Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/81e465d0-376b-35a3-b877-422f7e7b9787.roa
File: 81e465d0-376b-35a3-b877-422f7e7b9787.roa (raw, json)
Hash identifier: 649JQf46HEHl45FlWNA0ZEoY8EhoQ1LgZQfmmJr7Cg8=
Subject key identifier: 13:2E:46:75:64:66:8A:83:60:47:CA:F9:F3:CC:F1:39:E1:3C:82:46
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847EA5A0F91858A8918868DCBF4
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/81e465d0-376b-35a3-b877-422f7e7b9787.roa
Signing time: Mon 18 Nov 2024 02:00:27 +0000
ROA not before: Mon 18 Nov 2024 02:00:27 +0000
ROA not after: Sun 16 Feb 2025 02:00:27 +0000
asID: 16625
IP address blocks: 23.219.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ea:5a:0f:91:85:8a:89:18:86:8d:cb:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 18 02:00:27 2024 GMT
Not After : Feb 16 02:00:27 2025 GMT
Subject: CN=faf90ab7-0428-4e11-ac24-009fb04e4989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4a:32:cb:8c:91:9e:32:a8:ad:3f:db:62:aa:
27:81:0c:e5:7f:d9:06:b1:6b:dd:82:3f:b4:09:a3:
4a:f1:e4:96:0c:4b:3b:31:7b:2f:04:b9:1e:d6:6e:
c6:a5:0d:21:1e:42:42:2e:33:a9:6e:64:4b:43:00:
fd:44:f7:90:a4:07:2b:11:8d:34:f5:65:e3:d4:cc:
14:1b:88:20:16:07:05:7d:e0:37:3b:2d:a7:38:05:
20:47:bf:64:a0:92:5e:31:87:6e:24:01:81:5a:01:
d7:f3:57:9b:54:44:4a:d7:e1:5b:d0:0a:7f:e0:97:
69:8b:e5:2c:5f:14:af:a4:42:f5:7c:c0:c7:fa:2f:
f2:c4:5b:45:e8:27:7b:59:79:4a:a6:be:d2:89:01:
f0:ee:4e:31:e7:7f:6b:e9:5c:f3:1b:8d:3c:5c:b3:
89:ff:f9:e9:d4:bc:68:fd:41:8b:37:12:4f:f9:2d:
38:3a:30:2d:06:44:b5:fa:0d:96:63:3b:e0:97:55:
87:ee:56:b3:fe:71:f6:60:3b:2d:27:ce:6f:25:96:
ed:78:54:2a:53:55:a9:9f:12:95:80:c0:38:d3:3a:
e5:71:8c:ee:8a:4d:fc:60:48:a5:db:41:d6:80:c4:
82:9a:e8:4c:7b:0b:1f:44:c8:6d:02:b1:59:8f:59:
5f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2E:46:75:64:66:8A:83:60:47:CA:F9:F3:CC:F1:39:E1:3C:82:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/81e465d0-376b-35a3-b877-422f7e7b9787.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.219.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:a3:de:9a:77:71:35:21:66:ac:56:5e:6c:db:ab:b7:0e:b0:
4b:6d:be:aa:49:ed:d0:16:57:63:13:41:28:6e:de:99:03:0e:
67:f9:31:36:ca:51:a4:66:a4:52:2a:82:c2:29:ab:31:a5:e4:
cc:aa:f8:a5:63:4e:ef:21:fa:6e:7f:37:6e:be:dd:2a:8f:c8:
c7:2b:45:e8:dc:18:5e:ab:17:4d:d0:e4:23:69:a0:00:e9:62:
bc:1f:f0:07:9b:70:ac:b6:1c:17:26:7e:86:30:75:b1:cc:1f:
16:2a:94:57:8d:20:03:e4:c1:d5:b7:37:7a:80:a7:51:99:36:
82:72:b3:37:d9:42:59:bc:5a:66:50:7f:dd:49:e0:d1:db:5a:
b5:94:72:f0:84:18:2b:b5:4c:63:c1:97:d5:71:8e:e3:4e:10:
6f:0c:3b:e8:74:91:0c:db:ae:e6:cc:6c:e8:39:96:a4:90:9e:
fb:a7:15:71:70:01:e4:d9:53:60:52:ab:5f:a9:1f:61:0a:96:
7a:bc:25:cb:a9:78:38:c0:9c:7e:ff:6a:26:63:bc:a4:d6:3c:
90:49:1a:38:a5:df:87:dc:df:c7:d7:ff:c6:5a:02:17:02:72:
32:cf:76:a3:d5:b1:a5:ee:5b:46:be:dc:55:da:34:dd:2a:17:
4a:4e:02:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:56:58 2025 by rpki-client