Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/02fbfaa9-bcaa-3147-b8aa-d68fc6198387.roa
File: 02fbfaa9-bcaa-3147-b8aa-d68fc6198387.roa (raw, json)
Hash identifier: HQuBXjgyMQFC4jl7izcqkvvhbiFT+YuIm7p78TF2JqU=
Subject key identifier: B8:02:A9:A5:CB:36:7F:1F:D5:53:07:F7:48:3E:F6:9A:16:E9:41:46
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487FB5F02F28187C3EE6319580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/02fbfaa9-bcaa-3147-b8aa-d68fc6198387.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.48.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:f0:2f:28:18:7c:3e:e6:31:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=e293a687-a58f-4ed8-bd15-3b380ba6d2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f5:f2:60:d0:88:dc:63:1a:24:2b:91:5c:84:
8d:d3:d3:d0:14:4a:7d:6d:58:13:b5:e1:4f:5e:ab:
b9:5d:bc:18:65:16:36:f5:cc:4a:a2:f2:73:5e:29:
4c:c8:7e:ce:4b:38:ba:9d:ba:b3:ec:b2:a1:df:12:
18:c8:a0:03:42:e8:af:58:06:64:66:69:0b:b0:69:
c6:01:25:19:e0:75:30:73:ac:db:7b:48:10:98:7c:
4e:5d:23:cd:f7:14:d7:07:a4:86:a3:c7:c8:5a:64:
45:1d:ae:66:44:ef:d5:06:bc:50:42:97:a2:cd:ed:
f5:b6:13:e7:53:b3:74:80:6d:e4:4a:6e:02:fa:5a:
55:4e:72:01:5d:86:85:d5:54:10:db:0f:48:9d:9b:
ad:00:72:5c:3f:b8:7e:63:eb:24:94:d1:69:1b:a6:
ec:58:82:2f:15:5f:2c:b2:4b:d8:e3:99:d3:3f:ce:
8d:f9:89:7d:4a:79:05:c5:fd:69:28:b8:c1:86:76:
de:6c:69:80:40:c3:95:5b:2a:03:b5:24:52:ee:c8:
05:f2:86:dc:54:aa:86:ae:69:a1:d0:e8:f5:5e:9d:
97:c3:f5:aa:cc:b2:d8:b1:db:6b:99:d5:e8:ce:33:
78:d4:9a:99:bb:73:1e:5d:a1:3a:b4:5e:94:b1:5f:
05:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:02:A9:A5:CB:36:7F:1F:D5:53:07:F7:48:3E:F6:9A:16:E9:41:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/02fbfaa9-bcaa-3147-b8aa-d68fc6198387.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.48.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:b6:61:3c:fc:db:b3:db:23:14:7d:65:5e:25:58:f5:91:57:
e2:91:4d:ec:8c:eb:cb:6f:d9:2f:d3:6f:03:26:30:e5:42:4a:
db:31:ad:c9:49:ed:bd:88:18:62:2d:2e:b7:57:9a:e2:48:a6:
12:3a:b7:a7:13:29:33:f1:c3:4f:88:a6:12:65:b8:f8:e2:18:
2e:39:a7:62:83:8e:fc:f0:28:04:72:0d:05:26:0e:b3:24:7a:
a9:67:f4:fa:45:0c:94:4f:91:ae:87:44:14:58:b4:18:28:5c:
01:84:80:fe:5f:92:e0:08:ef:e4:f6:63:e3:0c:48:9c:40:eb:
68:15:b4:20:1c:05:b4:33:61:ca:3c:c0:d8:8b:14:3e:ea:59:
ba:b6:54:54:89:e4:8f:94:5e:9a:f4:93:11:06:a8:df:72:2f:
f1:88:b9:ad:bd:20:27:07:cf:70:1d:09:07:07:1f:ea:34:a2:
b8:81:d7:e8:b4:0c:b7:e9:a2:b0:56:1b:d4:e0:16:60:89:29:
a0:26:de:95:cd:fb:ba:14:46:4b:28:33:3e:cc:ff:3e:68:28:
e8:f4:e8:a8:c4:63:91:70:81:bd:21:43:19:3f:72:d6:e8:50:
2b:76:53:60:a5:ec:ee:ec:b7:40:2d:bc:9a:b4:f7:9a:67:67:
9e:df:1a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:38:08 2025 by rpki-client