Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e9b6e0b-8959-3939-ae9d-c802adac750d.roa
File: 8e9b6e0b-8959-3939-ae9d-c802adac750d.roa (raw, json)
Hash identifier: PLOQubaH53mx0qUVok/O/nDTrHrBTp4T+t0yFwsdx+o=
Subject key identifier: 33:80:7C:16:AA:F6:29:67:39:79:43:C3:39:50:03:1F:B5:18:73:6A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848960B636D4E0FA3D48C7EAEE0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e9b6e0b-8959-3939-ae9d-c802adac750d.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.221.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:63:6d:4e:0f:a3:d4:8c:7e:ae:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=a037f050-1b5b-4537-9c1e-53dbb5651418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9f:60:1f:5e:40:67:06:3b:72:32:fd:38:80:
6b:5d:ae:7e:e0:f9:e5:4e:d2:7f:ac:75:ab:0d:d2:
88:84:6c:0a:84:8b:6f:35:d6:52:9b:e3:00:aa:7f:
38:23:ec:13:71:a9:54:9b:9a:64:d0:49:1e:47:79:
d9:b3:9e:2f:9b:35:0e:15:67:85:fb:23:97:e7:18:
6c:c9:5e:5d:64:57:c7:82:8e:5d:13:c9:53:9b:69:
e3:31:d2:64:bc:c4:95:92:b1:37:20:e6:0f:7b:7c:
22:f5:88:d5:65:7b:53:8b:f0:fe:4f:1c:57:9d:16:
ca:49:00:50:1e:fa:7c:a5:7b:9e:52:9e:7f:a1:93:
c7:8a:31:51:9e:08:05:e5:de:90:94:13:c0:20:22:
29:0c:3b:04:1a:89:47:4a:bd:2d:5e:00:60:ab:35:
bf:23:59:7f:75:56:7e:1a:60:2d:b4:a4:18:b7:13:
64:97:96:08:f9:a3:75:eb:21:a9:8a:c7:9c:3f:07:
fc:a5:64:32:03:23:66:2a:21:79:18:ba:27:94:c2:
bc:24:2e:7b:ff:b2:c0:64:96:cd:b1:fa:4e:0b:41:
06:d3:be:64:bd:c3:e3:fc:1f:27:2f:fc:d2:10:c9:
0e:96:12:59:0f:c1:a1:28:d8:52:78:91:24:9d:f0:
9a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:80:7C:16:AA:F6:29:67:39:79:43:C3:39:50:03:1F:B5:18:73:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e9b6e0b-8959-3939-ae9d-c802adac750d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.221.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:1c:86:79:57:36:f6:28:cd:83:50:35:4b:ac:96:b3:f4:fd:
10:71:2a:f5:45:33:a7:f2:05:6c:87:85:e8:ed:ec:8a:ac:fb:
ca:4a:59:54:52:81:ac:65:bb:8f:db:b0:50:53:b7:92:35:96:
86:2f:8b:48:6d:44:53:a8:a1:9d:bf:0a:b6:73:c6:76:da:e6:
b6:06:e0:39:3d:d1:9a:07:90:e2:ca:43:48:d8:30:3d:4c:93:
e2:c1:10:b5:86:ae:5e:57:f7:71:b5:ae:65:d6:54:1b:29:81:
6b:36:37:1a:58:71:72:93:10:b8:a2:30:88:50:5c:c5:d1:9f:
e1:20:e6:e7:21:ad:4c:bf:59:eb:3c:aa:d5:80:e5:8b:46:6a:
8f:8f:e2:83:ee:11:6a:65:c8:bf:fc:9b:21:70:6a:0a:e4:77:
56:2b:0a:85:c3:1e:a5:1d:50:20:53:22:0e:3a:06:13:c1:ea:
55:43:6d:f0:cd:fd:ec:26:79:56:5e:eb:6e:4e:f2:0c:a9:d9:
97:4f:17:76:a2:af:fa:02:69:d3:c2:c3:26:d0:99:97:8b:7e:
3e:2d:61:bc:0d:03:ce:f6:8e:ae:b1:86:e4:28:40:45:29:3a:
68:38:34:21:d6:e8:53:f6:27:0d:8e:23:98:00:84:61:23:15:
1f:9f:44:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:57:12 2025 by rpki-client