e:c2:4b:a8:ee:a2:
16:25:4e:14:ea:e5:4f:d8:fe:8d:b7:b4:da:cc:dc:5a:64:0b:
9c:59:2e:b8:52:f0:d0:ee:77:d6:cb:37:75:62:70:f2:51:75:
ba:a3:39:e4:f1:ce:fa:a0:99:d7:f4:7e:0c:de:75:07:d7:1b:
f8:8d:60:db:f2:1f:7a:27:a5:c2:84:e7:b3:17:50:d2:32:71:
8d:04:80:22:2e:be:de:b3:80:26:d6:8b:31:b9:9d:25:a3:d6:
d4:5f:37:6d:1b:c3:fe:54:f5:a5:ac:fb:53:8a:ad:ea:57:e1:
34:d3:c6:67:7f:01:1d:83:99:ed:33:34:7e:77:dc:ff:b0:6c:
88:30:de:67:1a:a4:86:34:3a:60:ce:48:96:76:6b:a7:54:a4:
38:99:49:4a:db:35:26:40:ca:6f:87:5c:db:4b:d9:41:14:c8:
33:d8:95:1d:41:09:b5:e4:e6:bf:83:37:a3:3e:84:cf:35:6d:
06:23:0d:e9:b6:2c:33:a1:8a:fc:55:d5:dd:13:f8:a0:d4:19:
a3:88:87:e8:3f:2c:0c:99:e2:df:32:bd:05:77:50:35:9c:d5:
52:4e:a1:6b:b2:22:f1:60:21:e5:2d:94:d6:c8:8e:0e:07:81:
5a:17:53:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:11:58 2025 by rpki-client