Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d577cb1-9778-34bb-9a29-ebdf0e9c07c4.roa
File: 5d577cb1-9778-34bb-9a29-ebdf0e9c07c4.roa (raw, json)
Hash identifier: fNb+1gSEEl29WTm4dpwByO4VRPnkArEIVgwFb/WyfA0=
Subject key identifier: 4B:F3:15:AC:8E:B7:E7:27:B9:26:79:15:F1:29:B6:B0:64:A9:2C:C8
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A400C9E2AD81F3E2ADF22AC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d577cb1-9778-34bb-9a29-ebdf0e9c07c4.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.196.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:c9:e2:ad:81:f3:e2:ad:f2:2a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=7f0d0dba-7872-4b3b-bef9-e590134cd91b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9a:f3:1c:1f:bc:9e:53:19:95:bf:44:f1:59:
b2:04:fa:0e:a6:a6:2f:0d:03:f2:4f:2a:2e:11:ed:
1a:bf:0d:e3:38:c4:cd:6c:4b:d7:f8:58:12:22:c6:
8a:11:52:35:60:32:99:e5:6d:6a:b3:64:fe:13:36:
c3:cd:e0:5d:de:b6:4a:46:ee:e5:7e:14:01:5f:6b:
bd:29:dc:cf:ad:a3:48:cd:77:32:86:a8:59:ae:01:
97:fb:d1:0e:f5:bf:4b:9c:42:fc:14:74:95:e5:68:
e4:02:38:54:57:a8:1a:53:d1:72:66:28:90:38:8d:
44:1d:0f:30:19:26:6b:9d:84:d0:d1:62:3c:ec:30:
bb:0b:1a:35:86:6d:90:45:76:50:37:da:1c:d8:f9:
33:aa:f5:5b:00:45:b1:ca:8e:88:3b:37:47:82:4e:
e9:90:bb:a1:09:b0:33:4f:db:03:e4:a6:c2:24:88:
db:b9:84:4c:76:6b:36:1b:13:3d:bf:88:06:f2:5c:
93:e2:4d:1c:de:1c:06:52:83:89:a5:67:25:1f:25:
06:fd:8f:27:61:e1:00:6c:ef:f5:d1:3f:e6:b9:64:
cb:27:a9:c7:01:e6:c2:90:1c:11:df:46:f9:03:35:
6f:86:77:78:64:a0:b9:2e:ae:76:b3:da:6e:16:b1:
11:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F3:15:AC:8E:B7:E7:27:B9:26:79:15:F1:29:B6:B0:64:A9:2C:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d577cb1-9778-34bb-9a29-ebdf0e9c07c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.196.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:c4:06:c1:eb:96:b9:31:fb:2a:09:2c:90:04:48:c8:f8:41:
c5:64:58:bd:aa:0d:9d:36:14:ec:aa:27:b5:38:47:cd:67:61:
b2:41:42:83:f9:e7:31:85:7c:72:03:f9:f0:3a:7e:ad:0d:4a:
53:c0:8b:9d:4a:dc:cb:a1:8c:d3:f2:63:92:87:f5:de:79:7a:
09:ea:11:3d:ef:3f:10:d9:15:4a:21:08:8a:ea:9d:47:f2:b6:
ca:d1:40:12:52:0f:e8:3f:c7:fc:9a:07:b6:91:44:ad:67:8e:
be:b6:56:b1:12:a3:c4:99:59:ae:07:75:b2:f6:f2:05:c6:74:
9d:22:30:64:4b:d1:5e:05:30:24:aa:e1:ea:01:39:9e:e5:3c:
e9:53:a3:80:ac:34:3e:83:09:8e:d6:ae:b0:05:63:7b:3f:25:
41:53:27:ce:6b:55:10:06:c2:6c:34:4e:2c:5d:a0:05:c3:eb:
59:6c:bf:f6:7b:c8:0f:4c:4a:ce:c4:55:4b:2d:d7:52:9f:69:
47:f1:8f:16:8b:ff:9c:65:04:51:08:bd:76:24:86:e5:ef:c6:
2b:9e:79:e0:b0:9e:14:98:55:00:ba:dd:d4:e8:04:7e:8d:26:
31:4d:b6:81:e3:03:cd:67:e7:53:7a:7d:00:99:10:7b:c6:9d:
ec:05:31:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:55:22 2025 by rpki-client