Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f01c5c95-0e8e-3bd9-8960-ac6c7f8887d7.roa
File: f01c5c95-0e8e-3bd9-8960-ac6c7f8887d7.roa (raw, json)
Hash identifier: JgffMjb1aI/i4y9GzgSodDRzC2ixAl4xJk/4DYRFWzo=
Subject key identifier: 52:4F:DE:5E:7E:38:F9:3A:B4:B1:B5:A2:82:CA:30:3C:8C:CA:AD:56
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848897B1CBCAA309E9F2DB6DAE0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f01c5c95-0e8e-3bd9-8960-ac6c7f8887d7.roa
Signing time: Tue 14 Jan 2025 02:00:39 +0000
ROA not before: Tue 14 Jan 2025 02:00:39 +0000
ROA not after: Mon 14 Apr 2025 01:00:39 +0000
asID: 16625
IP address blocks: 23.11.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:89:7b:1c:bc:aa:30:9e:9f:2d:b6:da:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 14 02:00:39 2025 GMT
Not After : Apr 14 01:00:39 2025 GMT
Subject: CN=db18bced-2860-4ee9-9056-77e2f81032ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:12:44:af:0b:f6:20:3c:89:04:73:41:fe:49:
b6:0f:4c:e9:0d:61:e7:c9:48:9a:b8:15:e7:34:09:
b3:bf:97:26:f5:60:20:c2:13:44:88:44:e9:ed:3a:
52:24:10:50:17:8a:6f:48:b0:13:df:78:54:12:ba:
62:82:4e:de:7c:c6:54:a9:5e:24:a9:c0:eb:4f:89:
2b:5f:6a:a8:08:04:a5:a0:1a:3c:d2:65:ff:b1:2c:
2f:9f:43:0f:af:f4:a9:67:e8:e6:1d:78:80:9d:d8:
ff:97:71:78:bb:2e:e0:d3:41:73:ba:34:95:6b:4f:
af:fd:5f:56:e1:75:93:68:e6:40:77:e5:b3:5c:33:
eb:94:df:37:02:a2:93:10:ab:61:a7:30:b7:56:ba:
c7:8b:c5:c2:32:79:24:56:ea:a8:6b:ea:e9:cc:3e:
54:4b:ac:f2:9c:11:f4:36:40:1b:37:96:e0:67:86:
09:6c:72:d5:4e:ed:72:ba:9c:7e:74:05:ea:22:02:
02:41:2c:52:de:62:d9:68:2c:88:c8:c5:ad:04:de:
bf:80:88:cb:7e:11:8e:6f:25:d8:da:f1:16:f0:3f:
b6:52:8d:97:af:a0:7f:fc:35:9a:fb:de:38:81:64:
4d:21:0a:2d:85:6e:1f:a9:eb:aa:0c:f1:8f:38:7d:
8f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4F:DE:5E:7E:38:F9:3A:B4:B1:B5:A2:82:CA:30:3C:8C:CA:AD:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f01c5c95-0e8e-3bd9-8960-ac6c7f8887d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.11.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:af:0b:02:bd:c8:1d:33:17:20:f4:5d:af:3b:f5:22:be:78:
40:df:80:eb:dd:65:1a:69:71:b5:9c:0c:43:f8:dd:73:ab:de:
97:7e:e5:25:c6:0e:6b:06:87:da:1c:f4:d1:f2:82:ba:58:68:
a0:f1:89:da:fc:f1:ff:7f:44:43:04:74:ba:a0:f3:8a:35:58:
84:51:2e:f5:64:08:d0:2c:6e:52:8f:be:01:db:85:ab:59:07:
c6:c4:70:66:9e:5d:ce:0a:ad:eb:1c:6f:00:1e:a9:dc:7f:bc:
fb:7f:37:fb:f3:4b:8f:66:2d:2c:14:4d:dc:19:f7:6d:6e:40:
42:e4:80:d8:cb:8b:4d:76:83:96:da:9a:26:f8:5e:cb:20:c7:
07:8a:23:34:04:d0:d1:ba:1e:64:7d:db:94:d7:73:24:cf:13:
fd:a6:2a:87:6b:e8:3d:a4:a6:01:23:35:f3:d4:15:c3:64:aa:
f0:6f:6a:39:a2:09:b5:e8:5c:7a:14:e5:e5:ca:f9:b7:7d:82:
f1:41:92:c4:db:84:66:27:fd:73:a8:ba:7b:29:00:b4:5a:eb:
ab:7c:ba:9b:3a:02:c2:73:65:b3:1c:e1:84:88:c6:94:99:eb:
72:07:87:6e:90:95:2e:ce:d4:78:31:09:a5:d0:0f:8f:9b:61:
cd:bf:69:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:38:25 2025 by rpki-client