Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/62b47cb6-02ef-3e38-b45b-695da9d1a1fd.roa
File: 62b47cb6-02ef-3e38-b45b-695da9d1a1fd.roa (raw, json)
Hash identifier: XcNlpKS5RC/8pqx3hChhauE0A5ya3Kwdtn1/qj/3KGA=
Subject key identifier: 64:ED:BD:D0:ED:07:F9:FE:E9:CF:38:5B:A5:F0:91:DB:6C:4C:B9:28
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848811B161C50C22A5B15808E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/62b47cb6-02ef-3e38-b45b-695da9d1a1fd.roa
Signing time: Sat 11 Jan 2025 02:00:39 +0000
ROA not before: Sat 11 Jan 2025 02:00:39 +0000
ROA not after: Fri 11 Apr 2025 01:00:39 +0000
asID: 16625
IP address blocks: 23.49.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:81:1b:16:1c:50:c2:2a:5b:15:80:8e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 11 02:00:39 2025 GMT
Not After : Apr 11 01:00:39 2025 GMT
Subject: CN=a16604e4-ad98-4fa3-adfd-d0160a322be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:09:be:c9:41:de:5b:2e:d1:6e:2e:11:ed:b3:
06:a7:42:e3:16:9d:6c:5d:9d:13:07:8a:ea:5f:90:
e6:bb:b5:a3:30:a4:76:f9:5d:e1:c7:a2:33:90:11:
98:2c:17:41:76:1a:53:30:e2:66:02:4f:6d:a0:af:
d8:b0:35:2e:1f:fd:13:d1:22:e7:7f:b7:3a:eb:1b:
02:dc:6e:b7:2d:d8:22:e1:a9:7e:ab:e5:b7:1f:b5:
22:18:35:10:35:1b:34:d3:e7:de:4a:8f:6a:fa:08:
7a:4b:db:03:79:fa:5e:80:bc:28:ee:00:31:3a:b5:
74:60:81:26:86:94:a1:6c:66:0b:72:cf:a3:78:b2:
93:a2:dc:6f:39:bf:31:37:a8:c0:1a:78:e3:8d:c6:
4b:92:75:02:80:d2:f2:96:12:8e:e0:92:f1:c7:c5:
7d:2e:9a:53:da:37:ee:24:6d:09:65:20:93:95:06:
ca:30:c4:95:ea:93:66:ec:02:d4:fc:34:6a:a7:dd:
8f:7e:c1:8f:b4:ad:1d:ba:21:f1:6d:27:0a:0b:78:
00:d1:2c:11:9d:d1:bd:de:51:17:f7:b1:13:73:84:
2f:aa:d9:3f:12:ef:41:01:c8:2f:db:3d:4c:36:b6:
76:d0:83:cb:37:14:33:d7:48:d6:6e:da:85:56:2e:
26:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:ED:BD:D0:ED:07:F9:FE:E9:CF:38:5B:A5:F0:91:DB:6C:4C:B9:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/62b47cb6-02ef-3e38-b45b-695da9d1a1fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.49.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:b2:51:51:a1:7a:5e:c7:d4:f6:a9:0e:6f:e6:3d:09:26:be:
8b:77:a8:c6:3d:24:64:2a:ed:86:f6:1a:f1:bd:85:0e:44:a5:
ae:21:05:a0:2b:0a:24:f1:82:69:09:24:57:8f:bf:13:84:79:
94:e7:89:aa:2a:f6:be:a1:31:ff:1c:7a:9d:44:f7:4f:fa:9d:
e8:59:ee:26:2e:dd:17:08:39:fc:c2:42:33:da:09:76:ec:77:
e0:90:87:f8:72:ca:ad:c3:f2:88:a3:da:2a:02:e6:5e:eb:db:
22:b0:42:3d:f3:48:80:3b:91:f8:e4:4c:d7:bc:a5:5c:20:be:
5c:af:9b:1a:44:6a:b0:0b:4e:9b:68:79:7d:cb:98:76:37:e7:
ad:c0:81:04:99:78:dc:e7:89:f6:80:99:5a:cf:28:e3:c3:c9:
05:92:0e:73:dd:80:74:55:e3:0e:af:29:b7:f0:83:84:06:1c:
fc:f2:1c:18:2d:4d:bc:15:ae:d3:f7:7b:a7:b5:47:31:4c:72:
92:f2:b3:68:7e:92:6e:dd:a8:3c:33:3c:21:fa:4b:f7:12:20:
2f:f8:33:5a:00:10:a2:c5:73:04:7f:2d:92:9c:f8:f1:d4:93:
10:c2:85:42:88:06:07:db:0b:51:07:bd:f2:00:24:d4:15:2f:
c2:95:5a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:33:18 2025 by rpki-client