Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d50e5b85-fd08-3e96-8fc8-c8086689b0df.roa
File: d50e5b85-fd08-3e96-8fc8-c8086689b0df.roa (raw, json)
Hash identifier: Z316XbmKsU1Z9CsVq+0issFxZd3+AxIRS4RaeyBcqBU=
Subject key identifier: 5B:2F:41:F4:C8:4F:B6:D9:33:76:70:88:F5:92:05:3B:33:43:FA:0F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487E506FC0065715D94A1E8200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d50e5b85-fd08-3e96-8fc8-c8086689b0df.roa
Signing time: Fri 10 Jan 2025 02:00:40 +0000
ROA not before: Fri 10 Jan 2025 02:00:40 +0000
ROA not after: Thu 10 Apr 2025 01:00:40 +0000
asID: 16625
IP address blocks: 23.46.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7e:50:6f:c0:06:57:15:d9:4a:1e:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 10 02:00:40 2025 GMT
Not After : Apr 10 01:00:40 2025 GMT
Subject: CN=3e3951b4-870d-43f7-9a1d-d4086a12f0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c1:e9:8f:81:2d:a3:df:5f:4b:42:1f:49:e9:
38:89:ba:b2:6a:9b:08:d8:d9:e7:e0:d5:bc:eb:50:
a1:f6:db:73:47:5f:c5:44:c6:a7:79:68:28:04:44:
31:81:4c:73:74:07:49:eb:30:4c:0d:12:5e:28:ed:
3f:7e:83:3a:ef:ab:ce:dd:b0:e0:95:4e:9f:27:d6:
71:b3:d2:b6:22:fc:04:28:6c:1a:2c:41:7c:8c:09:
f7:cd:55:d2:b0:91:a6:c4:0c:35:7c:e5:8f:86:94:
70:eb:45:ec:5a:d3:19:c9:92:9d:7a:08:ed:e2:24:
01:23:94:15:e6:b9:2f:1f:3c:87:2e:6e:3f:3b:c2:
bd:de:4a:45:1a:c6:86:ef:87:fa:a2:e9:cb:5c:09:
09:08:64:89:c7:b0:3b:cf:f7:40:4f:be:c1:0d:46:
dc:8c:4b:d5:ea:da:1d:d0:2e:93:30:30:cc:f2:b4:
d2:d1:22:9e:dd:c3:17:bf:01:8b:b2:96:bc:d1:01:
d7:9d:e4:55:ad:0c:9b:f6:b4:f7:5c:fa:b7:87:a3:
7b:15:d3:42:b8:d4:83:91:ec:28:54:7a:f5:e2:70:
72:57:e4:8b:b0:fe:cd:4c:0e:d2:89:5b:8d:ac:39:
2a:e6:4d:9e:95:2e:36:3d:82:25:55:e0:d7:d2:9e:
97:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2F:41:F4:C8:4F:B6:D9:33:76:70:88:F5:92:05:3B:33:43:FA:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d50e5b85-fd08-3e96-8fc8-c8086689b0df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.46.244.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:12:9a:e9:cf:e0:f6:ad:54:61:07:cc:e5:e6:aa:03:6f:af:
2c:4f:c9:a2:0a:1c:63:69:83:8d:f7:6b:19:9e:e9:86:05:c5:
44:70:39:73:9e:e4:45:b8:75:93:76:29:7b:b3:22:3d:b7:53:
54:f5:5c:92:32:82:71:ed:af:e8:e7:4f:3e:06:b5:9d:5c:19:
f8:c5:e3:85:1c:e1:0e:79:61:e9:f0:df:ed:e3:57:9c:92:bb:
75:81:97:91:09:44:73:fa:4a:73:b7:3d:78:f7:03:07:12:1e:
b4:c4:d8:06:7c:53:f9:a7:2c:8f:28:fc:dd:e1:34:ff:5d:04:
52:92:3a:da:dc:f4:df:17:73:fe:47:38:01:54:57:2c:74:56:
c6:3c:e1:b9:f5:81:2f:16:7e:c6:18:67:15:eb:51:67:72:6a:
ad:c7:00:c1:7e:f9:6b:32:91:d2:0e:fd:e2:d6:17:52:fa:12:
b6:11:b4:0b:77:5c:3f:fa:be:a2:63:4e:46:0d:81:49:81:d7:
15:85:02:11:6c:86:eb:02:9f:de:09:80:0b:7d:ae:4d:0b:8d:
6d:c3:e9:1e:1a:34:b2:45:e1:4a:dd:4e:52:95:5c:64:b3:02:
cd:8d:1d:6e:b5:16:3a:c2:16:c1:ff:1c:79:2d:b6:5e:fb:ff:
a1:f1:8e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:33:09 2025 by rpki-client