Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59b08ab3-4c8b-3652-a423-c978f3120413.roa
File: 59b08ab3-4c8b-3652-a423-c978f3120413.roa (raw, json)
Hash identifier: Cj+5HVTm1DWuan9j5/ldyLpADjcXMfWXcQnttIRulb8=
Subject key identifier: 8C:12:18:F2:DE:E3:D8:3C:EE:88:8C:6D:AC:72:DC:9B:6E:65:66:2C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858483F2991A3983EEA5387543A80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59b08ab3-4c8b-3652-a423-c978f3120413.roa
Signing time: Wed 18 Dec 2024 11:06:34 +0000
ROA not before: Wed 18 Dec 2024 11:06:34 +0000
ROA not after: Tue 18 Mar 2025 10:06:34 +0000
asID: 16625
IP address blocks: 23.222.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:29:91:a3:98:3e:ea:53:87:54:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 18 11:06:34 2024 GMT
Not After : Mar 18 10:06:34 2025 GMT
Subject: CN=4272e268-38ed-4b0c-8d23-46a0dc72e21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c6:57:14:aa:71:7b:b7:4f:93:f2:d3:95:7f:
f8:ed:31:87:dc:82:c1:fd:1a:fd:8b:a3:07:c7:2c:
46:51:c4:b5:a9:8e:f6:29:e7:73:22:52:57:02:6c:
db:29:c2:2a:0a:bd:3e:36:19:64:8a:4a:13:55:86:
9f:db:a7:a5:2b:ed:91:34:63:5d:bf:af:b8:8f:1b:
2a:6e:c6:40:0c:42:bf:aa:4e:33:f4:90:a2:19:77:
15:db:9e:22:e6:5e:67:c8:c3:1b:d2:a4:e3:33:21:
0b:1c:99:48:ab:96:bd:91:19:75:e9:41:9b:b7:92:
91:f6:fa:17:8f:83:04:00:84:8a:e7:d5:e8:fe:96:
f8:aa:95:f8:09:10:6b:52:86:bc:51:f8:5e:25:f1:
ff:84:9d:2e:ca:2d:b9:c4:25:04:2d:ca:49:ac:a2:
9e:88:0e:50:32:90:dd:67:b1:1b:01:70:48:7e:2a:
2e:a1:d1:86:cf:9c:45:d5:31:26:ed:dc:b6:f0:6b:
84:ee:ce:20:c8:36:69:67:44:01:5d:7e:46:e7:b2:
7d:3f:ac:c6:01:35:ce:22:7d:26:8f:d6:df:f0:c0:
70:5c:02:97:f4:d6:6c:56:89:f3:35:d1:8f:39:b1:
f3:40:a7:1e:5a:7c:2a:bf:95:48:f8:3b:a7:bf:ae:
b7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:12:18:F2:DE:E3:D8:3C:EE:88:8C:6D:AC:72:DC:9B:6E:65:66:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59b08ab3-4c8b-3652-a423-c978f3120413.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.222.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:69:ce:a1:4b:f7:ce:2a:77:b8:68:1f:d4:54:90:f3:d2:70:
66:0f:50:f1:26:38:a2:82:36:52:11:d3:90:0c:ea:7a:eb:b7:
39:7d:53:66:0b:24:03:b3:67:d2:12:3b:5a:2e:fb:19:7c:45:
a3:84:05:9d:7b:e8:b7:1c:38:e2:d4:5b:32:b9:3f:75:a7:94:
1e:ba:1a:81:5f:46:9b:09:5c:92:99:d6:d5:e5:5e:43:21:4e:
87:1e:cb:29:fb:75:13:25:b2:dc:0e:18:c3:40:08:be:7f:c0:
d4:1e:32:83:56:b6:43:55:7c:b5:26:87:78:c6:e3:cb:62:7b:
2f:d6:ef:56:b4:dd:c7:d4:07:f9:9b:ec:0a:c2:4d:34:be:3e:
cd:99:f1:78:dc:c2:8a:31:20:f2:fa:fa:88:24:6e:56:07:7b:
a9:6b:04:ab:05:9e:ed:f4:48:aa:bd:f9:00:7b:44:76:bd:4b:
6d:d7:86:d8:f9:b3:1e:23:f0:35:1e:7c:9d:6c:47:59:f4:b2:
25:af:7d:60:66:8b:ad:4f:96:b5:a7:ff:fc:8a:cc:a0:3a:e3:
cd:77:74:9b:59:75:4a:65:f1:d2:4b:43:8e:10:9b:42:00:03:
c6:e6:87:e8:88:62:b0:46:bd:78:84:78:4d:84:92:eb:11:0f:
02:f5:1e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:43:17 2025 by rpki-client