Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e5b09f8-b209-390e-8c46-48b119b2d156.roa
File: 8e5b09f8-b209-390e-8c46-48b119b2d156.roa (raw, json)
Hash identifier: s2QI5nEs1x6bPsx6eGSjDK1UJ8Ewz2irNe4Yw6iHu1A=
Subject key identifier: 3B:4D:95:BD:E3:DC:C8:DE:90:35:A9:6E:2D:5E:31:38:9C:CB:27:20
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858484AAAE5DF5A48A0C436E29880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e5b09f8-b209-390e-8c46-48b119b2d156.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.38.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:e5:df:5a:48:a0:c4:36:e2:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=e79206ed-0b00-4db0-acb1-41c8870ce871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9f:fc:46:81:5e:e4:4e:3d:3b:ee:44:14:a1:
08:6c:f2:de:e7:46:52:24:ff:a8:c9:e1:ab:1c:ff:
72:39:c3:1d:ac:82:59:2f:3b:5f:92:ae:dd:3f:20:
cc:64:0d:8a:b6:f8:f0:1e:6c:fc:f9:1a:d9:fe:db:
09:3c:ec:3e:65:24:88:cd:99:08:fb:d8:ba:bd:f1:
6e:6e:e6:ef:e0:de:13:ba:af:db:df:1c:6a:27:4d:
bf:50:88:5e:19:77:8e:2e:ef:d7:f0:da:80:c9:45:
ff:aa:47:9a:38:26:85:7d:e9:a1:e8:34:ec:a0:db:
cd:f7:ad:24:89:ad:e7:13:62:25:d1:fa:82:8e:06:
7f:3b:e2:7f:7f:14:9f:d1:4c:e8:33:12:27:52:9e:
c2:24:6f:08:df:64:2b:99:b7:95:fd:61:95:4a:46:
9a:f9:36:78:4c:95:96:d8:a2:c6:50:f2:43:9a:60:
dc:6e:ca:31:ad:3e:e7:a8:93:21:b4:fb:37:98:54:
61:c2:f9:d7:bb:37:18:12:eb:6b:c7:a5:9d:2d:13:
cb:84:e2:21:80:5b:2a:82:ab:ba:2c:e8:27:11:a4:
a6:9c:df:de:a4:d7:24:68:32:e3:dd:8d:36:84:46:
46:df:9e:05:8c:5e:c4:42:e4:d9:de:a9:e0:76:f1:
a8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4D:95:BD:E3:DC:C8:DE:90:35:A9:6E:2D:5E:31:38:9C:CB:27:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e5b09f8-b209-390e-8c46-48b119b2d156.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.38.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:b3:c4:2f:60:1d:3d:3e:cc:33:23:8d:44:80:7a:d6:13:e4:
55:cd:7a:fa:94:8c:14:0f:e0:4b:97:0d:38:10:fc:de:1c:fb:
9e:dc:00:50:c7:69:8c:eb:28:87:7a:10:66:29:84:52:a4:95:
4e:94:48:1b:50:e1:b5:c4:df:9d:7f:83:d3:11:ef:d1:e5:b0:
96:4e:a9:9c:6d:98:1c:f7:d4:f6:58:c3:75:6a:7a:3b:46:b8:
a4:a0:1e:4b:f2:33:ec:d9:eb:dd:bb:74:d0:e4:fa:38:00:2e:
61:a8:c0:71:57:25:7d:18:58:f6:d8:70:ba:8d:5c:2f:f9:ae:
d3:99:08:21:f5:51:4a:af:d9:8f:ae:71:bc:ec:88:f4:e3:4d:
28:b2:bd:1f:45:8c:3f:03:e5:59:b4:e3:68:5b:8b:8d:04:c6:
f8:c9:6f:ae:6d:b7:8e:1f:2e:68:07:a1:98:e8:02:06:8c:a6:
77:98:0e:34:fc:5f:0e:3b:af:74:af:e0:ae:82:43:c7:43:a7:
e7:1b:97:2b:c4:d1:84:14:9a:76:88:6f:55:7e:72:6c:c9:62:
a0:5a:bc:31:96:04:22:66:c5:2a:3c:6f:39:df:c7:48:05:a9:
61:4f:7f:67:85:99:cd:71:41:ed:59:3c:f8:95:d4:43:06:2d:
9d:76:d5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:52:41 2025 by rpki-client