Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/05679e12-40dd-3084-90c4-179db6afbbfc.roa
File: 05679e12-40dd-3084-90c4-179db6afbbfc.roa (raw, json)
Hash identifier: M5DU/r1OKlmmhqUUpZfocD+D09fLAh2SCUVjWWJFHTU=
Subject key identifier: 2F:DB:6A:B2:A3:CE:DE:F2:10:E4:1B:57:23:F0:95:C3:89:3D:F9:EE
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A209C9777A4BBD3B3D3EC70
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/05679e12-40dd-3084-90c4-179db6afbbfc.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.39.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:9c:97:77:a4:bb:d3:b3:d3:ec:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=93d596ef-294b-456a-974f-846e008e4878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ec:10:31:3b:a9:a9:6e:56:ee:85:f0:69:e4:
10:93:66:c5:c6:e0:ea:bf:6c:ae:29:5c:5c:5e:1a:
fc:70:d3:33:19:5f:9a:d2:29:8b:ef:17:28:78:0b:
8a:f7:83:a3:ec:d1:b9:e3:a5:c4:64:be:8d:98:24:
28:03:a0:6e:ff:c0:98:c1:6d:35:aa:1b:9d:ab:4f:
76:ba:ac:cc:1e:86:ed:5f:c2:da:4a:79:d5:49:8f:
71:66:1b:f9:9e:7d:56:99:ab:9e:70:b9:12:bb:0c:
2f:12:1a:dd:ff:6d:24:3b:1c:a2:56:f2:39:9b:53:
b6:94:83:25:a2:f9:4f:60:f3:d6:d9:fd:38:2f:72:
5a:bf:f6:78:ef:27:94:00:9f:70:c7:71:6b:f9:be:
99:24:b4:0f:0c:65:52:3d:27:56:60:7e:6d:ae:ba:
47:83:c6:32:00:fa:9c:a8:96:f3:6b:a2:70:b9:3b:
a1:79:0c:86:d2:d5:cc:29:71:0d:65:dc:1c:1e:04:
2a:3a:36:6c:fc:d5:3b:99:d2:ae:bb:b8:ac:8e:77:
09:ed:1b:ec:6f:2e:c7:9f:46:64:36:61:12:27:aa:
60:c9:87:7d:36:19:1d:75:c1:13:21:d1:d9:c8:f8:
e3:d5:fa:8c:d2:9d:14:25:07:71:d8:aa:9a:69:ce:
d1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DB:6A:B2:A3:CE:DE:F2:10:E4:1B:57:23:F0:95:C3:89:3D:F9:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/05679e12-40dd-3084-90c4-179db6afbbfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.39.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:82:cb:51:bc:ba:1f:bf:a6:95:6c:6f:b6:62:65:8d:84:6b:
a9:d8:1b:00:10:35:5f:a2:0b:17:2c:68:7b:2b:96:d3:57:7d:
61:b5:2b:41:10:18:89:76:b0:90:0f:f6:54:6d:ef:5f:d1:d7:
82:37:7a:30:60:0d:24:38:42:75:16:d7:e1:0b:df:e1:5d:97:
bb:13:94:a3:41:6e:37:74:34:a7:d5:d6:b7:a9:34:09:b4:a7:
7a:b1:5c:7c:9a:98:69:59:65:a0:21:07:cb:e0:93:26:08:e1:
92:5d:2a:a7:2d:b5:b7:ca:51:4d:8c:1f:57:79:e1:f2:24:6a:
37:f0:9a:79:d2:ad:a6:db:12:bf:be:bd:32:1f:d2:45:4e:49:
8d:45:64:96:25:83:b1:bb:3c:48:0c:b5:fc:c7:f6:f2:5b:44:
8f:3a:ec:ba:6f:d5:44:8e:8c:5f:8d:de:92:b8:68:6a:59:57:
ac:b0:af:2e:1a:55:37:b9:9f:70:d3:00:f2:1c:3e:6e:61:f3:
5c:e2:97:28:64:7a:95:7b:de:01:50:2e:63:c9:c4:2e:3d:2b:
37:8e:42:4c:24:cf:79:51:8a:cf:ae:5c:7c:99:d2:74:09:e8:
09:a4:1a:9f:d8:e9:05:60:5f:fc:37:bd:86:c5:ea:ec:1c:d1:
8f:f0:ac:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6IJyXd6S707PT7HAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk
OTNkNTk2ZWYtMjk0Yi00NTZhLTk3NGYtODQ2ZTAwOGU0ODc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOwQMTupqW5W7oXwaeQQk2bFxuDqv2yuKVxc
Xhr8cNMzGV+a0imL7xcoeAuK94Oj7NG546XEZL6NmCQoA6Bu/8CYwW01qhudq092
uqzMHobtX8LaSnnVSY9xZhv5nn1WmauecLkSuwwvEhrd/20kOxyiVvI5m1O2lIMl
ovlPYPPW2f04L3Jav/Z47yeUAJ9wx3Fr+b6ZJLQPDGVSPSdWYH5trrpHg8YyAPqc
qJbza6JwuTuheQyG0tXMKXENZdwcHgQqOjZs/NU7mdKuu7isjncJ7Rvsby7Hn0Zk
NmESJ6pgyYd9NhkddcETIdHZyPjj1fqM0p0UJQdx2Kqaac7RNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC/barKjzt7yEOQbVyPwlcOJPfnuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDU2NzllMTItNDBkZC0z
MDg0LTkwYzQtMTc5ZGI2YWZiYmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyfSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFWCy1G8uh+/ppVsb7ZiZY2Ea6nYGwAQNV+iCxcsaHsrltNXfWG1K0EQ
GIl2sJAP9lRt71/R14I3ejBgDSQ4QnUW1+EL3+Fdl7sTlKNBbjd0NKfV1repNAm0
p3qxXHyamGlZZaAhB8vgkyYI4ZJdKqcttbfKUU2MH1d54fIkajfwmnnSrabbEr++
vTIf0kVOSY1FZJYlg7G7PEgMtfzH9vJbRI867Lpv1USOjF+N3pK4aGpZV6ywry4a
VTe5n3DTAPIcPm5h81zilyhkepV73gFQLmPJxC49KzeOQkwkz3lRis+uXHyZ0nQJ
6AmkGp/Y6QVgX/w3vYbF6uwc0Y/wrBk=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:59:16 2025 by rpki-client