Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d414188-f194-3925-8d20-32454912f5ec.roa
File: 4d414188-f194-3925-8d20-32454912f5ec.roa (raw, json)
Hash identifier: EkXfvEv2sU6GiR8aXzBPUztBMcqKQYKOKJ4EPrUv1gU=
Subject key identifier: 15:0A:01:EC:21:E6:24:4F:65:4F:E0:8F:DD:46:D3:ED:1F:89:84:0F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584845159D300F856D001603AC80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d414188-f194-3925-8d20-32454912f5ec.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 2860
IP address blocks: 23.1.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:9d:30:0f:85:6d:00:16:03:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=92c92f6d-b3f1-4003-bc67-2929191be5c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5f:63:5c:60:d9:41:bb:29:03:fa:8e:af:95:
9f:e3:0d:1e:f9:73:6a:64:d2:f7:cd:82:08:4b:fe:
78:bc:ea:76:ef:b0:2a:4e:1f:71:5c:0b:12:8b:23:
83:05:66:79:dd:fd:84:e4:6a:47:01:87:05:d9:ca:
a6:28:60:7a:e4:d2:86:43:95:bd:20:6c:85:bf:c0:
ed:39:63:8c:5a:6f:d3:f7:46:cb:74:af:99:ff:23:
55:23:16:10:e2:ca:7c:31:ae:e0:11:a2:79:5d:f6:
db:fe:e5:12:a0:0d:d7:42:cf:73:55:cb:ea:91:b1:
e1:f4:54:d9:83:85:1d:01:27:01:3c:b1:f9:9b:52:
6e:03:3d:53:6b:4f:1e:74:a0:b0:69:60:e5:82:d5:
1c:14:85:fe:96:16:e6:6f:35:e9:d4:47:62:b2:ec:
d0:f2:aa:40:25:ea:eb:e6:e0:87:4d:bc:c8:99:8e:
88:5a:8c:53:f0:96:61:5c:d5:70:9f:fb:cb:2c:0e:
bc:70:ac:f9:5c:cf:f0:1e:ff:4a:24:9d:c2:2d:4c:
d0:70:c9:a1:20:b7:b8:b4:a0:8d:a1:ea:3a:65:a5:
29:8f:1d:90:74:d2:38:bf:1f:d2:ac:12:27:da:6e:
9c:b8:c2:d5:03:70:4c:5d:de:30:37:b0:33:cb:51:
60:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0A:01:EC:21:E6:24:4F:65:4F:E0:8F:DD:46:D3:ED:1F:89:84:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d414188-f194-3925-8d20-32454912f5ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.1.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:d8:7f:32:a2:89:53:cb:5b:f3:92:49:e7:0e:0e:7c:5d:b5:
e2:2a:5e:ff:59:34:f0:5f:2c:01:d4:14:eb:0c:44:4b:83:d3:
b3:e4:74:1a:a2:38:36:81:0b:59:ff:5d:1b:01:57:87:51:16:
91:5d:8d:14:22:65:fe:f2:39:37:ec:77:6d:25:15:64:99:6f:
d2:1a:e3:79:9a:b5:5d:49:9d:4e:c1:66:46:d0:d0:21:af:01:
a4:5c:a3:74:fe:26:a5:4f:88:49:06:8a:4c:16:89:8f:a2:42:
fc:0d:c6:80:56:be:ce:56:de:de:cc:99:69:38:59:7a:24:19:
5f:90:77:ec:11:e5:85:2c:a5:37:82:ef:15:45:df:ae:1e:7b:
3f:a0:21:3d:db:30:c1:da:2b:08:dd:5f:81:5b:f1:ad:69:20:
28:a6:f6:17:b7:68:73:0a:f7:05:d2:aa:ac:75:4c:9c:24:3d:
d7:b6:b4:60:c9:6c:dc:78:bc:fe:42:62:99:56:81:c0:06:87:
db:69:7f:18:6b:6b:cd:5e:5f:3e:bc:a6:a2:86:ec:c9:d4:3c:
9c:5a:82:6b:b6:b3:f4:28:8b:f0:e4:8b:30:73:d4:aa:96:59:
bb:56:b2:b9:19:47:a7:c0:40:2b:09:87:ad:1a:ba:d1:21:cb:
89:c9:6e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:00:32 2025 by rpki-client