Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99ee59c2-843d-35e0-99f8-e8ca7045d847.roa
File: 99ee59c2-843d-35e0-99f8-e8ca7045d847.roa (raw, json)
Hash identifier: Nqq31hHhBN6ckWtFYuHirLGSXRtW12PyJxZlfljQru4=
Subject key identifier: 65:93:A4:B8:00:48:6A:2E:3F:37:22:E2:A6:DC:2A:80:FD:0C:56:2C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848897B1D4B45A929CD319BE780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99ee59c2-843d-35e0-99f8-e8ca7045d847.roa
Signing time: Tue 14 Jan 2025 02:00:39 +0000
ROA not before: Tue 14 Jan 2025 02:00:39 +0000
ROA not after: Mon 14 Apr 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.221.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:89:7b:1d:4b:45:a9:29:cd:31:9b:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 14 02:00:39 2025 GMT
Not After : Apr 14 01:00:39 2025 GMT
Subject: CN=72342f87-2cd1-4dab-a90d-26d098b0aecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ea:48:de:a4:51:f8:0e:5b:96:0c:d7:6c:24:
a2:1a:81:af:56:01:3b:5a:3e:19:f4:4a:f4:c2:60:
41:f1:84:72:3f:10:ed:bf:a4:0a:ac:c9:c4:77:7d:
ad:8b:eb:be:45:94:90:91:69:87:cf:6f:ef:59:28:
3e:3d:65:86:98:1e:58:68:82:f0:a8:68:cc:e0:97:
a8:49:aa:d6:6a:a7:6c:c9:df:13:59:19:1f:f0:d2:
53:ec:30:46:ae:7b:ea:69:da:d8:f2:bd:1d:2a:5d:
f7:35:3c:46:b3:26:44:83:24:56:e3:26:99:d5:c3:
0b:39:d9:54:88:6e:e7:1b:d8:2d:8d:d9:4d:a4:84:
21:55:7c:92:e7:26:4a:c9:e5:0e:b1:b7:bc:a6:be:
78:b9:6f:3f:9f:69:de:11:3c:ca:c8:4b:9a:6d:a1:
0a:d0:54:54:49:be:68:60:a7:13:69:84:9b:0a:e6:
e1:42:33:fc:e8:62:f2:66:68:de:4a:48:b1:29:1f:
88:aa:da:2e:18:6d:39:dc:da:6f:78:af:aa:86:b0:
cb:b0:02:90:48:81:b3:ad:df:16:9c:96:23:b4:48:
0b:28:e2:ca:17:aa:6b:94:c4:e1:fc:f7:19:a0:3a:
b2:3b:fc:94:ad:06:24:a0:4a:f0:40:31:95:89:dc:
74:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:93:A4:B8:00:48:6A:2E:3F:37:22:E2:A6:DC:2A:80:FD:0C:56:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99ee59c2-843d-35e0-99f8-e8ca7045d847.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.221.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:fc:55:f9:b7:93:a0:86:05:fb:6a:ec:79:4a:b5:14:e9:77:
17:6c:e4:0a:31:2f:90:db:49:c9:dd:10:30:0f:83:99:16:62:
82:f3:fe:59:18:e9:c6:29:a9:3a:f8:28:68:19:64:9b:99:ab:
1e:6e:7e:df:92:45:a7:55:bf:fe:29:a0:73:f9:85:65:8f:db:
b1:19:5e:5d:34:df:5e:21:50:45:2f:34:60:6e:0c:38:a7:b6:
b8:c3:5b:d9:0d:f1:43:c7:d6:d6:5a:e3:e6:aa:d3:27:59:9c:
5a:ba:20:78:a6:20:ea:d9:15:2a:b3:f7:4e:46:56:2c:74:38:
52:dc:01:47:c8:25:ea:fd:b4:fe:e8:da:77:4f:11:01:79:c9:
a1:ac:f6:e8:b2:8e:ba:d9:b9:46:0f:77:e5:56:47:c5:2d:5b:
ae:68:36:8e:58:7b:5f:38:32:66:ae:0a:ee:27:2d:dd:7c:10:
2f:9d:d6:63:a5:c9:0c:58:d9:17:ee:b4:77:b5:af:78:f0:97:
a0:c9:0b:66:79:12:c8:22:65:37:d9:92:58:08:c8:f8:2e:f2:
99:95:2e:97:8a:74:db:24:0f:d1:5f:e7:cd:4d:e9:1b:f3:64:
5d:cf:d5:e9:53:e0:14:bd:9c:af:ff:79:ce:ec:72:2c:04:04:
f5:1b:1b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:47:41 2025 by rpki-client