Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ebef180-3425-3d62-8313-9b404498163b.roa
File: 0ebef180-3425-3d62-8313-9b404498163b.roa (raw, json)
Hash identifier: UzrYRlN4PKKk81YlRDlvxHzIa6rB+WDTpWLiIMqiMTg=
Subject key identifier: A1:2D:41:3D:DD:D3:E8:2B:EB:81:CB:2E:9F:73:4F:94:A0:84:4A:FB
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858483F8042BDA62BAEAC2C1C0280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ebef180-3425-3d62-8313-9b404498163b.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.72.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:42:bd:a6:2b:ae:ac:2c:1c:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=2e46b68c-2a85-4949-bec9-a44d67dca51a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6c:3e:0d:38:d5:32:ee:87:da:03:b8:56:83:
46:88:f0:ea:e1:44:c4:e1:4b:8a:10:8e:47:51:2c:
8d:a0:a2:30:32:e9:ee:9e:98:a4:be:5f:04:39:dd:
31:9f:61:3b:63:99:b0:a9:df:c5:91:2d:bb:f2:63:
ec:8b:4d:9c:90:2f:e3:3b:e0:21:e8:67:df:a4:42:
93:d4:8b:5f:d5:3d:83:59:1b:3e:c3:56:43:f9:b3:
08:0f:84:5c:a6:e6:33:db:54:25:05:9b:9e:9e:17:
6b:11:2d:22:0f:39:b4:c5:cb:9e:f2:fe:51:eb:d0:
fc:b2:d2:f7:ef:18:e3:35:43:50:ab:4e:4a:dc:28:
9d:93:31:79:94:d3:31:2c:d1:8d:d7:14:ed:7e:00:
9a:a4:89:cd:73:6a:fb:b2:9b:37:97:47:33:1b:4a:
53:fc:03:fe:68:56:32:da:34:43:ce:ad:7b:b9:4a:
3e:df:c6:5e:2a:b1:de:a4:c3:cc:8d:be:ed:38:0b:
a7:ed:15:a1:a4:45:ee:55:79:b2:3b:9b:3c:9f:22:
1a:5f:29:43:9f:0b:5d:4f:c5:67:24:6b:7e:c9:72:
0c:eb:71:16:8d:81:86:d7:53:8f:5d:7a:27:07:be:
67:6b:57:9d:06:48:94:a3:2e:83:22:5c:75:21:89:
56:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2D:41:3D:DD:D3:E8:2B:EB:81:CB:2E:9F:73:4F:94:A0:84:4A:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ebef180-3425-3d62-8313-9b404498163b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.72.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:b2:60:22:3f:f0:6d:16:e8:93:ac:79:33:b7:2f:01:f6:13:
8a:a0:fd:25:77:1f:58:c5:b9:7b:19:a4:20:b2:5d:97:49:80:
df:df:72:48:7d:0f:7c:ae:8a:f8:09:62:a7:ca:00:16:89:f0:
1e:ba:d8:8c:5c:93:1f:f2:aa:4c:55:86:74:9b:df:b3:70:c2:
9c:be:9d:28:b1:a5:12:25:e1:2a:ce:fa:87:f9:97:1a:99:3a:
f4:73:6b:dc:31:b6:96:fd:4b:b0:95:91:06:da:2a:c4:5f:6d:
79:89:fb:9d:0e:cf:96:e6:83:c8:39:fd:5c:d5:61:7a:c1:ca:
c9:49:0e:c1:a3:c9:45:8a:33:37:42:90:3b:1a:6f:f1:5b:3c:
34:85:a3:18:23:6c:4f:46:c6:fd:27:2e:d9:f4:55:be:28:ac:
3b:80:e8:d0:ce:d0:4e:46:25:89:84:8d:7f:04:fb:ed:b1:d7:
eb:e2:1d:2a:e0:c7:81:1f:41:7f:f5:ae:f6:f8:13:2e:a5:0f:
d6:2a:d6:02:60:21:12:53:6f:bc:c7:1c:f9:5a:12:fe:c7:51:
4b:78:70:e8:70:6a:62:a4:0f:8d:9b:5a:89:c7:e4:10:47:b9:
86:cc:7f:ae:44:c8:43:92:57:db:7e:76:2e:47:b2:48:3d:6c:
42:b1:13:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg/gEK9piuurCwcAoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIxODE0MDA1MloXDTI1MDMxODEzMDA1MlowLzEtMCsGA1UEAxMk
MmU0NmI2OGMtMmE4NS00OTQ5LWJlYzktYTQ0ZDY3ZGNhNTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2w+DTjVMu6H2gO4VoNGiPDq4UTE4UuKEI5H
USyNoKIwMununpikvl8EOd0xn2E7Y5mwqd/FkS278mPsi02ckC/jO+Ah6GffpEKT
1Itf1T2DWRs+w1ZD+bMID4RcpuYz21QlBZuenhdrES0iDzm0xcue8v5R69D8stL3
7xjjNUNQq05K3CidkzF5lNMxLNGN1xTtfgCapInNc2r7sps3l0czG0pT/AP+aFYy
2jRDzq17uUo+38ZeKrHepMPMjb7tOAun7RWhpEXuVXmyO5s8nyIaXylDnwtdT8Vn
JGt+yXIM63EWjYGG11OPXXonB75na1edBkiUoy6DIlx1IYlWRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKEtQT3d0+gr64HLLp9zT5SghEr7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGViZWYxODAtMzQyNS0z
ZDYyLTgzMTMtOWI0MDQ0OTgxNjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0jiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEGyYCI/8G0W6JOseTO3LwH2E4qg/SV3H1jFuXsZpCCyXZdJgN/fckh9
D3yuivgJYqfKABaJ8B662Ixckx/yqkxVhnSb37Nwwpy+nSixpRIl4SrO+of5lxqZ
OvRza9wxtpb9S7CVkQbaKsRfbXmJ+50Oz5bmg8g5/VzVYXrByslJDsGjyUWKMzdC
kDsab/FbPDSFoxgjbE9Gxv0nLtn0Vb4orDuA6NDO0E5GJYmEjX8E++2x1+viHSrg
x4EfQX/1rvb4Ey6lD9Yq1gJgIRJTb7zHHPlaEv7HUUt4cOhwamKkD42bWonH5BBH
uYbMf65EyEOSV9t+di5Hskg9bEKxEwk=
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:12:49 2025 by rpki-client