Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/caf2a602-fc5a-3652-afc5-bb559f8acfb9.roa
File: caf2a602-fc5a-3652-afc5-bb559f8acfb9.roa (raw, json)
Hash identifier: rCRNF5iC6kVRHHxTUJauqdNoRtR9GldL0SLWTOh3t0w=
Subject key identifier: D0:71:B5:9F:17:79:E8:05:BD:46:70:D6:75:C1:55:29:1C:74:D9:27
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858484515A00D8AEFD00353BDBF00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/caf2a602-fc5a-3652-afc5-bb559f8acfb9.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.10.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:a0:0d:8a:ef:d0:03:53:bd:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=9ec4e4c1-1501-43ac-9627-afc93f3341e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:df:55:18:18:4e:ac:22:55:a0:2b:df:b1:5f:
a4:5f:fe:84:83:7c:7e:50:ca:6a:d4:fc:6b:c8:a6:
b0:54:b6:df:c8:e6:1a:e3:ce:24:31:a2:e2:82:da:
01:fd:d4:46:b4:f2:06:15:4a:23:86:c3:83:2f:a2:
36:32:c5:c8:5d:1f:a9:7c:34:8f:23:6e:c0:2c:e9:
62:e6:d6:6a:ae:86:f9:ff:7d:48:fa:a7:c2:e2:ed:
48:8e:1d:fe:d7:f7:d6:d8:96:2a:0f:af:bd:fd:33:
c1:f8:5b:66:66:cf:a4:a4:97:ba:b1:6f:91:04:36:
79:68:25:80:22:cd:91:23:c9:ec:30:8a:a6:63:96:
eb:36:0a:24:b0:6c:85:f6:a8:04:02:48:82:58:a3:
64:5a:68:b5:50:1e:bc:95:b1:1f:94:cc:75:db:bb:
18:c3:83:de:84:cd:f3:2f:b9:a9:06:04:88:97:28:
69:39:23:8a:a0:3a:fe:90:93:39:8c:69:22:08:32:
45:e7:32:4e:fa:57:1a:af:2d:a7:08:f8:1b:bc:e1:
a0:e4:4a:77:9b:f4:5d:9d:99:b8:84:64:06:90:0c:
83:b2:ef:63:f3:58:1c:71:f0:da:da:e0:69:5b:a2:
61:15:d2:ce:da:90:71:e1:52:1d:23:05:1d:ef:27:
89:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:71:B5:9F:17:79:E8:05:BD:46:70:D6:75:C1:55:29:1C:74:D9:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/caf2a602-fc5a-3652-afc5-bb559f8acfb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.10.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:b9:7a:24:be:7e:97:5d:d2:34:a1:45:c4:a4:a0:5a:fb:c8:
b2:ed:49:1b:15:0a:08:c5:42:38:8c:59:79:b4:df:9a:b8:66:
3c:f1:33:ea:cf:c5:b9:49:2f:3b:8c:95:e8:a9:92:1a:78:6c:
84:2f:e9:b3:d0:39:f6:58:8b:87:cb:8b:a3:b2:34:ac:47:7e:
fe:4e:f2:49:94:43:ee:a7:ec:d3:91:86:1c:4a:60:5c:fb:02:
b3:e1:59:a0:4d:3a:a8:be:b4:4d:dd:0e:21:8f:99:6f:6f:2b:
b1:cd:6f:7d:d5:10:82:a1:a2:e5:22:94:5d:a1:6b:86:a4:77:
0e:86:66:3b:a4:8d:e1:e1:49:c2:67:8b:5b:39:45:7e:49:47:
50:50:3c:65:3b:91:03:3c:fe:61:c3:5d:c8:13:b3:63:ab:ca:
c2:35:57:0b:7a:98:ba:40:36:a8:58:09:05:1e:1e:cb:b9:1c:
d3:b7:02:cb:33:d4:51:90:be:4f:af:dc:40:20:70:f7:a4:fc:
e8:65:5b:2d:c9:7f:2f:b9:a6:38:0d:19:91:7a:6a:49:de:93:
2a:d6:63:5c:34:03:66:1c:2d:44:9a:bd:9e:3a:5b:d4:ac:94:
e4:1d:42:c2:72:f4:27:8a:cf:97:b9:d3:e8:9a:73:ad:08:81:
51:61:8b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:55:42 2025 by rpki-client