Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e68999e3-4386-305a-a9ae-56e2186286d1.roa
File: e68999e3-4386-305a-a9ae-56e2186286d1.roa (raw, json)
Hash identifier: Bk3IGy1WhM7EkTG4cq/rWtlqXPsXo9mAm4A9uLVmrzo=
Subject key identifier: B8:52:B7:B0:84:7B:9E:F0:DA:1C:23:73:5E:B2:62:2A:F1:EA:00:1B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584883E5CCE373991B26D4FA4E60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e68999e3-4386-305a-a9ae-56e2186286d1.roa
Signing time: Sun 12 Jan 2025 02:00:38 +0000
ROA not before: Sun 12 Jan 2025 02:00:38 +0000
ROA not after: Sat 12 Apr 2025 01:00:38 +0000
asID: 20940
IP address blocks: 23.50.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:83:e5:cc:e3:73:99:1b:26:d4:fa:4e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 12 02:00:38 2025 GMT
Not After : Apr 12 01:00:38 2025 GMT
Subject: CN=76ed26d8-ef4a-4179-b222-386a87caf2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:70:39:de:83:51:6f:6f:27:79:92:2e:8c:
9c:58:d8:8b:63:87:9d:ba:1e:ed:b0:b7:24:6c:34:
78:fb:ce:c0:5b:5a:26:6b:d2:72:d4:6f:48:6b:bf:
27:bf:4a:1d:eb:ed:b6:c6:3a:71:5d:bc:d8:c2:94:
c5:d1:14:5a:fa:6f:26:5a:45:08:b4:7c:60:86:ff:
3f:1a:9d:17:89:26:0d:1f:24:34:6c:63:9c:95:8e:
70:79:27:5d:54:d9:f9:cb:5b:4a:d3:81:26:dd:e9:
3b:49:4e:03:88:e3:2d:07:09:79:27:b4:8d:95:d9:
96:3a:d8:ce:e1:b2:48:58:38:b0:31:15:c8:ee:80:
12:54:4b:c5:28:89:bb:50:6e:de:ba:49:ce:ff:bc:
bb:9a:ed:23:82:c2:aa:ca:ab:6a:ea:9d:76:ca:81:
f1:f6:6a:6f:b2:ad:98:9b:9b:7e:08:46:5f:8c:0b:
54:51:11:5c:7e:04:3d:09:d1:76:ee:79:9a:0e:1c:
ea:64:b5:50:9c:ca:d8:42:9d:e7:26:e4:e8:22:bc:
32:45:25:b4:2b:f8:d6:d6:0b:e5:67:67:e3:2f:77:
05:c9:73:a5:96:09:60:1d:6b:62:14:85:b7:49:8c:
21:f3:63:0f:24:19:15:f5:06:aa:3d:82:e4:59:ba:
26:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:52:B7:B0:84:7B:9E:F0:DA:1C:23:73:5E:B2:62:2A:F1:EA:00:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e68999e3-4386-305a-a9ae-56e2186286d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.50.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:9e:53:86:7b:51:d7:ab:14:8b:0e:af:a1:f7:17:f8:3b:58:
32:35:f5:3b:ea:f5:7e:70:a7:e9:96:c0:cb:d1:f9:08:a5:72:
de:85:fe:92:82:fa:41:00:36:8b:d4:69:17:8e:09:37:91:5b:
6c:93:8a:88:d4:7f:22:12:fb:9b:e4:b8:d7:a7:87:60:98:a7:
91:45:5e:c5:ff:ae:44:28:c7:1e:0c:dc:5f:a8:f6:c2:80:ba:
93:fb:de:0c:b4:b0:4c:a8:7a:c2:3e:3f:ee:e3:9d:f5:24:b1:
ed:0a:6a:77:bf:6c:b1:ab:5d:d6:8f:bf:d8:91:05:72:37:9c:
24:35:31:3b:3d:cd:6d:62:6b:a6:68:c2:67:0a:c0:a4:a3:96:
46:f2:87:6f:a6:a0:c4:95:84:8e:b3:ec:95:36:8b:db:c3:3b:
ae:d0:69:22:d7:06:e5:53:1b:87:dd:ce:25:ae:7f:75:3a:56:
3e:52:b3:a5:9e:4d:41:8d:10:61:61:f4:24:bd:c9:f0:5e:27:
03:cd:26:f9:01:98:ab:db:f9:11:ef:42:26:40:98:28:26:b8:
68:75:de:67:15:57:fc:df:66:57:b5:df:6f:44:df:18:4a:6c:
1a:cb:85:83:8b:8b:95:0a:b0:65:80:ce:22:8b:72:fc:95:3d:
73:b8:5d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:58:44 2025 by rpki-client