Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c31ab601-db48-30c1-8e79-153473cfb148.roa
File: c31ab601-db48-30c1-8e79-153473cfb148.roa (raw, json)
Hash identifier: 26jOc9T0jovZ5i9zWNQOgi13q7K+GvZ749Em0dPv/ss=
Subject key identifier: 5B:00:07:2D:0A:C6:42:C3:E6:85:D1:FC:9C:65:DC:6D:2C:A9:9E:82
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848610058BEB01FFB10FEFD9880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c31ab601-db48-30c1-8e79-153473cfb148.roa
Signing time: Mon 30 Dec 2024 14:00:51 +0000
ROA not before: Mon 30 Dec 2024 14:00:51 +0000
ROA not after: Sun 30 Mar 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.220.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:00:58:be:b0:1f:fb:10:fe:fd:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 30 14:00:51 2024 GMT
Not After : Mar 30 13:00:51 2025 GMT
Subject: CN=a3f5f6de-b7cf-4e15-b5b0-c3c115b16d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3a:d9:d1:b1:3e:84:d1:c7:6b:e8:73:09:0d:
6c:49:ee:01:de:c8:ca:62:7f:fd:5e:8f:88:1e:72:
3b:2d:26:da:11:9c:9a:4d:70:f0:c6:6a:83:45:24:
f7:9d:b9:98:08:9e:cb:6b:d5:8d:8e:c4:db:ae:57:
40:0c:13:27:b1:4c:ca:24:49:b2:4f:cd:93:2a:96:
49:98:b6:f7:88:c3:52:f6:94:53:cd:a2:5e:87:43:
d9:57:b2:4d:b8:a9:fb:97:b1:15:c2:7e:ff:e2:d4:
cc:82:d5:d9:0b:3d:4b:18:7b:df:af:fc:1b:c0:b8:
52:2b:74:3d:5c:b9:2a:ed:d0:a0:54:70:4c:34:67:
88:1f:d4:47:5e:f8:07:80:a6:e6:20:05:0c:ae:c4:
7f:3c:6e:98:1b:cd:1d:ec:44:80:fc:83:95:db:c0:
17:35:a4:6a:09:9f:2f:43:2d:c3:5d:f9:1b:13:87:
c3:7d:fb:30:ae:14:63:23:47:78:6c:01:74:26:87:
1a:cd:99:b3:eb:bd:bb:16:05:8b:32:8f:b0:8e:b3:
15:c4:af:44:1c:69:6f:f7:f8:fd:c5:97:6d:65:72:
e2:da:d0:e5:4a:f9:ca:a1:80:fc:99:83:05:92:15:
ad:f1:21:8f:72:4c:d4:7a:13:a0:2c:d7:29:29:81:
19:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:00:07:2D:0A:C6:42:C3:E6:85:D1:FC:9C:65:DC:6D:2C:A9:9E:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c31ab601-db48-30c1-8e79-153473cfb148.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.220.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:f9:2a:ce:ea:d3:60:72:40:b5:0c:ba:ab:08:f2:ed:d1:d4:
ab:ff:8b:1d:0a:34:93:32:f5:81:41:88:4b:47:19:14:93:0d:
d2:9b:1a:e9:07:93:3d:90:c4:ca:b9:02:45:f9:81:60:64:c2:
80:db:b6:d4:57:9d:91:f5:53:6f:80:1f:b7:49:3b:df:3f:f3:
fd:3b:4d:5b:90:f5:bd:c7:ef:c8:92:89:55:bf:6f:b1:de:eb:
dd:35:23:e2:37:19:af:05:33:c9:ba:df:55:1a:ba:04:8d:3c:
57:1d:7b:76:00:85:7d:7f:d4:80:89:64:73:75:e1:f0:a0:0d:
aa:ae:41:58:97:79:a4:96:b5:7f:d2:52:ff:02:ad:be:ed:28:
21:30:40:e1:4e:6c:db:75:b5:ed:73:1d:32:26:f8:63:42:0d:
26:e9:cf:6c:80:5e:0a:cc:fa:c2:11:91:4d:a7:36:f8:43:53:
6c:75:bf:85:16:b2:35:23:93:ea:b6:13:88:f1:0d:98:72:c5:
04:72:43:e3:d7:9f:96:3b:95:a4:a2:f1:d4:bd:6f:51:f7:b7:
42:93:0f:11:4c:e1:65:27:d3:09:0d:78:29:bf:b1:4e:d1:6f:
e6:6f:a5:92:5b:db:53:36:0a:40:7e:1f:5f:ca:68:f0:8e:fd:
ca:65:4b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:38:18 2025 by rpki-client