Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/422c03f2-7f46-3ee5-ad74-8dee7c42949f.roa
File: 422c03f2-7f46-3ee5-ad74-8dee7c42949f.roa (raw, json)
Hash identifier: y2ZUiTcDtIcPO7+CjLXfvcTTtgPffOrEAE6PNaY8gVM=
Subject key identifier: CE:7A:8F:38:94:B1:8A:EF:60:04:96:5B:0B:C7:85:25:F5:59:4C:7D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847DC64C0C2E6291C47F8D2D180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/422c03f2-7f46-3ee5-ad74-8dee7c42949f.roa
Signing time: Wed 13 Nov 2024 02:00:28 +0000
ROA not before: Wed 13 Nov 2024 02:00:28 +0000
ROA not after: Tue 11 Feb 2025 02:00:28 +0000
asID: 16625
IP address blocks: 23.211.152.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:dc:64:c0:c2:e6:29:1c:47:f8:d2:d1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 13 02:00:28 2024 GMT
Not After : Feb 11 02:00:28 2025 GMT
Subject: CN=43f649b6-50ee-4797-9350-2d5774fde626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:61:dd:69:4e:fe:3b:68:c5:da:cf:fe:d0:fd:
94:e0:b0:d3:bc:04:ad:bd:78:e8:97:43:17:66:02:
75:2b:69:4d:70:9b:e2:13:98:a9:9b:4d:34:89:95:
e3:b5:d6:53:f3:4d:5c:02:f8:c4:9b:63:f5:a0:97:
89:e4:8e:bc:dc:5b:5b:96:7a:53:b4:a4:57:15:e9:
69:bf:ee:e4:cd:ca:80:c0:19:71:18:40:81:b1:75:
4c:1b:55:a1:58:c7:3d:9c:46:2f:91:be:24:88:78:
40:0a:19:ea:7f:91:78:92:49:0d:c5:9a:84:01:6e:
69:1e:b1:a1:6a:a1:a2:e6:d3:b0:6f:86:c3:eb:56:
1c:68:c5:b4:31:84:11:11:bb:38:89:9e:ac:5f:df:
f9:7e:68:cd:b0:8e:07:64:a7:97:4d:63:9f:48:6e:
52:46:fb:0f:2d:57:14:25:0e:e7:98:78:cc:a6:75:
ed:1c:41:2f:e2:ec:3b:68:a6:35:71:82:51:5f:f3:
8d:28:af:4d:a2:f8:d7:37:7a:e5:be:7d:58:4e:b1:
ab:ab:30:ae:03:fa:00:57:7c:c1:b6:05:bf:d5:3c:
4e:8b:56:f0:fa:c7:c7:18:35:61:ce:8f:2a:24:ab:
a8:ef:18:92:47:de:4f:d0:a6:f6:90:45:dc:8e:48:
c1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7A:8F:38:94:B1:8A:EF:60:04:96:5B:0B:C7:85:25:F5:59:4C:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/422c03f2-7f46-3ee5-ad74-8dee7c42949f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.211.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:e6:bb:20:6b:ae:ec:07:a6:59:23:cf:77:bd:81:22:bb:7b:
c4:1c:de:c2:01:35:c6:6d:2d:07:16:af:9b:15:55:b7:ec:ce:
cf:fe:7e:94:f6:67:66:20:e2:72:3b:8d:2a:93:0e:29:42:89:
a6:5b:9d:cf:b5:e2:d6:f9:ca:dc:05:d1:a1:0d:de:e5:7c:95:
af:0b:28:90:73:12:d2:9b:66:a2:9b:6d:18:40:1a:13:ef:be:
49:d0:89:f0:81:fe:37:b7:73:4c:fe:e9:1b:7d:00:59:f8:70:
19:75:f9:ef:fd:67:37:08:60:28:3f:d1:95:63:0c:4f:2d:a9:
74:f2:8a:4f:4a:26:bd:a6:37:85:9e:7c:37:20:8a:63:e2:07:
39:ea:41:e8:c5:df:7b:13:90:85:b2:dc:22:bb:4a:c9:9f:41:
3b:5d:31:4f:cd:a5:19:5b:d8:ac:9f:a7:98:68:e9:5c:14:f2:
5c:7c:73:bf:ee:c0:19:95:46:0c:16:31:f9:6a:fa:fc:16:aa:
b9:e2:a8:fd:9b:fd:59:21:11:f1:9e:94:62:a5:5a:b1:25:ac:
65:fb:e0:8a:70:22:c3:64:41:3b:c9:8c:02:b5:05:c9:4b:37:
37:df:1e:ab:46:35:e0:c7:b9:c2:78:af:95:cd:af:e6:75:14:
1c:09:c0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:45:37 2025 by rpki-client