Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a84df5d8-4635-354c-8b40-a24cdd0b7288.roa
File: a84df5d8-4635-354c-8b40-a24cdd0b7288.roa (raw, json)
Hash identifier: 9T5QDNymIiPSmgXSd8EHnOvIzGQyJKEeUs1xsiPW1Gk=
Subject key identifier: 63:6C:0B:40:1F:8D:70:3E:CF:6F:7D:A0:54:D6:12:0A:67:AE:38:48
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584843B00CD7A19921D249DC8480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a84df5d8-4635-354c-8b40-a24cdd0b7288.roa
Signing time: Fri 20 Dec 2024 02:00:40 +0000
ROA not before: Fri 20 Dec 2024 02:00:40 +0000
ROA not after: Thu 20 Mar 2025 01:00:40 +0000
asID: 16625
IP address blocks: 23.7.96.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:43:b0:0c:d7:a1:99:21:d2:49:dc:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 20 02:00:40 2024 GMT
Not After : Mar 20 01:00:40 2025 GMT
Subject: CN=29d79198-158f-445c-a8af-e22ada2819c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2c:2d:4b:fa:80:76:bb:5f:eb:7c:48:70:54:
d5:02:78:16:e4:4c:c2:48:71:eb:03:2f:48:38:ee:
cc:ef:ef:fd:76:93:7c:14:ff:17:c5:30:ab:2e:f9:
55:00:ea:c7:34:4b:bf:8f:e3:b8:20:71:24:06:ae:
e7:02:50:3f:c8:95:aa:31:ca:4d:79:a5:d6:4a:b1:
db:17:d9:ee:59:cd:b1:2f:6e:3f:95:62:94:2b:eb:
83:6b:30:84:3c:ec:60:82:8c:90:a2:8d:fa:17:35:
31:f9:41:5b:de:25:0f:64:3d:a7:ab:9a:14:dd:00:
17:75:74:be:1e:4f:8e:b7:09:e4:ce:c5:c1:6c:25:
1f:97:66:c3:a9:4d:5a:16:c4:8f:d0:e0:6f:cf:84:
0b:97:92:68:0f:36:fe:88:d5:4e:c8:6e:72:3a:be:
bc:3b:cf:fb:77:cc:05:69:34:62:15:e1:23:4c:e9:
6a:d2:bb:be:c5:9b:a2:fa:24:47:3b:1c:4b:ba:da:
fa:b9:9f:96:20:4a:bc:46:1f:0d:f7:2c:16:1f:50:
8a:ac:9a:f7:6f:b7:ec:65:55:61:46:a9:4d:80:69:
e5:28:01:24:c9:ef:3f:d1:cd:d0:ca:ec:ec:1a:ae:
67:f7:55:36:ff:ec:0c:00:71:69:b0:76:bb:df:41:
57:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6C:0B:40:1F:8D:70:3E:CF:6F:7D:A0:54:D6:12:0A:67:AE:38:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a84df5d8-4635-354c-8b40-a24cdd0b7288.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.7.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:99:5d:1f:7e:4a:ea:82:eb:91:15:0e:c6:c1:c3:ca:4d:8c:
60:d9:6d:f8:d4:56:12:44:dc:52:35:5e:ff:56:9a:3f:d9:52:
7c:12:fa:3e:75:0f:29:be:2d:19:bb:22:44:3c:ee:3e:20:54:
cb:77:dc:f2:29:f1:54:80:99:7b:e3:f8:41:42:7d:cc:53:89:
e7:99:a3:ca:98:f5:71:c9:e1:01:51:72:0d:2e:ef:d2:b7:a5:
38:83:b5:16:25:c3:c2:f7:17:27:72:6b:b0:07:9b:ed:cf:17:
91:ae:a4:d5:82:7b:79:e0:0d:e7:01:da:71:f8:e3:3e:cd:8d:
a7:fc:72:6a:38:91:dc:7a:8a:fa:43:82:bb:f8:02:e4:d2:e3:
58:f6:b9:72:ab:1c:bd:59:1a:56:a0:5a:03:3a:98:68:dd:82:
d3:3d:e9:a7:99:c7:98:6b:ae:40:20:8e:e1:64:59:c9:af:40:
8e:9d:3c:9b:7d:01:72:18:ab:be:24:f2:3a:ec:d0:60:97:3e:
db:40:7d:44:4e:e1:d5:84:f5:20:b9:98:d0:62:da:9e:b2:db:
c2:2b:ba:a7:1a:01:50:de:fb:ab:b6:88:d3:40:fd:4e:3d:70:
42:b2:a6:8e:c9:ba:bc:76:a7:41:6f:60:a7:bd:9d:01:c4:5a:
3a:6e:d7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:47:08 2025 by rpki-client