Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5fd12087-5523-3229-876f-88f686d794a9.roa
File: 5fd12087-5523-3229-876f-88f686d794a9.roa (raw, json)
Hash identifier: eDcILaE4N9e+2QlmGCjXDgraiOwxQLglWmJUNCAL/TU=
Subject key identifier: BF:D3:CE:36:C1:47:85:6B:1D:07:B3:3C:CE:FC:63:2B:D7:30:57:9E
Certificate issuer: /CN=5cafbd32-7d6e-4297-9ac5-dc120aaa97da
Certificate serial: 010D0C9F432858489A3B4EDA5CA41A4E9A7DB700
Authority key identifier: 04:0D:7B:D5:83:B8:8B:76:6F:49:88:24:4C:50:70:8B:4C:B7:87:55
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5fd12087-5523-3229-876f-88f686d794a9.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 32507
IP address blocks: 23.186.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:4e:da:5c:a4:1a:4e:9a:7d:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cafbd32-7d6e-4297-9ac5-dc120aaa97da
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=97948893-9fb8-48b8-9fbe-69ef1b70dea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:75:19:df:0b:50:95:1c:07:42:31:3e:e1:41:
f7:ea:c5:1e:83:43:f0:34:f5:e1:15:b8:23:e0:2b:
55:fe:d5:4b:fd:22:17:d7:cd:8f:fd:cb:ad:07:09:
d0:ce:58:63:a8:05:42:cb:3f:75:3a:05:4f:4c:88:
6f:83:2d:4e:47:4b:b9:a5:05:72:63:b9:0b:71:2f:
8e:d8:73:46:a0:48:e7:9c:c8:fc:3f:6c:ac:60:25:
15:38:83:cb:ce:a0:19:db:0e:c1:89:a2:7e:ae:e0:
46:24:d5:3a:b2:09:e0:23:40:85:3b:3f:7b:10:f8:
87:f4:40:38:9f:ca:a2:f3:66:d4:c4:a2:c4:17:32:
a6:e3:92:39:60:4b:9c:bd:66:8a:4d:4f:3d:be:e6:
af:a1:c8:69:f5:96:9d:9a:61:15:46:24:7d:1e:e4:
b2:00:65:af:eb:d6:ee:00:e7:10:b9:24:18:fe:84:
92:ea:71:e1:63:15:50:0d:2d:99:5f:e7:ad:70:2d:
64:98:37:a0:0a:f3:7d:a6:f1:97:d0:24:67:42:6e:
b4:53:bb:e7:89:00:40:00:07:7b:e8:0c:bd:46:e6:
54:7a:0b:38:e3:9e:04:09:ad:41:5c:7d:af:d2:06:
54:05:8c:3a:4a:5d:0e:fa:6b:c8:b5:e0:8f:ed:b4:
60:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D3:CE:36:C1:47:85:6B:1D:07:B3:3C:CE:FC:63:2B:D7:30:57:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5fd12087-5523-3229-876f-88f686d794a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.crl
X509v3 Authority Key Identifier:
keyid:04:0D:7B:D5:83:B8:8B:76:6F:49:88:24:4C:50:70:8B:4C:B7:87:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.cer
sbgp-ipAddrBlock: critical
IPv4:
23.186.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:86:b1:03:9b:3a:4e:6c:57:c0:f7:e3:b3:fe:b0:71:cf:f1:
49:d0:15:35:53:a2:00:f1:d4:5b:7b:1b:33:26:98:89:5a:54:
