Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ccdc472-a688-30e8-8f8b-a5cf08be2a5f.roa
File: 0ccdc472-a688-30e8-8f8b-a5cf08be2a5f.roa (raw, json)
Hash identifier: dAW3DDggJJM7h871hXLA6Yg8//EshNwov5dVk4z94sM=
Subject key identifier: 15:26:C3:8C:13:2B:6A:47:1F:26:89:2E:69:07:5F:E5:0D:88:76:67
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584845159A5D76A727667A0FED80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ccdc472-a688-30e8-8f8b-a5cf08be2a5f.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.12.160.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:9a:5d:76:a7:27:66:7a:0f:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=e196ea9d-c2ff-4b9a-a558-fd7068760dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4c:0f:4e:f9:5a:51:c4:f3:ce:cb:ec:6a:3a:
41:ea:f4:13:69:31:d7:80:59:19:55:5f:74:f4:97:
da:06:b8:da:a0:19:30:81:40:3f:d5:5f:66:6c:2b:
9c:94:71:6a:2e:38:6e:b7:f2:f3:13:3e:42:44:84:
9d:38:b9:ee:c6:7b:28:c7:0a:ca:59:0f:83:3b:60:
c7:69:89:4c:54:48:c8:a4:99:28:c3:42:10:fe:e6:
67:92:70:d1:03:fd:0a:9b:d9:0e:90:0a:85:8b:e4:
b3:2d:e9:96:c8:d6:8e:37:dd:11:43:08:30:1b:26:
97:dc:86:09:e4:b4:2e:92:82:39:79:15:29:97:f3:
55:1e:cf:d7:dc:11:e6:23:14:00:0e:51:9c:60:8b:
1f:be:d0:f4:5d:74:1e:4d:42:07:27:0f:68:59:ee:
21:eb:ee:01:46:e2:02:85:45:65:46:d0:ce:31:e7:
b8:0e:11:13:a8:55:fe:a7:07:71:d5:b8:bb:54:aa:
b8:ba:f6:ab:2d:81:07:53:ca:b8:e5:25:98:81:c6:
04:31:b6:b2:bb:65:a7:bc:ed:af:7e:f5:a9:83:ae:
e8:b7:e2:42:5b:7e:8a:ae:73:07:d0:eb:61:85:40:
ae:4b:5b:4a:0f:06:8d:03:c9:cd:2c:c6:59:66:50:
34:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:26:C3:8C:13:2B:6A:47:1F:26:89:2E:69:07:5F:E5:0D:88:76:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ccdc472-a688-30e8-8f8b-a5cf08be2a5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.12.160.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:06:4e:3c:7f:b7:2f:7a:82:00:16:c6:27:00:dd:b3:57:5d:
85:83:27:93:3d:84:ef:1c:58:a1:a0:3d:73:ec:4a:b7:53:b6:
4d:ae:ea:a1:23:80:6a:cf:7c:66:41:f5:f3:21:90:d1:c8:3b:
f9:31:b5:1e:b1:93:e7:d4:5e:21:79:4b:db:b1:af:83:0a:11:
fd:95:a2:27:3c:ce:33:b8:20:bf:1c:90:ed:84:90:d8:db:57:
69:44:7f:e8:9a:77:ed:6a:0d:cf:2b:0b:bb:4f:3e:9d:3f:73:
f9:ca:5c:91:c9:9c:a3:0e:df:17:bc:21:74:b0:31:54:e2:fd:
f7:b5:22:97:7f:66:d6:be:fe:24:09:1c:89:4f:10:88:1e:1f:
28:0d:8e:70:16:38:50:47:83:7d:4c:80:36:34:bb:d5:e8:d1:
4c:a6:03:19:6d:92:48:d0:d0:19:95:27:b0:ba:d4:55:f2:fa:
75:a8:8b:eb:a6:d2:c3:47:a6:d0:8e:8c:ae:09:c5:9b:d8:b4:
5e:a8:c3:91:f8:e2:a4:83:d5:7f:60:b0:df:d4:8e:0e:e2:3a:
af:23:81:38:81:1e:04:bc:17:a1:02:c3:ba:67:66:55:d0:34:
5c:be:7a:bc:8c:f4:4b:84:d6:67:9f:e2:20:eb:a0:e1:5b:3d:
80:10:a5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:36:53 2025 by rpki-client