Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f01fe44-704e-37a9-b183-afd27fa79a30.roa
File: 5f01fe44-704e-37a9-b183-afd27fa79a30.roa (raw, json)
Hash identifier: SGgrCvkX+yauBmPOtDQVluZ6iq1+N9e0gGhOLW5LKHg=
Subject key identifier: 11:50:DB:17:31:AD:05:92:71:1D:18:61:0F:B9:37:D8:5B:6C:CB:C4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A20933000AC7BBBCFE81C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f01fe44-704e-37a9-b183-afd27fa79a30.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.38.184.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:93:30:00:ac:7b:bb:cf:e8:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=ed11f886-76a4-4b43-8e53-672ee2c3ef4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a3:be:65:3f:5d:54:a6:5a:cd:a9:c5:6d:ce:
83:74:21:cc:8b:34:ea:91:c0:73:94:83:7f:fa:a1:
dd:75:0b:6c:4c:46:5a:86:87:2f:8b:2d:2b:d9:1c:
fc:f6:34:7d:7e:bf:67:f7:9b:10:bc:17:64:ec:80:
34:33:0c:14:6f:29:6b:d9:fa:54:cd:a7:d3:f0:47:
5e:13:de:c8:67:27:ee:ea:e5:0b:30:29:d0:e9:85:
50:ec:51:4e:73:61:d3:37:e9:f5:8f:18:b3:cf:56:
b1:7c:67:a9:ee:97:78:cd:03:59:83:fb:83:f9:c1:
2c:7d:e4:47:c0:db:59:15:fd:51:ef:82:18:9d:62:
2c:94:e2:8e:30:eb:fe:e1:d6:be:5c:8b:69:60:21:
11:51:d7:8a:2e:0c:39:f0:ed:27:57:0b:31:78:2c:
d5:d4:6a:38:f8:f4:b0:34:63:31:6b:4c:ad:9e:76:
83:ed:d8:38:b6:96:de:90:f7:c6:3c:49:92:73:15:
39:6c:50:f6:e9:4b:64:80:47:9d:03:ec:b5:ac:7d:
e8:3f:34:73:e9:35:b5:d7:eb:ab:04:c7:00:8c:06:
cb:9d:94:7a:65:3c:2d:e7:b9:0a:89:66:ef:be:e3:
87:80:05:9d:84:0d:be:e2:66:0a:02:d7:98:1c:0f:
28:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:50:DB:17:31:AD:05:92:71:1D:18:61:0F:B9:37:D8:5B:6C:CB:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f01fe44-704e-37a9-b183-afd27fa79a30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.38.184.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:c0:83:2e:cb:29:2a:53:88:31:90:e7:f1:8b:83:ca:53:bb:
d7:e3:3f:75:ad:ee:31:d3:f6:9c:f1:b6:4e:f7:ec:b4:d1:25:
61:a1:6f:19:f3:6f:d2:49:60:bb:46:e7:f1:38:4e:d1:b3:18:
d2:d2:75:7e:fa:79:f6:75:45:b0:6f:24:e0:b9:f0:2d:62:0d:
7e:53:94:7d:5f:a9:32:be:cb:a3:78:b0:30:d9:b0:e8:5a:dc:
4a:ac:93:1f:3c:c7:57:90:77:7b:e0:ae:8c:86:70:f1:bc:43:
f0:68:7f:ea:b2:30:25:9f:49:ea:9d:87:53:d8:7a:9e:08:cc:
2c:8e:f8:71:5c:f1:48:0a:8a:dc:3e:62:b9:98:a7:7f:45:27:
e8:9a:06:63:31:f3:e8:0a:ea:2e:49:3e:5f:14:ce:14:90:9e:
7e:fd:cc:62:90:e8:ae:68:35:58:94:1d:26:44:08:16:4d:73:
1d:86:e8:f9:81:d3:a3:8b:3e:bf:18:9e:e7:19:3b:9c:68:b4:
2d:6c:c2:2f:09:f4:3d:bc:bd:63:dd:d6:73:e0:c7:34:8e:51:
40:e8:3c:cf:b8:be:fd:e6:01:b5:09:e0:95:ca:f2:f2:6b:ae:
3d:0f:60:8f:b6:24:3a:fa:9b:d1:86:b6:34:e3:87:84:f6:35:
ea:74:b7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:47:51 2025 by rpki-client