Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20430a29-aabc-338d-82f9-fe055cf5c9f6.roa
File: 20430a29-aabc-338d-82f9-fe055cf5c9f6.roa (raw, json)
Hash identifier: blPd37bPz3Vf6ce50cPbRqvh+Htx9ylSMM/A9kWS2HQ=
Subject key identifier: 3E:8E:E4:48:94:91:A4:EF:8A:B9:7C:D6:D0:87:94:84:BB:71:B2:DF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847EA5A083A146C52E4DAB83BC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20430a29-aabc-338d-82f9-fe055cf5c9f6.roa
Signing time: Mon 18 Nov 2024 02:00:27 +0000
ROA not before: Mon 18 Nov 2024 02:00:27 +0000
ROA not after: Sun 16 Feb 2025 02:00:27 +0000
asID: 16625
IP address blocks: 23.218.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ea:5a:08:3a:14:6c:52:e4:da:b8:3b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 18 02:00:27 2024 GMT
Not After : Feb 16 02:00:27 2025 GMT
Subject: CN=f7009337-b49a-44d1-be43-df34d4e2d03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9c:86:4f:17:7c:5d:fc:9a:e3:b0:45:b1:74:
fa:24:68:4a:dc:c5:88:85:72:0e:b5:5d:24:46:21:
79:4b:2a:2c:c8:d1:b4:c6:0b:9b:e3:94:46:a8:17:
52:66:ae:6e:76:5e:d7:61:d4:1b:e5:dd:1b:a0:f9:
04:8e:62:b3:e5:ee:a5:c4:6e:84:bb:4c:6e:4f:25:
dd:47:81:10:c9:e2:5e:fa:cf:ab:5c:fd:c2:1b:a5:
ef:92:f8:6f:e7:2f:4d:55:a8:f0:cd:49:0c:a8:6d:
43:f1:af:da:6e:45:96:c3:a7:03:71:a4:dc:b9:80:
17:5a:55:35:53:56:48:38:7d:5e:c0:27:ca:76:7d:
e0:72:69:2c:07:1a:ea:f3:2a:f3:2a:7b:97:d5:3b:
14:db:2b:c8:a2:ff:9f:fe:ab:fa:51:40:fb:c9:d2:
00:40:90:58:9a:6f:84:90:9e:af:ae:61:27:bc:28:
bc:95:48:5a:51:86:40:6c:81:60:b9:53:d6:a8:04:
a1:3c:56:81:6a:a0:5a:f0:fa:fc:47:44:db:c3:1c:
7b:3a:70:11:c8:db:3f:02:1f:5f:0c:bb:8b:04:83:
55:7a:f1:22:bf:7f:1a:e9:8a:0d:a3:6c:f7:03:1c:
ba:6e:9b:6d:57:27:e1:a8:03:e5:85:f2:a2:39:5b:
89:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8E:E4:48:94:91:A4:EF:8A:B9:7C:D6:D0:87:94:84:BB:71:B2:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20430a29-aabc-338d-82f9-fe055cf5c9f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.218.244.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:d6:a2:8a:33:04:03:0d:8c:57:aa:00:37:db:33:ae:c7:6f:
32:13:13:5e:e1:1b:f7:b6:72:b9:fe:f1:60:87:1e:2f:1b:ab:
1e:48:d4:22:ef:b4:c3:0a:24:3e:6e:11:fa:6a:60:66:8a:67:
57:67:91:b0:79:f7:4c:11:2f:f1:b9:c9:41:d9:ed:60:e8:ec:
0c:42:1c:78:5c:41:f7:c1:2f:d2:c6:41:7c:3a:57:ce:fb:d2:
1b:38:b7:13:59:e5:1a:52:b8:16:1c:b6:b7:21:9e:b0:90:8a:
0d:b0:af:ed:88:02:65:a3:a4:a9:01:98:5a:f8:39:79:8c:ff:
33:70:c6:91:16:d4:d3:c5:7d:a3:5a:51:99:47:8c:4a:c0:55:
1e:3f:15:fe:d2:5a:fe:db:ee:17:ee:e6:03:a6:60:8e:30:94:
23:40:55:6b:9c:d4:6e:fc:2b:36:e3:38:5c:2b:f2:e8:b6:53:
bf:9c:54:6e:f9:12:7f:9f:7c:c9:03:0e:18:af:d1:16:98:4b:
e7:b9:e1:ea:94:f1:47:fb:f3:2d:29:98:69:ca:31:99:3f:7f:
9c:a7:08:4e:ff:eb:8f:62:44:68:af:15:ac:6e:20:99:e8:31:
d6:45:b6:c6:03:61:45:de:01:3d:bf:21:25:e3:92:ec:95:b3:
71:c8:23:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:00:24 2025 by rpki-client