Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64a96167-a2f1-38db-aa2c-5684e746b2a7.roa
File: 64a96167-a2f1-38db-aa2c-5684e746b2a7.roa (raw, json)
Hash identifier: hkgZD2pw+9AQFrxSPLA2i9TRoeeD1RqAjWi4uQWCQjw=
Subject key identifier: 9F:9B:E3:B4:9C:A7:1D:A2:D6:21:E1:65:AC:B1:B1:57:D9:2E:1F:D0
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487E506DDAD3CC5DF841DDE840
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64a96167-a2f1-38db-aa2c-5684e746b2a7.roa
Signing time: Fri 10 Jan 2025 02:00:40 +0000
ROA not before: Fri 10 Jan 2025 02:00:40 +0000
ROA not after: Thu 10 Apr 2025 01:00:40 +0000
asID: 20940
IP address blocks: 23.46.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7e:50:6d:da:d3:cc:5d:f8:41:dd:e8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 10 02:00:40 2025 GMT
Not After : Apr 10 01:00:40 2025 GMT
Subject: CN=480e9a5b-3af0-418e-9a6d-d2bdc164bbc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dc:41:53:d4:ab:1d:96:59:c1:b3:ec:b1:52:
48:08:51:25:fd:73:c2:36:d4:32:b2:a1:e1:c3:58:
37:69:0b:15:c6:f1:56:8e:25:fb:aa:8c:e5:c7:c7:
0b:ce:9d:12:20:15:c2:5f:47:53:a6:0d:4e:9b:db:
1f:77:f3:e8:9a:eb:4e:49:6b:c1:c3:4d:f6:66:b6:
f1:27:2e:0b:39:ac:ed:30:79:fc:87:46:83:42:1d:
e0:00:43:80:0f:1b:1d:c8:21:1d:5e:91:cb:60:5d:
b1:db:4e:cf:01:99:cd:74:0e:68:68:40:4e:b8:75:
af:fd:b1:f3:56:2c:b6:30:59:d2:a0:77:5e:63:56:
1a:6e:14:fe:84:d4:c8:4d:d7:50:42:5f:82:23:ed:
e6:f9:0c:ac:dd:c5:39:8c:21:a0:02:a1:0c:3e:3e:
79:ca:d4:0c:98:e7:ce:cb:2f:3e:64:66:44:b8:dc:
cb:4e:b3:2e:2e:af:27:16:e0:67:0b:35:bf:cc:e7:
6c:61:3c:c1:72:3d:60:6f:af:08:ce:82:36:13:83:
cb:dd:aa:96:6f:dd:f0:bf:19:f4:e0:24:ec:b5:8f:
e9:53:48:7d:0c:82:4f:46:ae:f2:0b:db:19:63:2c:
e7:1c:6c:f1:0f:a3:a6:18:dd:2a:19:1c:13:d7:88:
9e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9B:E3:B4:9C:A7:1D:A2:D6:21:E1:65:AC:B1:B1:57:D9:2E:1F:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64a96167-a2f1-38db-aa2c-5684e746b2a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.46.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:56:05:5c:ec:25:7a:12:3e:b0:30:61:10:c0:44:c7:09:17:
08:44:a7:d3:c3:29:ff:0a:74:dd:b8:70:69:04:e1:5a:42:ac:
44:92:df:19:75:8c:e0:f1:08:9b:f4:44:8a:f5:cb:75:a1:92:
5e:bd:85:90:b5:55:3c:f3:d9:b8:24:70:fe:c6:1d:79:be:33:
6f:e8:18:82:69:51:a0:66:72:7d:3d:17:44:15:0c:31:d7:75:
53:ac:f8:99:72:d7:fd:d5:b4:28:20:6f:b0:4c:1c:f8:e1:ae:
5c:15:51:18:57:e8:d9:92:f8:63:0b:b0:8c:b5:3b:ca:d2:15:
04:06:2f:0e:67:dc:c2:24:2f:b8:c8:59:d0:da:24:69:98:d7:
3d:19:53:fb:ac:51:91:26:20:81:b5:d0:b6:58:11:ed:4c:16:
68:cd:f8:ef:1a:cd:80:b6:05:af:c0:85:fc:09:47:73:34:d8:
05:cf:8c:d0:d6:95:f3:be:49:8c:f9:4f:45:51:32:43:94:41:
ab:19:6f:fb:bb:0f:a0:79:e3:94:97:66:da:0d:65:39:7b:dd:
b5:1a:73:71:b2:b6:cc:bc:25:4e:a5:84:4e:63:23:a1:5a:ba:
e3:98:26:c4:44:52:68:61:9f:d8:60:97:80:b9:91:5b:a8:69:
f7:98:d6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:57:52 2025 by rpki-client