Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bcad7221-dde8-3e43-b459-3f5879926769.roa
File: bcad7221-dde8-3e43-b459-3f5879926769.roa (raw, json)
Hash identifier: afldyaNhra6RrkXLv+XcjZEFB4PxXXu26arFtZXnpeU=
Subject key identifier: F8:6B:DD:9C:B5:FE:DA:A1:98:86:E4:C0:C0:F5:B4:E0:5A:CC:2A:A2
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858480A751A7F3F7D6B6A95A26940
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bcad7221-dde8-3e43-b459-3f5879926769.roa
Signing time: Fri 29 Nov 2024 14:00:51 +0000
ROA not before: Fri 29 Nov 2024 14:00:51 +0000
ROA not after: Thu 27 Feb 2025 14:00:51 +0000
asID: 20940
IP address blocks: 23.206.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:75:1a:7f:3f:7d:6b:6a:95:a2:69:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 29 14:00:51 2024 GMT
Not After : Feb 27 14:00:51 2025 GMT
Subject: CN=8ce3bca1-34c2-4df0-a1b6-90026476a946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:44:cb:67:3d:7d:bf:51:2f:c1:0c:bb:71:e5:
0e:7f:5b:d2:71:87:55:73:55:c1:c3:eb:a3:3d:cc:
07:31:38:29:64:a1:c0:03:3f:75:8d:b6:65:c2:ac:
89:0e:12:81:fc:ef:da:16:f5:a7:a4:52:e6:39:1d:
cf:ce:29:96:ae:99:14:3b:f9:02:54:70:b0:a5:35:
9c:62:5a:8b:31:a7:ee:62:93:e7:b4:f4:0c:c5:54:
77:fc:ae:86:62:30:17:44:30:0e:1e:94:32:84:5b:
f0:ae:bb:28:67:bc:41:c1:f5:b9:a1:24:66:55:1a:
40:b7:4a:78:d1:4f:75:98:7f:c8:f4:66:8f:d1:6b:
cd:e0:b2:5d:45:b6:04:4a:a6:da:6f:ff:4f:b8:cf:
c8:d6:b1:19:e2:d0:64:91:ae:4f:46:ef:43:51:70:
b4:d1:04:37:43:58:87:e0:6f:37:be:ab:a9:a4:70:
6d:6e:12:4e:08:ca:31:42:5e:38:5f:cc:92:5a:19:
8d:d8:9b:75:36:31:65:ee:3d:71:19:83:f4:66:94:
62:5c:64:14:e2:3b:55:08:43:cc:47:6e:8e:f6:e3:
73:a0:9e:28:2b:30:be:9f:6c:fb:53:4d:61:da:41:
e4:ea:c7:ea:8b:48:5f:c5:c3:3a:cb:42:5a:90:26:
95:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6B:DD:9C:B5:FE:DA:A1:98:86:E4:C0:C0:F5:B4:E0:5A:CC:2A:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bcad7221-dde8-3e43-b459-3f5879926769.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.206.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:c7:79:36:29:f2:f1:dc:f7:52:cd:36:7e:1a:b7:8b:56:dc:
6a:06:44:b4:c8:1b:f4:54:e9:ea:82:57:88:4f:1d:5b:59:8c:
01:c9:48:9a:fe:60:e9:18:ee:40:6d:db:c7:b3:61:43:b4:33:
09:37:cd:e4:8d:92:7e:8a:f2:bb:83:2d:ee:e4:87:f4:eb:61:
4f:0e:5a:92:f7:93:25:14:ae:66:df:dc:68:9f:45:d8:68:6d:
c6:d8:6e:02:47:78:48:b4:c5:ec:9e:02:37:77:56:53:15:4d:
aa:9c:9d:96:d8:cf:42:9a:60:a5:2a:a9:ca:80:2b:c7:f3:0a:
1b:33:75:98:f2:89:ee:df:c5:9f:fa:73:df:c4:ab:21:ca:78:
5f:43:7b:00:60:e6:69:e2:ad:35:df:1f:8b:d1:12:1f:72:20:
4b:8e:5b:83:4f:c2:f7:02:7b:02:48:f5:3c:38:80:67:08:96:
d6:ba:56:c0:3d:cb:41:14:10:99:0b:72:3b:4a:3a:da:ea:9b:
c3:82:18:dd:fd:ff:28:54:2d:bf:a7:3c:cd:dd:44:65:c9:6b:
de:ad:86:b5:87:14:22:0e:91:cd:23:af:70:3a:e1:21:e3:49:
77:4b:b1:a6:68:df:03:44:6d:6e:a0:17:32:ac:93:c4:7e:ff:
3f:86:52:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:52:33 2025 by rpki-client