Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20f8b79f-db09-3140-a877-29827483b918.roa
File: 20f8b79f-db09-3140-a877-29827483b918.roa (raw, json)
Hash identifier: 4Vy9bMICCbFHw2tQGuh3Dxqv8DR+lLs2/XbvzWTOp70=
Subject key identifier: 23:40:3E:EB:BD:A1:8D:9C:D9:A7:49:E6:3D:A3:97:BD:3E:67:86:61
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584847E02502B030B273739197C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20f8b79f-db09-3140-a877-29827483b918.roa
Signing time: Sat 21 Dec 2024 14:00:52 +0000
ROA not before: Sat 21 Dec 2024 14:00:52 +0000
ROA not after: Fri 21 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.223.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:47:e0:25:02:b0:30:b2:73:73:91:97:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 21 14:00:52 2024 GMT
Not After : Mar 21 13:00:52 2025 GMT
Subject: CN=e98bf817-38d0-43af-9b28-844be8299d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d5:af:16:1f:5d:96:e2:6b:a9:c9:e1:bb:74:
64:d7:93:b0:c7:53:d9:f3:ef:95:21:d1:17:6e:ee:
1d:5c:82:6d:06:68:fc:26:8d:50:1e:1f:0a:c3:4d:
0c:66:0c:49:58:3a:c8:69:6a:e3:b8:a6:3f:21:89:
16:e5:33:63:c7:75:33:f9:83:e9:7c:8c:2a:42:2b:
9b:20:f0:b4:a5:42:08:ad:1a:94:2e:75:ab:34:86:
4b:a9:40:30:ac:40:ed:02:e2:58:fe:22:24:d6:f7:
a4:17:8d:1c:e2:a5:24:fb:84:c9:5a:20:cd:37:0d:
a8:a1:d1:65:ed:ec:48:ff:a7:f3:1b:04:e2:4d:14:
0a:06:bc:04:11:89:79:cd:1b:95:12:bc:9f:91:5a:
3f:74:92:0e:41:fe:e5:aa:9b:95:5a:30:22:1d:3f:
66:f7:f7:b6:2d:95:de:b7:f3:3a:4a:b6:54:05:fa:
8e:ca:ad:99:5c:e0:d1:38:cd:de:88:c7:94:e4:57:
11:4c:61:1b:0c:bc:b3:08:dc:fd:89:f3:03:f1:6a:
d1:e0:8d:bb:5a:e4:cc:8d:13:24:a7:f9:4f:ae:a3:
17:1b:1c:99:2c:c9:fd:f9:90:8f:b6:54:8f:12:04:
dd:bc:20:1c:34:6c:4b:47:51:b7:ee:d5:e0:58:6c:
e7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:40:3E:EB:BD:A1:8D:9C:D9:A7:49:E6:3D:A3:97:BD:3E:67:86:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20f8b79f-db09-3140-a877-29827483b918.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.223.27.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:eb:d2:3d:e3:5b:ce:2a:b2:fc:1a:b7:97:d5:66:e4:3b:c8:
78:66:38:16:76:66:ee:9c:0e:6b:76:84:6d:01:ab:a6:0d:09:
c8:c2:ac:79:9e:af:ca:85:c7:6a:b4:76:5b:d7:ed:c3:e3:6c:
08:8b:6e:30:7e:05:d1:41:6f:52:02:d0:8a:d5:12:e0:c7:c8:
9a:de:6d:6b:66:49:00:c7:08:a6:dc:ae:29:84:02:c3:0f:f9:
63:ac:ad:2d:34:22:f1:1d:bd:7b:7a:88:0b:62:85:62:fc:82:
0a:51:2b:f6:84:7c:55:b0:76:41:31:1b:b6:78:87:e2:42:2d:
26:a2:15:e3:25:cd:6f:16:c7:c7:bf:40:19:56:12:db:78:2c:
a9:8a:e9:cf:11:f3:6a:29:f3:a5:4a:d0:94:c2:b5:ed:eb:a9:
ed:64:d3:37:3d:55:69:79:e8:5d:6b:39:aa:35:e0:47:05:95:
22:ba:ae:5c:e4:02:af:3e:2f:1b:f4:59:3e:69:61:46:4f:82:
99:f7:5f:f4:97:e2:79:00:81:fe:85:1b:51:55:da:a5:45:01:
49:28:59:3d:a6:cc:a7:90:d2:d7:9d:d9:39:e9:6d:1e:f5:d5:
e2:d7:6b:ae:fe:e9:d5:2d:66:ad:f0:34:6b:30:71:79:0b:1a:
c7:e3:b2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:37:18 2025 by rpki-client