Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5e28a06-9e4f-30d4-9837-b0b9835d8828.roa
File: c5e28a06-9e4f-30d4-9837-b0b9835d8828.roa (raw, json)
Hash identifier: CDj14pqfn9a53RlT5QCO4nGlIin8vya4bfcyhY9AAJ0=
Subject key identifier: 18:1A:28:10:86:5E:F1:B5:33:B5:1E:01:AF:E5:46:36:C7:4E:19:D2
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847F584DEB6495BD5C07BC7EA40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5e28a06-9e4f-30d4-9837-b0b9835d8828.roa
Signing time: Fri 22 Nov 2024 02:00:40 +0000
ROA not before: Fri 22 Nov 2024 02:00:40 +0000
ROA not after: Thu 20 Feb 2025 02:00:40 +0000
asID: 20940
IP address blocks: 23.221.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f5:84:de:b6:49:5b:d5:c0:7b:c7:ea:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 22 02:00:40 2024 GMT
Not After : Feb 20 02:00:40 2025 GMT
Subject: CN=2df475d1-7cc8-49a5-8bb5-54793843e5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3a:05:9b:c7:bd:86:85:8e:69:9b:fb:d5:cd:
11:e5:69:56:14:7d:d4:1c:60:8d:d1:09:ab:35:5f:
2e:82:da:69:38:bc:e6:f9:21:b3:eb:79:59:4d:9d:
ab:21:62:ec:9c:9d:6e:09:8a:56:43:20:3c:b0:4c:
58:24:a7:29:ba:83:3a:36:a6:a8:e0:a2:79:0e:8d:
78:46:3d:0a:2a:2d:b4:58:db:05:a8:dc:1b:8a:57:
79:17:fd:42:9c:c6:ac:23:07:55:cb:e7:c5:ec:f5:
29:7c:39:e5:79:f5:78:02:0a:ec:22:6b:73:1e:62:
6e:a1:7b:10:16:e8:53:ff:d3:81:18:20:99:d2:05:
8c:bd:fa:ac:68:9d:d9:ae:88:07:ec:c4:ca:00:a6:
54:06:f7:43:52:2f:11:f5:3d:82:c9:48:17:32:c4:
37:8b:9e:25:9f:14:87:48:f2:51:9a:e0:4b:11:36:
c2:65:5e:e1:f6:de:b7:7a:9d:30:6c:8b:d8:42:2d:
e7:17:4e:56:78:73:68:09:ab:54:a4:d0:bc:03:f1:
e8:da:98:28:f6:b2:fa:80:1f:6b:fd:d7:49:36:7b:
e6:0b:76:6f:4a:ae:fe:15:a5:f6:90:74:5f:14:9c:
80:bc:ad:bc:36:75:ac:c4:6e:25:8d:96:08:53:cb:
f9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1A:28:10:86:5E:F1:B5:33:B5:1E:01:AF:E5:46:36:C7:4E:19:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5e28a06-9e4f-30d4-9837-b0b9835d8828.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.221.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:4b:63:2a:c1:54:15:f4:4d:d7:3d:e0:f6:b1:08:5c:95:f0:
f5:78:ea:1a:ab:ea:61:6e:e5:fc:d5:b1:3a:a0:09:27:e8:e3:
51:0e:0c:df:ea:0b:c2:7a:b7:95:cf:c4:d2:78:54:bd:8d:5c:
59:2d:d5:ba:73:d6:43:d3:fd:a1:70:77:e2:a8:26:cd:00:7c:
f7:24:2b:41:03:25:96:b0:34:8f:7e:b8:be:68:70:4c:50:b4:
60:75:9f:c0:44:d8:f5:e2:c8:ab:f5:93:a4:ea:f1:5f:67:c4:
5d:61:f8:55:c1:05:29:0c:d8:0e:1a:59:f8:91:7a:1d:13:76:
b2:4a:f6:e4:2c:3d:d4:ac:1a:35:72:22:88:c2:6c:51:54:bc:
e0:4a:45:d7:47:05:b6:02:6f:55:01:c1:f4:bf:59:3f:79:62:
0e:4d:87:6d:bb:6c:05:ad:dd:1e:e5:18:9a:72:67:7c:63:5d:
3e:f9:f0:3e:27:46:e7:2c:dd:39:56:e2:01:19:d7:4c:ea:d7:
de:0d:ac:c6:2f:a2:4e:8c:eb:75:0b:07:e2:6d:d7:24:a2:cd:
79:3a:04:fc:8e:21:71:32:6a:e1:85:43:5e:45:b1:32:b7:9f:
6d:1b:53:bc:b5:6b:9a:bc:fa:6a:6e:e1:5f:6e:90:5a:dd:c4:
32:4b:f3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:32:50 2025 by rpki-client