Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb4469e5-567b-34c6-a3cc-e43cef49dd75.roa
File: fb4469e5-567b-34c6-a3cc-e43cef49dd75.roa (raw, json)
Hash identifier: eS4V5K7NoVqGFBF5CXYyB6SmTba5jKnezZt82hkIe8s=
Subject key identifier: EC:BA:DF:0C:E7:64:1B:CF:56:68:9A:29:07:4C:8B:0B:7B:74:D8:58
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847ED24DE5A8208D41F9E6DC760
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb4469e5-567b-34c6-a3cc-e43cef49dd75.roa
Signing time: Tue 19 Nov 2024 02:00:27 +0000
ROA not before: Tue 19 Nov 2024 02:00:27 +0000
ROA not after: Mon 17 Feb 2025 02:00:27 +0000
asID: 16625
IP address blocks: 23.222.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ed:24:de:5a:82:08:d4:1f:9e:6d:c7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 19 02:00:27 2024 GMT
Not After : Feb 17 02:00:27 2025 GMT
Subject: CN=319f009d-8ee1-4536-bff3-738d59241e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f7:02:74:20:e2:ec:83:e6:e6:ef:3f:6e:ae:
49:a6:0a:d2:81:8a:1d:f1:84:61:a0:01:fc:99:53:
b6:3d:1e:ad:00:32:a8:d8:54:27:a2:50:6b:87:2b:
0b:1a:ee:a6:4e:cc:34:b3:67:bf:b0:d4:54:67:22:
59:b2:0b:40:0c:b7:b6:b7:83:1b:dd:1e:f5:1e:8c:
a6:35:71:e8:33:57:ae:76:a1:5a:23:4f:df:cd:22:
07:d2:4d:1a:cb:f4:72:6c:11:4b:fa:ba:cf:3f:68:
f1:68:26:d6:98:13:b0:31:05:b1:75:ec:33:b5:01:
00:28:c9:f4:a3:b0:93:ad:20:65:37:b7:8d:51:35:
51:1e:05:91:fb:9c:d8:37:e9:aa:ab:cf:4b:c6:7a:
4b:60:d1:2c:e3:e6:4b:a1:66:7e:87:83:69:f2:a7:
f7:29:20:09:1e:92:ce:4b:86:14:df:09:45:1d:f8:
ed:1d:62:60:5c:99:fc:5f:e2:44:d8:a7:54:c0:f7:
e8:c6:18:8b:2e:33:af:e7:72:f1:bb:40:b5:f6:f2:
b4:3e:9a:d9:f1:b7:70:0d:fa:61:9d:2c:9d:41:a3:
6b:6e:43:82:b4:a5:7c:56:b1:48:d1:35:22:55:a5:
36:5d:5d:7b:31:82:b5:52:1f:99:e7:88:74:42:c8:
54:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BA:DF:0C:E7:64:1B:CF:56:68:9A:29:07:4C:8B:0B:7B:74:D8:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb4469e5-567b-34c6-a3cc-e43cef49dd75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.222.224.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:24:af:88:50:f0:61:07:24:65:15:bf:39:99:67:07:1d:94:
e8:e2:f4:27:a3:ce:c5:0e:7c:1a:0a:3f:65:f6:2e:0c:3a:26:
17:08:74:f6:72:67:28:d6:c8:3a:57:be:f9:c0:4d:ae:de:fc:
e6:ff:92:f1:5d:43:c0:2a:ec:4d:b7:db:f0:18:10:fc:b4:31:
2e:a7:16:7c:c8:9e:ee:2d:08:ed:ec:fa:30:ea:82:51:2f:d0:
b8:0d:74:d5:51:46:15:c9:f8:a5:d0:86:d4:1d:ac:8f:11:11:
9e:f8:26:54:28:61:b0:41:f5:a5:6c:35:e2:3c:09:42:ee:55:
35:6f:99:62:34:7d:4e:1b:3d:6a:36:53:7b:da:2f:92:01:dc:
30:97:27:4f:a7:e6:b2:7a:6f:46:3c:25:bf:5c:c3:53:ae:ca:
29:f3:96:c6:ec:cb:bc:a9:1f:fd:fe:d4:a8:0d:a2:ad:2a:ab:
4b:5c:42:d8:8e:c1:4f:0c:9a:cc:e6:73:23:e3:98:b0:60:99:
22:81:a4:f7:ca:1f:fd:c4:64:6c:2d:0e:36:ca:af:f2:2f:fa:
c1:ee:b8:f2:89:9d:c6:e0:da:90:fd:b3:20:8b:8d:b4:ce:75:
99:06:f2:d7:5e:27:c1:68:de:34:b3:33:f9:43:61:e8:84:85:
63:5a:de:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:22:03 2025 by rpki-client