Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7106ce13-9aeb-33db-b434-075451705880.roa
File: 7106ce13-9aeb-33db-b434-075451705880.roa (raw, json)
Hash identifier: pH+hAwuygxg/RS1giZHCR1+VL6QYhZxsz7x1neFypM8=
Subject key identifier: AF:9E:57:85:28:45:9C:E1:81:8F:6F:D5:CF:64:A7:E9:D1:38:01:D6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858486D9062A16653CE9051864A20
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7106ce13-9aeb-33db-b434-075451705880.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 16625
IP address blocks: 23.32.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:62:a1:66:53:ce:90:51:86:4a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=3ba785e0-67c8-4898-9316-ac3b0c4db7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2f:3d:de:ec:e4:17:55:60:76:5d:43:95:8c:
e7:48:ed:94:89:1d:e3:a3:9b:60:3c:35:16:8a:b5:
66:16:12:8f:df:5d:93:d7:8c:47:3e:cb:76:b8:c9:
8d:b6:f6:70:5c:29:d7:83:3d:c3:48:58:c6:49:0c:
cf:cd:68:9d:d5:03:22:48:5b:3d:2c:c4:23:8d:be:
69:6c:99:34:bf:01:63:07:b1:1f:12:fb:87:ff:de:
37:84:b4:7d:05:c6:8d:a6:17:93:bb:cb:e2:c9:82:
04:b0:af:b0:fc:fc:bc:81:de:28:5e:34:c9:f8:08:
a5:92:69:74:65:f5:7c:ba:c3:7d:fc:66:b2:a7:cb:
44:f7:03:e7:98:3a:c2:ba:86:1a:2d:2d:a4:7c:05:
50:04:c8:c9:b8:f5:08:63:88:13:cc:39:22:4b:23:
28:64:de:f7:b3:4a:4b:cc:11:b3:22:71:ef:ac:10:
76:46:8b:3f:a9:0f:bf:2c:e7:5c:22:a0:62:ce:cf:
57:d3:fc:c9:ad:df:07:bf:86:f5:a9:18:6f:13:52:
30:9f:56:47:ac:50:d0:e8:de:c7:14:f0:eb:4f:16:
ec:39:12:23:5b:5f:6d:47:16:d8:ed:16:3d:9b:f9:
42:f1:20:42:6f:fe:aa:4c:07:d2:33:d4:e3:ed:29:
b0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9E:57:85:28:45:9C:E1:81:8F:6F:D5:CF:64:A7:E9:D1:38:01:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7106ce13-9aeb-33db-b434-075451705880.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.32.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:af:96:5c:1f:8d:44:7c:ae:69:e7:d9:31:45:76:fb:d5:1f:
66:cf:f3:54:b8:0c:f1:6a:21:11:39:23:fd:44:93:03:99:c5:
76:9f:a2:82:cd:6c:ab:ff:ed:76:1f:2e:96:bf:f3:c9:68:2a:
a8:66:35:a1:54:4e:9b:6a:b0:83:28:f9:aa:f2:44:24:07:eb:
0a:e9:e4:1c:bd:40:c6:bb:dd:81:58:75:3c:fc:10:77:7a:ad:
cc:8d:71:a0:bd:14:a9:85:cb:bc:5c:fd:6c:8d:e1:4c:b5:99:
43:6c:fa:38:6c:d1:5b:8f:67:7f:c3:46:55:bd:07:5c:1d:de:
70:a5:db:cd:f1:27:2c:2e:69:92:fd:43:b7:86:05:ca:83:e6:
72:a2:51:3a:28:de:9f:87:67:53:5c:55:2d:82:61:13:30:2a:
d6:bb:0b:71:16:02:63:57:4d:d7:83:c9:61:b6:1b:db:ed:d4:
78:77:0f:51:3c:9b:d3:30:57:41:e8:0d:c0:28:04:9b:8a:6e:
cc:a5:b2:f4:8f:86:fb:4b:50:c2:a4:86:cd:1d:3c:cc:1d:3b:
c9:24:31:ee:fe:b2:92:29:b8:98:73:a1:66:11:31:47:d2:2e:
84:bb:d2:f0:ca:84:f3:f6:a3:05:0f:9e:4f:06:17:59:05:b6:
cf:1c:56:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:48:58 2025 by rpki-client