Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bf0290a-3e3c-3710-a98a-14c9b1a689f7.roa
File: 8bf0290a-3e3c-3710-a98a-14c9b1a689f7.roa (raw, json)
Hash identifier: 4uRD/31htFYZEWmzrOqsyAsFn0tz/qx9HcnFrxTVf1c=
Subject key identifier: E3:60:B2:3E:C2:0B:52:44:7A:F0:14:72:2D:0F:DF:4B:17:B6:11:76
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487CEB48DCBFB62CC6C41F3880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bf0290a-3e3c-3710-a98a-14c9b1a689f7.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.43.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:48:dc:bf:b6:2c:c6:c4:1f:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=4ec51ce3-32e3-46e7-80c2-b6e9f5c322ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4a:82:3a:5f:70:a2:f8:2b:2d:2d:6a:ec:2d:
86:42:a7:1a:ee:19:48:07:27:25:42:dc:1a:bf:88:
35:b6:a2:9e:32:b6:9b:22:8a:42:52:7c:bd:b1:8e:
f1:e0:e6:17:d2:31:36:be:27:c9:96:05:36:c1:b9:
94:f2:60:b0:f8:4b:7d:9f:b8:c8:67:cb:68:e1:fc:
52:10:76:dd:15:17:26:41:db:b7:eb:7e:49:b4:ee:
f4:c9:be:48:6f:cf:84:14:08:9c:7a:92:20:46:43:
0e:06:72:62:e8:d8:05:c0:b6:6e:1e:83:f7:8c:34:
aa:0d:99:79:9a:96:e6:6a:93:2f:17:89:ed:86:f5:
71:67:93:86:e6:b9:58:5a:d4:1f:18:68:d3:b4:21:
76:a6:b4:ae:05:15:3a:96:29:a0:c7:f2:aa:45:35:
a1:21:48:03:b6:ae:97:0a:d7:e7:85:b9:fc:3f:96:
9f:0b:2d:a0:71:65:f1:24:eb:5d:b5:39:db:29:54:
f2:cb:14:e8:80:0b:99:78:08:25:b6:41:d7:76:8c:
37:a7:b2:60:6c:e3:ae:6d:36:2b:74:64:e6:d1:c8:
84:0b:9f:e6:22:ba:48:a0:e9:dc:b1:49:b9:0f:ee:
e7:ae:79:4d:b6:83:fe:ca:69:90:9e:3f:09:0f:be:
1f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:60:B2:3E:C2:0B:52:44:7A:F0:14:72:2D:0F:DF:4B:17:B6:11:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bf0290a-3e3c-3710-a98a-14c9b1a689f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.43.60.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:50:66:dc:7b:c6:e4:4a:70:27:41:6b:5e:7e:3f:4b:22:d6:
f4:2b:60:48:c4:09:a9:82:c3:56:f3:a7:e0:26:ee:0b:53:1d:
7e:6b:a4:0a:e1:a1:98:bf:ec:79:c2:de:d2:6f:10:ce:ba:44:
fb:2b:74:b2:5e:32:19:8d:cb:67:a4:22:24:ef:d0:17:70:4b:
b8:cf:6c:2c:4b:ec:42:d5:68:81:41:dc:f0:4a:2d:48:3e:a7:
af:b6:b2:a4:3e:48:e1:9c:3a:22:61:9d:30:87:49:d2:20:4e:
50:ff:ac:39:3f:3e:6e:b8:3a:8c:8b:68:21:d4:d1:27:fb:82:
32:de:c9:4e:ec:e3:1b:04:36:37:eb:64:f0:c5:f8:64:e5:a1:
b8:6e:50:3c:48:ee:4d:6e:12:8d:fd:70:9e:f7:bd:aa:32:52:
a4:43:d5:43:40:74:8e:93:91:92:38:d8:a7:16:0f:08:c5:36:
b2:c9:14:28:a0:bd:2a:6f:d9:be:6b:8a:f4:e5:56:b8:53:a5:
9e:00:51:64:43:93:17:5e:9c:ae:a9:f8:9c:4e:8e:3e:28:a7:
f6:d2:f1:b1:32:ac:77:fe:53:79:b7:e6:3d:4a:25:b8:07:0d:
af:8d:31:f7:45:55:79:cc:12:e7:8e:f8:49:53:1c:15:a4:2b:
54:6d:15:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:37:37 2025 by rpki-client