23:84:45:ad:50:64:78:1f:7b:5f:ed:04:3d:93:db:c2:f8:fe:
13:35:61:5f:9d:e6:c6:0b:d2:3d:01:ef:04:88:f4:85:0d:cd:
68:38:46:b5:46:55:85:20:c8:96:7f:57:94:3f:1f:42:5e:ed:
a1:54:91:73:15:ae:63:68:dc:b0:5c:9e:71:b8:72:c3:30:b5:
d0:23:85:e0:c6:75:71:4a:15:f9:cb:ed:f0:60:fe:c7:7b:a7:
62:da:0f:02:fa:52:05:38:25:bd:93:c5:d2:14:21:a0:9a:3f:
f1:c9:5b:18:3d:4c:46:27:9c:01:02:d8:4b:60:67:5a:68:96:
0a:3a:af:ac:56:de:e7:cc:43:12:2d:d7:7c:61:8c:a6:ff:62:
11:6b:17:2a:cc:fe:6a:34:be:32:59:47:3f:e4:27:f0:81:19:
86:f5:a9:77:90:e9:6b:19:87:b3:31:17:40:3f:9f:49:56:1b:
3a:aa:8f:a3:ad:9b:6b:1b:72:dd:2d:13:cf:a4:d8:f2:59:22:
10:3b:33:ec:a1:56:34:78:eb:5b:cf:58:95:57:60:cc:02:3b:
c6:97:94:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiaO07aXKQaTpp9twAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNhZmJkMzItN2Q2ZS00Mjk3LTlhYzUtZGMxMjBhYWE5
N2RhMB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk
OTc5NDg4OTMtOWZiOC00OGI4LTlmYmUtNjllZjFiNzBkZWE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3UZ3wtQlRwHQjE+4UH36sUeg0PwNPXhFbgj
4CtV/tVL/SIX182P/cutBwnQzlhjqAVCyz91OgVPTIhvgy1OR0u5pQVyY7kLcS+O
2HNGoEjnnMj8P2ysYCUVOIPLzqAZ2w7BiaJ+ruBGJNU6sgngI0CFOz97EPiH9EA4
n8qi82bUxKLEFzKm45I5YEucvWaKTU89vuavochp9ZadmmEVRiR9HuSyAGWv69bu
AOcQuSQY/oSS6nHhYxVQDS2ZX+etcC1kmDegCvN9pvGX0CRnQm60U7vniQBAAAd7
6Ay9RuZUegs4454ECa1BXH2v0gZUBYw6Sl0O+mvIteCP7bRgYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL/TzjbBR4VrHQezPM78YyvXMFeeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81Y2Fm
YmQzMi03ZDZlLTQyOTctOWFjNS1kYzEyMGFhYTk3ZGEvNWZkMTIwODctNTUyMy0z
MjI5LTg3NmYtODhmNjg2ZDc5NGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWNhZmJkMzItN2Q2ZS00Mjk3LTlh
YzUtZGMxMjBhYWE5N2RhLzVjYWZiZDMyLTdkNmUtNDI5Ny05YWM1LWRjMTIwYWFh
OTdkYS5jcmwwHwYDVR0jBBgwFoAUBA171YO4i3ZvSYgkTFBwi0y3h1UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS81Y2FmYmQzMi03ZDZlLTQyOTctOWFjNS1kYzEy
MGFhYTk3ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7p4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG6GsQObOk5sV8D347P+sHHP8UnQFTVTogDx1Ft7GzMmmIlaVCOERa1Q
ZHgfe1/tBD2T28L4/hM1YV+d5sYL0j0B7wSI9IUNzWg4RrVGVYUgyJZ/V5Q/H0Je
7aFUkXMVrmNo3LBcnnG4csMwtdAjheDGdXFKFfnL7fBg/sd7p2LaDwL6UgU4Jb2T
xdIUIaCaP/HJWxg9TEYnnAEC2EtgZ1polgo6r6xW3ufMQxIt13xhjKb/YhFrFyrM
/mo0vjJZRz/kJ/CBGYb1qXeQ6WsZh7MxF0A/n0lWGzqqj6Otm2sbct0tE8+k2PJZ
IhA7M+yhVjR461vPWJVXYMwCO8aXlFQ=
-----END CERTIFICATE-----
Generated at Tue Apr 29 13:13:57 2025 by rpki-client