Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3719b500-9dd3-3b95-a5c8-ba671be33033.roa
File: 3719b500-9dd3-3b95-a5c8-ba671be33033.roa (raw, json)
Hash identifier: Na7bcoxn89ZHGknDs6za0/fTaSq978E3U+TA5C76cog=
Subject key identifier: 85:87:ED:E4:41:B0:C9:9E:F3:FC:0B:39:7D:DE:C3:E1:D8:4F:03:39
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847DC64C04632E8726B46C29740
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3719b500-9dd3-3b95-a5c8-ba671be33033.roa
Signing time: Wed 13 Nov 2024 02:00:28 +0000
ROA not before: Wed 13 Nov 2024 02:00:28 +0000
ROA not after: Tue 11 Feb 2025 02:00:28 +0000
asID: 16625
IP address blocks: 23.211.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:dc:64:c0:46:32:e8:72:6b:46:c2:97:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 13 02:00:28 2024 GMT
Not After : Feb 11 02:00:28 2025 GMT
Subject: CN=543d21a5-da6e-447b-be89-6f4a23071f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7b:4d:c2:32:a8:7c:ae:56:42:47:3e:1a:38:
93:9e:9d:66:39:d9:57:a5:4b:c4:92:3c:92:17:19:
24:cf:90:22:17:f9:92:8a:85:fb:63:63:09:2b:77:
9d:79:cb:47:94:76:0c:0b:76:5b:11:aa:72:5f:00:
84:3c:74:6c:14:e7:bb:7c:2d:33:59:fc:b7:c0:0a:
17:d2:6d:6d:81:5e:bc:9b:48:40:e6:54:d5:1d:32:
59:e6:6a:ba:eb:25:c1:cc:da:50:1d:b6:5e:8d:27:
1c:f9:65:28:4e:5f:b7:dc:75:22:98:90:9a:fb:89:
5b:55:e4:f8:8d:43:f4:be:0f:ab:83:bd:15:21:97:
73:27:3e:49:8d:a8:08:4d:e0:ba:10:6d:6e:4a:9d:
63:c0:f9:72:f3:d6:f1:af:f3:e4:4d:1c:0e:d8:37:
47:8a:39:9a:85:fd:5a:01:c5:6b:31:50:f5:d1:67:
d4:bc:fe:22:68:af:17:cb:af:23:b6:0b:57:1b:f8:
31:88:37:1c:dd:be:25:00:45:05:c3:f0:4a:51:61:
9c:1b:e9:51:a6:8d:01:0d:95:2f:0e:03:41:40:dd:
be:7b:01:ea:5f:43:87:7d:0c:25:92:f5:7b:52:ca:
0b:00:0f:fe:86:44:c4:4c:85:69:d1:b4:bb:a6:e7:
21:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:87:ED:E4:41:B0:C9:9E:F3:FC:0B:39:7D:DE:C3:E1:D8:4F:03:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3719b500-9dd3-3b95-a5c8-ba671be33033.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.211.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:69:d2:3f:61:39:89:a8:a6:9f:ea:94:08:0d:1f:fd:ba:92:
a2:73:0a:f9:27:ad:55:b8:21:d7:4d:ef:03:2b:b4:b7:96:20:
56:85:5f:83:b0:ba:7c:7d:ef:63:d3:75:9b:14:90:00:d3:35:
13:23:c0:20:2f:2b:1b:af:c0:06:55:9d:62:6a:11:82:4b:77:
79:f9:c1:89:87:18:88:2d:5a:66:fa:11:e5:5e:f6:1a:c9:14:
9a:8d:af:a7:39:14:b2:06:cb:73:6c:86:31:0d:78:e8:f4:36:
e9:f7:99:99:59:45:f2:34:e3:68:5f:86:e7:9e:f5:c9:09:e8:
3e:b8:c7:fe:d0:55:1a:09:61:0d:57:7c:62:53:02:36:84:a1:
42:67:f6:25:86:7e:26:ef:75:fd:d0:c0:b2:b1:06:d5:ac:5e:
1d:06:3e:4b:99:dc:e7:9f:eb:c3:1a:e0:c3:57:35:3a:7f:76:
5f:3b:f2:c7:75:32:ed:ac:a2:7b:fa:e1:ba:a7:2f:8b:9c:05:
3a:ea:46:96:ca:70:36:2c:28:2d:05:ad:6c:0a:48:17:76:0e:
46:b2:79:05:ef:c7:bb:cd:62:38:0f:62:44:0c:41:1c:03:cc:
d0:99:20:c9:eb:0a:7b:3c:01:15:01:31:8b:a1:95:25:1b:0d:
6e:a2:86:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:00:14 2025 by rpki-client