Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/890cfc50-f504-3068-9650-58808015f57d.roa
File: 890cfc50-f504-3068-9650-58808015f57d.roa (raw, json)
Hash identifier: RG4URwnQ9pHvebI20teqd4Cg13IgD21XRH4iPKugTWw=
Subject key identifier: 8C:04:17:37:BA:12:A4:F6:14:F6:FE:46:92:19:93:25:C2:71:A4:84
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847F6EA313B912E488507A36800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/890cfc50-f504-3068-9650-58808015f57d.roa
Signing time: Fri 22 Nov 2024 14:00:39 +0000
ROA not before: Fri 22 Nov 2024 14:00:39 +0000
ROA not after: Thu 20 Feb 2025 14:00:39 +0000
asID: 20940
IP address blocks: 23.210.200.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f6:ea:31:3b:91:2e:48:85:07:a3:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 22 14:00:39 2024 GMT
Not After : Feb 20 14:00:39 2025 GMT
Subject: CN=10fd2610-d19b-4327-bc95-e17f256c9b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:64:31:2c:05:16:f7:66:a7:1c:23:31:34:0e:
df:7e:d7:39:a0:79:a6:13:5e:cd:af:0c:ca:50:85:
4f:3f:d9:75:83:ec:4c:bf:0f:a0:94:31:80:f3:02:
9f:08:47:12:41:bb:e1:dd:ae:98:35:e5:9c:a8:a2:
10:62:dc:36:12:a0:f6:c0:b8:d1:50:33:dc:78:61:
a5:ab:37:c8:5e:0f:d3:b4:03:b4:be:e5:75:da:4c:
6b:0a:89:98:46:8e:da:71:36:37:90:4b:5b:32:fd:
74:cc:1f:27:19:1d:6c:51:ca:1e:34:60:83:57:02:
f3:90:62:1a:2d:ba:8d:f6:a2:5b:ec:91:9a:21:35:
71:19:e8:16:84:b8:d2:b9:5b:2b:48:5c:2f:65:eb:
98:7b:08:7f:b0:09:2b:b8:32:cf:4e:30:bc:66:ef:
50:c7:ab:0b:03:7c:f2:7d:87:1b:3d:cd:7d:99:bc:
bc:1a:1d:4f:16:dc:a7:48:7a:8c:5b:7e:61:ed:23:
fa:96:78:f8:79:ec:3d:a9:ee:20:1b:3b:80:bb:0a:
56:38:50:ed:15:80:37:a5:9f:67:e1:0b:58:61:0c:
f6:50:62:c3:29:c7:68:2d:f3:56:14:e4:82:e1:a4:
b9:c3:54:5f:13:02:a2:84:b1:92:6c:d5:cc:60:30:
21:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:04:17:37:BA:12:A4:F6:14:F6:FE:46:92:19:93:25:C2:71:A4:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/890cfc50-f504-3068-9650-58808015f57d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.210.200.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:be:62:b1:09:09:dc:09:e0:72:01:91:92:d5:1f:51:87:84:
65:24:70:bb:53:e0:48:1f:94:1c:82:5b:e6:19:9d:f0:a0:6a:
d8:6a:c9:7d:51:df:26:f7:d2:3d:8b:ed:15:1e:00:03:86:78:
7f:31:d9:68:68:76:df:ce:5b:d5:2f:e1:70:de:62:d6:83:3f:
46:f6:c7:e2:e4:1c:ca:c2:6f:d4:ec:bc:fc:a1:bc:fe:b5:73:
be:89:bb:8f:a1:6c:f3:e4:30:b8:09:e8:74:81:21:47:b1:9f:
72:77:1a:79:83:66:4d:f2:34:95:90:56:af:db:9f:b4:e7:c4:
41:89:0e:42:25:19:56:54:52:d3:98:c6:b7:28:36:cd:45:84:
c3:36:6a:90:7f:4d:31:01:43:dd:3f:b5:4e:69:77:0e:8e:d8:
8c:05:21:af:aa:8e:ea:29:bf:f4:7b:b1:2c:ab:a7:e6:ed:0a:
82:2e:6e:16:c2:34:81:0c:f5:20:3d:55:7b:3e:56:4e:00:0a:
22:50:95:30:4a:33:e2:5d:1a:ff:59:07:57:5e:a8:ca:a8:56:
05:7d:4c:04:90:0b:91:b8:2c:1e:44:b6:07:28:4a:d9:1f:61:
b6:ee:52:9d:04:5b:74:63:5b:3d:63:e3:18:53:b2:fc:e1:0c:
97:36:1b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:33:45 2025 by rpki-client