Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03d8ef8b-9073-34d7-8f97-99db8935d611.roa
File: 03d8ef8b-9073-34d7-8f97-99db8935d611.roa (raw, json)
Hash identifier: ekBiteuTPbmHEXUrJoH2cSMg4Ldoh2mN4aq33zPkzDk=
Subject key identifier: 1E:A4:FC:53:39:8D:AA:94:86:75:89:BD:01:D7:5F:1D:C2:C0:EB:A6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848907610D7B8FD7A77F825D400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03d8ef8b-9073-34d7-8f97-99db8935d611.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 20940
IP address blocks: 23.200.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:76:10:d7:b8:fd:7a:77:f8:25:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=e29b893e-0897-4292-9c32-8f5bf6d89efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2a:6a:75:ff:b5:7b:a0:ce:ef:e0:1e:4e:0d:
7a:b1:7b:62:50:02:df:31:03:50:9f:0a:62:73:2f:
4e:95:05:c8:8b:29:b2:fe:ee:69:98:b6:43:c0:24:
90:60:5c:76:75:19:51:76:fa:23:fd:a3:5b:d1:63:
27:c0:8c:83:0c:70:87:2b:2a:25:36:b5:1c:09:22:
82:c0:b5:09:4a:71:f9:e1:1d:71:de:fc:f5:81:00:
10:54:34:19:5d:36:90:27:f6:3d:ca:1c:ac:d0:87:
58:39:3f:e9:19:16:6b:1b:a6:f4:e2:6d:17:44:55:
01:77:19:96:72:13:52:6b:15:54:87:61:93:e9:18:
6b:77:79:ae:b6:38:0d:27:a7:6a:62:af:3a:89:87:
34:66:1b:af:a9:9d:dc:7b:57:63:1a:f5:ed:e2:c8:
74:00:d5:8c:32:20:c0:32:45:9b:ff:59:8d:f3:e3:
32:6d:ea:05:70:61:f3:ba:96:92:e6:6d:89:3b:00:
17:e9:61:06:ee:5e:74:58:92:93:32:85:ad:79:ad:
5e:a9:43:8a:de:4c:b8:91:40:c7:01:ac:ef:03:bc:
c3:65:55:4e:62:53:fd:d2:41:45:2e:6b:46:0a:3f:
c7:f1:99:0b:a4:b5:12:55:53:a6:27:da:88:2b:4d:
7e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A4:FC:53:39:8D:AA:94:86:75:89:BD:01:D7:5F:1D:C2:C0:EB:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03d8ef8b-9073-34d7-8f97-99db8935d611.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.200.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:b6:ab:d4:91:e6:a6:6e:eb:fc:d9:74:20:e1:c8:c0:2c:97:
64:63:c5:68:2f:96:8d:98:29:8a:2c:c9:0a:76:5f:e6:af:bd:
f7:8d:3b:56:0b:67:9e:95:af:ea:aa:61:aa:30:3c:2a:01:b7:
38:ec:db:dd:ea:b2:ac:6b:2d:ae:b8:99:41:b6:44:8b:e7:a8:
c1:18:9e:80:fa:c8:ab:dd:f1:86:c6:5a:ec:71:f1:bf:eb:c1:
d0:94:b4:91:38:fe:38:2e:21:cd:6f:08:7e:d7:d8:ec:63:4d:
bb:80:2f:bc:d7:14:e4:f2:3d:73:be:dc:3a:6a:81:26:d5:d3:
29:1e:d8:e2:78:14:96:96:54:75:c4:ad:fb:01:e1:e5:a2:3d:
4b:f8:38:d8:c1:33:7e:f5:bc:d7:23:83:27:0f:54:c5:7b:fc:
73:a4:13:56:d1:3a:c9:06:f6:8b:6e:b3:65:fc:0d:7e:07:c8:
95:60:a1:89:bd:8f:c9:56:76:66:01:47:d1:74:8a:85:f5:35:
b8:cc:63:61:e6:d6:02:bf:1d:5e:aa:67:a7:a2:1c:32:ef:e5:
3d:8b:34:d8:0a:90:4c:3c:6c:bf:b8:b6:79:03:da:77:4f:07:
44:3b:ce:aa:e5:f8:dc:ba:ba:b7:23:68:9f:e6:79:81:15:2d:
ce:6e:f1:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdhDXuP16d/gl1AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk
ZTI5Yjg5M2UtMDg5Ny00MjkyLTljMzItOGY1YmY2ZDg5ZWZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvipqdf+1e6DO7+AeTg16sXtiUALfMQNQnwpi
cy9OlQXIiymy/u5pmLZDwCSQYFx2dRlRdvoj/aNb0WMnwIyDDHCHKyolNrUcCSKC
wLUJSnH54R1x3vz1gQAQVDQZXTaQJ/Y9yhys0IdYOT/pGRZrG6b04m0XRFUBdxmW
chNSaxVUh2GT6Rhrd3mutjgNJ6dqYq86iYc0ZhuvqZ3ce1djGvXt4sh0ANWMMiDA
MkWb/1mN8+MybeoFcGHzupaS5m2JOwAX6WEG7l50WJKTMoWtea1eqUOK3ky4kUDH
AazvA7zDZVVOYlP90kFFLmtGCj/H8ZkLpLUSVVOmJ9qIK01+qQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB6k/FM5jaqUhnWJvQHXXx3CwOumMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDNkOGVmOGItOTA3My0z
NGQ3LThmOTctOTlkYjg5MzVkNjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8jtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJK2q9SR5qZu6/zZdCDhyMAsl2RjxWgvlo2YKYosyQp2X+avvfeNO1YL
Z56Vr+qqYaowPCoBtzjs293qsqxrLa64mUG2RIvnqMEYnoD6yKvd8YbGWuxx8b/r
wdCUtJE4/jguIc1vCH7X2OxjTbuAL7zXFOTyPXO+3DpqgSbV0yke2OJ4FJaWVHXE
rfsB4eWiPUv4ONjBM371vNcjgycPVMV7/HOkE1bROskG9otus2X8DX4HyJVgoYm9
j8lWdmYBR9F0ioX1NbjMY2Hm1gK/HV6qZ6eiHDLv5T2LNNgKkEw8bL+4tnkD2ndP
B0Q7zqrl+Ny6urcjaJ/meYEVLc5u8S8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:35:47 2025 by rpki-client