Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e8d728e-fe4f-3df3-9550-bf212aa16dc5.roa
File: 1e8d728e-fe4f-3df3-9550-bf212aa16dc5.roa (raw, json)
Hash identifier: bepoHYhAehissXb72xxdNscUzjXX6Q0m2MI4Zhs1LGw=
Subject key identifier: E1:2D:AE:B6:20:49:43:44:47:EC:8B:48:E6:07:A6:13:66:A2:3E:78
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848811B17AB4CDAAF9E2662EA80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e8d728e-fe4f-3df3-9550-bf212aa16dc5.roa
Signing time: Sat 11 Jan 2025 02:00:39 +0000
ROA not before: Sat 11 Jan 2025 02:00:39 +0000
ROA not after: Fri 11 Apr 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.49.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:81:1b:17:ab:4c:da:af:9e:26:62:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 11 02:00:39 2025 GMT
Not After : Apr 11 01:00:39 2025 GMT
Subject: CN=8f5d4729-3df6-4c63-bee0-ce28e9bad162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:77:88:99:6f:92:f5:07:3d:a2:4c:27:8b:ca:
96:70:59:7a:7a:a6:f3:a6:8a:c0:cd:76:f2:89:af:
1d:40:c1:9e:58:0c:79:65:9d:70:58:ea:10:7a:21:
57:a8:be:34:d8:30:55:45:08:4f:08:8d:7c:49:30:
c2:14:65:b6:89:12:b0:c6:19:65:1e:69:b8:04:61:
76:3b:2d:8b:d0:f0:f3:05:e5:da:77:49:e0:55:cc:
ad:01:66:b1:46:7b:c1:1d:e0:74:7e:f5:da:6b:a5:
1c:c1:04:cf:d1:6e:09:61:b2:35:37:71:38:a8:bd:
d6:cc:a4:ef:04:8d:1b:08:75:96:41:df:da:95:be:
31:df:17:4f:9a:02:2d:c3:3a:f4:6a:f7:24:9c:c6:
b7:ce:74:da:28:0d:6e:65:55:45:db:cf:7c:f0:63:
2a:eb:76:66:a2:4a:d0:fd:40:76:e4:d5:03:75:94:
16:8d:9b:1e:8d:c0:b6:47:8a:24:ee:64:3d:09:58:
ea:7d:8a:db:77:53:4f:20:38:fc:f9:fe:f1:28:5d:
b1:d0:ce:c9:2d:24:7c:21:e5:89:c6:21:31:19:dd:
93:21:c0:22:d2:6a:71:fe:ec:da:e5:a0:93:a6:88:
34:2e:55:ee:3c:17:3c:7e:05:4a:e6:87:37:d3:fb:
ec:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2D:AE:B6:20:49:43:44:47:EC:8B:48:E6:07:A6:13:66:A2:3E:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e8d728e-fe4f-3df3-9550-bf212aa16dc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.49.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:ab:32:d1:f6:c7:0f:45:5f:9c:0f:b0:ab:dc:23:a1:98:84:
6f:43:ba:44:e8:26:87:b0:6e:0c:12:6b:00:10:12:93:f4:a5:
3b:1f:ee:e7:48:84:03:7d:fb:18:30:5c:75:f8:65:e3:fc:8e:
bc:6e:81:a5:97:16:48:bf:67:ea:47:a8:e3:c3:ca:18:27:55:
a2:8a:92:2b:64:dd:bd:4d:53:36:ae:29:0d:59:c0:e1:58:42:
85:39:54:61:f8:fb:c6:c6:83:9a:bb:7e:9e:d4:64:2e:2c:58:
e7:31:3d:88:1e:4f:ae:2e:87:3d:56:2e:c2:c3:10:ca:de:d6:
9b:c7:18:00:52:7f:02:50:cd:47:44:a9:c4:73:9a:a8:88:f8:
f5:52:e0:d4:d5:e3:91:be:52:77:c1:3c:1d:82:87:ac:91:47:
9e:f2:19:a7:7c:6d:c4:72:97:0e:5a:67:80:84:3b:4b:0f:aa:
db:a8:1c:83:fe:18:46:0c:21:70:fe:80:58:3c:5d:4f:ad:a4:
46:6a:53:16:46:55:15:da:19:3a:76:22:17:d9:9e:a1:7e:44:
17:5a:b1:ee:6c:71:c8:ee:6d:1d:21:ed:e8:c8:26:11:44:ed:
9f:d4:d1:f1:13:14:a3:10:2a:de:65:b1:98:37:fe:1d:d7:ad:
e4:51:e8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 00:03:17 2025 by rpki-client