Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57cb0076-5239-325e-af4d-e9e131da6456.roa
File: 57cb0076-5239-325e-af4d-e9e131da6456.roa (raw, json)
Hash identifier: lvSafCMKedRFlDM3449P7i4nMsXzv7lCJlOMBGyfSDo=
Subject key identifier: 51:58:A8:4B:0B:D6:1A:7F:95:15:94:EA:79:32:18:A8:AF:88:B3:6D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A830B81CEC201ECE8089D600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57cb0076-5239-325e-af4d-e9e131da6456.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.200.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:b8:1c:ec:20:1e:ce:80:89:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=b756e19b-2317-4b25-ba35-716fd40159bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b5:0a:9a:dd:82:7e:de:34:03:61:59:86:1d:
83:3d:2a:55:c3:ad:ee:06:22:83:f3:9e:11:f4:16:
7d:8e:52:db:4d:32:c9:b7:ac:c9:09:27:3d:f1:81:
0f:a4:c9:3e:b2:61:17:42:fa:a1:a5:5d:29:45:54:
ec:d8:4a:85:12:16:7a:06:9e:c1:ee:b5:7f:4c:14:
2d:9b:e1:d8:7f:28:8f:09:69:21:05:d9:5c:8b:76:
48:45:6c:cc:36:53:84:f5:b2:17:7f:44:e6:fa:99:
60:92:15:6d:cf:25:1b:be:38:99:5e:4e:68:60:81:
11:92:3f:f5:ff:b1:d4:eb:cf:f5:50:51:56:2a:5a:
d7:6d:2a:1e:80:57:33:ed:c1:ad:51:2a:22:99:7a:
1d:6c:37:3e:59:1e:98:1c:19:97:44:98:9b:26:28:
3a:8a:9d:54:d3:d8:dc:a1:1b:d0:b4:34:91:15:04:
49:9a:44:5f:12:aa:26:e9:e6:56:f8:14:f7:9d:01:
53:d6:7d:5f:6e:a0:05:6a:1b:f2:40:d3:0a:9f:77:
2e:ff:36:b7:a2:1b:6c:60:06:98:a7:c2:6d:06:4f:
a9:d4:12:b0:df:a8:2b:7c:ff:d7:13:1e:d4:65:9b:
68:6c:0b:fc:ec:8a:32:e1:20:cf:8b:4e:31:90:4a:
68:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:58:A8:4B:0B:D6:1A:7F:95:15:94:EA:79:32:18:A8:AF:88:B3:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57cb0076-5239-325e-af4d-e9e131da6456.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.200.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:ff:bb:38:32:67:e5:f0:d6:c6:28:0d:c1:5d:e7:79:1a:a9:
85:14:f5:21:e6:9a:48:03:5c:2c:ff:d5:2b:e0:2e:43:02:cd:
3d:f9:ee:12:d0:4d:3b:c6:d2:99:d7:79:be:d5:c2:cc:50:59:
fc:48:f8:68:53:66:b9:2b:30:9d:97:a6:47:d6:e2:33:81:e1:
b9:8f:88:07:72:3f:c8:c0:34:35:74:e6:d3:89:bd:1b:53:6a:
a9:64:aa:f1:93:40:17:85:2d:66:a7:1e:f4:b8:13:c3:ed:38:
97:af:a1:8b:74:85:f3:8b:c3:18:f3:23:c1:1a:14:22:53:2e:
b9:29:a3:bc:3e:8d:bc:6d:34:4d:34:43:b7:e5:ce:92:94:20:
55:8b:27:7c:9e:b5:0a:57:67:bb:32:61:f8:59:6c:9d:10:ac:
66:d0:24:67:fe:a7:d2:84:e2:72:22:d0:c8:3f:4e:8d:10:14:
38:08:e2:a7:11:cc:c3:08:bb:21:42:0f:9c:ad:d1:28:6a:f7:
74:55:6e:4e:e6:de:fd:a8:08:01:3b:1a:56:60:86:3e:42:76:
e3:3b:fc:a1:03:f1:46:53:9d:49:b8:5b:fb:1e:d1:e7:af:70:
fd:f4:ec:f0:74:f1:31:d0:c2:18:47:5c:d4:73:06:69:30:5a:
e9:51:17:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:58:54 2025 by rpki-client