Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/215471b5-2100-3f40-ae75-911f05bd076e.roa
File: 215471b5-2100-3f40-ae75-911f05bd076e.roa (raw, json)
Hash identifier: kWmI+Ijs3Kn6UdJIekONtp+9QTZCzu2vl1MQu6EYwyQ=
Subject key identifier: 15:3B:54:74:92:1D:08:53:DC:E7:98:04:8B:44:91:9E:34:59:A3:60
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848451599992F556327AC23C190
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/215471b5-2100-3f40-ae75-911f05bd076e.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.10.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:99:99:2f:55:63:27:ac:23:c1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=b2a2e4fc-d6d1-4a74-b2f9-bd58b8d39f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:63:45:41:6a:61:a5:cf:db:f6:ec:c9:e6:0d:
1f:e3:18:0e:7c:3f:32:3e:b6:93:bc:a2:7c:b3:de:
de:4c:5e:21:32:b7:95:ab:86:a7:51:3a:bc:e0:65:
0d:91:89:03:d5:fa:bd:e6:67:13:2a:03:e3:88:f2:
09:91:d0:f7:ec:89:a9:ba:15:23:a6:e8:92:3f:18:
ee:e7:26:66:5b:04:15:8d:bc:a0:03:a7:10:77:a7:
90:fb:39:43:18:ae:58:43:2e:02:c8:4e:8c:a7:34:
39:1e:96:82:fd:3c:71:30:1d:f0:9b:c9:af:66:1a:
d5:55:e2:65:05:5c:c4:f3:e0:e8:d8:1a:87:5d:cb:
2c:5d:cd:22:f0:4e:f2:90:aa:46:cc:c0:e7:64:a2:
d1:46:e3:23:78:9d:96:d3:32:cd:e3:5d:b2:4a:5b:
0d:f9:0d:6a:fb:02:7b:1a:f7:cf:51:11:76:82:60:
04:60:2a:6c:fb:f3:10:4a:30:a6:1c:87:ac:00:80:
ea:6f:a2:9e:89:05:95:7e:d4:c1:36:8e:6a:35:21:
9a:74:77:32:e8:83:66:aa:96:c3:fa:52:e9:55:97:
73:af:d8:7e:05:9c:fc:8a:9f:fe:38:54:00:7b:38:
d2:48:96:a9:84:26:0b:95:26:d0:61:4c:3b:f1:89:
48:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3B:54:74:92:1D:08:53:DC:E7:98:04:8B:44:91:9E:34:59:A3:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/215471b5-2100-3f40-ae75-911f05bd076e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.10.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:26:0f:c0:d1:37:81:68:b6:0a:17:d6:7e:ad:f1:e9:48:4e:
22:bd:03:6a:4b:cc:46:9c:cb:8c:29:1a:9e:ec:6e:54:b8:b0:
0d:3d:71:11:82:f7:9a:b2:69:75:88:76:c7:94:bb:7f:6a:ca:
2a:71:3b:d4:19:35:0a:78:31:d4:bc:45:f0:e4:6c:fe:5e:e5:
32:e7:07:4d:4a:3a:58:c4:d6:67:7d:73:a6:7f:02:9e:12:2d:
16:e4:5c:fe:b1:04:de:aa:df:fd:2a:cd:91:31:5f:ad:83:3f:
1e:54:dc:f9:30:12:50:8c:92:29:1b:e8:2c:a7:3c:49:df:4f:
4d:11:11:67:95:3b:e3:2f:b6:b1:20:d4:a9:c7:d4:7a:fd:1b:
35:04:c1:8b:ed:72:9b:fa:bd:96:81:98:58:56:18:5d:24:31:
40:85:4f:59:43:c4:86:e8:61:b1:6b:02:da:48:50:ab:ce:94:
78:42:90:86:76:4d:27:35:b0:ec:2d:a4:01:86:06:86:79:24:
22:00:25:52:a1:bf:bd:3b:bf:04:47:c6:1a:09:1e:67:a0:c4:
3b:09:33:63:55:b8:0a:f1:b7:df:de:90:61:09:94:d7:c0:97:
7d:5e:27:3a:75:51:d1:84:8e:d2:42:39:67:a9:41:bf:d8:35:
82:e9:05:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:48:47 2025 by rpki-client