Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/a2c5eb7d-3715-3ee0-988c-e51cfb57a945.roa
File: a2c5eb7d-3715-3ee0-988c-e51cfb57a945.roa (raw, json)
Hash identifier: 5LXw/i16lKI6XaO8DsT/LR3R/NZmkX0cO7UKIHMmzo4=
Subject key identifier: 6B:CB:E7:5F:8B:3C:9D:C4:7E:7E:12:D7:FD:1C:4F:F2:7C:1C:4C:A6
Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Certificate serial: 010D0C9F43285847FB1A310E9E606D46E21984E0
Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/a2c5eb7d-3715-3ee0-988c-e51cfb57a945.roa
Signing time: Sun 24 Nov 2024 02:00:27 +0000
ROA not before: Sun 24 Nov 2024 02:00:27 +0000
ROA not after: Sat 22 Feb 2025 02:00:27 +0000
asID: 5645
IP address blocks: 23.233.0.0/17 maxlen: 17
23.233.104.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:1a:31:0e:9e:60:6d:46:e2:19:84:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Validity
Not Before: Nov 24 02:00:27 2024 GMT
Not After : Feb 22 02:00:27 2025 GMT
Subject: CN=89d6fec0-35a7-434a-9794-fe38c1b39bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e9:ba:2f:76:c9:4b:12:e4:03:50:75:8d:0e:
cb:43:02:00:de:27:d9:84:a8:f2:bd:bb:7f:ff:37:
b7:fa:5b:67:90:8d:fd:80:62:60:d0:84:f0:51:c2:
eb:6f:4c:b0:58:cd:3f:41:2c:8b:1c:f2:d4:fa:14:
d3:5d:9c:a5:e6:f2:39:5b:23:dd:65:fa:59:74:36:
db:70:c1:35:a8:c1:6b:fe:90:7a:94:18:3d:18:aa:
ba:66:b6:72:a9:67:b3:85:24:4c:31:18:e9:5e:66:
a6:7c:2d:62:fc:f9:28:e5:59:54:68:ed:c3:ea:fb:
77:b4:fd:0e:c1:48:e7:5b:ab:09:ff:52:8d:54:fd:
24:fc:9f:99:6d:11:53:08:3f:6c:ed:d5:98:c1:35:
35:97:67:c9:5c:90:33:14:98:64:51:82:66:d6:24:
15:b9:d2:32:10:a5:0c:98:27:9d:41:43:3f:01:c3:
c6:21:f1:ef:bf:2c:fb:5e:0e:70:f5:0e:22:10:38:
b3:36:0c:cc:29:bf:b6:ca:51:2f:78:15:c4:cc:d2:
f9:74:fa:f0:b4:d5:73:e1:0b:c6:b3:e0:66:0c:f9:
08:65:2d:ba:77:76:fe:e8:46:93:41:d1:c8:1b:d5:
a5:01:b3:80:1f:e7:35:b1:fa:4a:ef:3f:0f:e0:6b:
aa:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CB:E7:5F:8B:3C:9D:C4:7E:7E:12:D7:FD:1C:4F:F2:7C:1C:4C:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/a2c5eb7d-3715-3ee0-988c-e51cfb57a945.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl
X509v3 Authority Key Identifier:
keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
sbgp-ipAddrBlock: critical
IPv4:
23.233.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d0:6a:12:56:a3:f1:6c:da:ff:21:b4:11:d7:e8:eb:cd:b2:2f:
e9:bd:99:d6:44:4b:22:5c:1d:df:e1:9d:b6:9c:51:22:c7:64:
b5:e1:2a:7b:82:31:f7:89:44:ec:ad:4b:31:de:82:f1:1a:a3:
cf:26:1b:75:b7:a4:25:24:40:9d:f7:3d:6e:45:2e:c7:21:88:
55:92:85:76:ec:aa:fa:90:a1:f2:1f:e2:33:59:71:e8:b2:3c:
21:5f:95:6a:45:b0:be:39:87:49:d9:fb:a8:4e:6c:43:df:28:
f7:54:08:cc:1f:24:46:34:e7:30:8d:40:cc:e6:c8:a8:62:0b:
d4:c1:9a:53:b7:01:1d:92:4e:50:ec:a6:7e:50:36:3b:c5:fc:
c5:65:99:0c:ea:9b:b0:b1:61:87:d3:dc:d6:95:cf:2e:15:82:
ee:de:4d:01:25:53:ad:3d:58:48:48:8e:c2:6b:2b:c6:4c:8b:
54:0a:57:02:7b:d6:64:8b:bc:8e:97:65:1b:00:7f:c2:5d:76:
94:3a:80:94:4e:03:7e:b4:68:5d:71:3f:5f:10:e7:7e:5e:8d:
ab:eb:e8:1f:eb:4e:e9:a1:ab:54:63:89:5d:b7:df:3a:09:f2:
63:4e:4f:cf:a3:4e:34:d5:5f:43:d0:d0:9e:ee:ea:55:a3:ba:
06:4a:64:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:33:37 2025 by rpki-client