Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/199388d5-89f8-39dd-b210-3f6c4f38c9a7.roa
File: 199388d5-89f8-39dd-b210-3f6c4f38c9a7.roa (raw, json)
Hash identifier: TEwAvc6PVdcDQPVw9w5tuGh4XoSVFb87Jas+Tn7IBSk=
Subject key identifier: 76:7B:FD:F4:05:5F:A3:FA:CB:BE:09:10:17:87:F8:DB:CA:CD:83:73
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847DF2F666CCE7F25561549EE00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/199388d5-89f8-39dd-b210-3f6c4f38c9a7.roa
Signing time: Thu 14 Nov 2024 02:00:27 +0000
ROA not before: Thu 14 Nov 2024 02:00:27 +0000
ROA not after: Wed 12 Feb 2025 02:00:27 +0000
asID: 20940
IP address blocks: 23.217.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:df:2f:66:6c:ce:7f:25:56:15:49:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 14 02:00:27 2024 GMT
Not After : Feb 12 02:00:27 2025 GMT
Subject: CN=a4860fb3-ac5b-49f0-92d9-66872ac8dba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:32:e8:89:c9:cf:ab:39:05:ed:a5:b1:a9:e1:
5c:2a:29:cc:53:12:51:c8:28:af:e0:e6:5b:42:09:
d0:31:9d:91:a4:f6:36:6d:83:14:b4:54:2c:2a:e2:
3e:b0:49:2c:f6:57:4c:54:19:ab:89:03:18:a6:d6:
72:a5:63:0f:2e:85:bc:72:54:7b:2f:e1:52:1e:95:
c9:eb:4f:83:f9:a7:db:66:df:26:88:ce:0b:15:5a:
f6:a2:1c:0e:b3:2f:a4:bc:dc:e1:80:2b:b8:aa:09:
f1:79:a8:73:bb:32:f9:df:34:1f:5a:bf:ba:94:8c:
10:b0:cb:28:28:02:e9:f3:de:cd:ac:2a:db:64:3b:
d3:bd:da:f8:3f:3d:94:8b:39:69:96:ad:51:ba:89:
aa:5c:c0:1c:29:ef:b7:38:38:9c:fc:e0:4c:bf:c7:
c5:d5:be:66:f6:13:15:72:db:78:87:c6:55:62:5d:
0a:05:4c:31:32:0d:9a:93:64:50:69:4a:fb:2e:7a:
bd:25:68:78:8d:6a:df:99:15:13:be:88:67:d2:5a:
ac:82:a6:61:3f:81:23:1d:4f:8e:a0:5f:20:87:9f:
95:ad:4a:b2:62:56:2e:28:58:c7:17:c8:fa:b5:6d:
a2:0e:e9:cc:44:8e:cb:43:6f:90:f1:b0:4c:75:10:
7d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7B:FD:F4:05:5F:A3:FA:CB:BE:09:10:17:87:F8:DB:CA:CD:83:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/199388d5-89f8-39dd-b210-3f6c4f38c9a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.217.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:d3:35:96:0d:74:13:5b:14:86:85:6c:9d:6b:d8:a8:13:b6:
d9:06:83:27:46:d4:4f:5a:31:fc:27:c5:25:45:3f:7b:2f:d4:
95:11:77:82:ee:d1:46:a4:d1:1e:d2:96:7a:aa:b9:8f:2c:e6:
3d:bc:fe:47:d7:d8:2c:f3:1b:4f:9b:f1:f4:29:8c:2c:2b:e6:
f8:18:10:0c:65:fc:7c:82:91:b9:f8:37:e0:27:bf:20:09:f1:
53:62:5a:ae:40:ca:9b:40:e6:9a:ed:f5:34:b7:5d:79:9d:8c:
9e:8c:f7:8c:ea:1d:fb:5b:c7:00:9d:b7:cb:32:df:f3:4b:f0:
2c:13:51:01:43:36:2d:79:38:d8:3c:1f:0f:be:4f:69:ff:bb:
da:90:82:3e:14:47:bb:26:79:f2:02:88:e3:d7:49:2b:59:97:
91:7e:00:9b:40:8f:0c:59:ef:67:2a:4c:bf:f9:8c:1c:c3:d7:
71:eb:c1:23:16:1d:a1:b3:79:97:57:8c:7f:c7:73:44:48:a2:
43:cc:5e:21:42:bd:fd:dd:c4:0b:a1:58:88:f5:03:2a:59:78:
68:a4:65:4e:1c:07:9f:d4:6a:8f:d1:5d:f8:61:af:7c:ba:b9:
8d:4f:4f:cc:f3:74:01:1d:ca:7d:44:c0:0f:99:33:be:76:60:
3b:ee:15:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEffL2Zszn8lVhVJ7gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTExNDAyMDAyN1oXDTI1MDIxMjAyMDAyN1owLzEtMCsGA1UEAxMk
YTQ4NjBmYjMtYWM1Yi00OWYwLTkyZDktNjY4NzJhYzhkYmE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTLoicnPqzkF7aWxqeFcKinMUxJRyCiv4OZb
QgnQMZ2RpPY2bYMUtFQsKuI+sEks9ldMVBmriQMYptZypWMPLoW8clR7L+FSHpXJ
60+D+afbZt8miM4LFVr2ohwOsy+kvNzhgCu4qgnxeahzuzL53zQfWr+6lIwQsMso
KALp897NrCrbZDvTvdr4Pz2Uizlplq1RuomqXMAcKe+3ODic/OBMv8fF1b5m9hMV
ctt4h8ZVYl0KBUwxMg2ak2RQaUr7Lnq9JWh4jWrfmRUTvohn0lqsgqZhP4EjHU+O
oF8gh5+VrUqyYlYuKFjHF8j6tW2iDunMRI7LQ2+Q8bBMdRB91wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHZ7/fQFX6P6y74JEBeH+NvKzYNzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTk5Mzg4ZDUtODlmOC0z
OWRkLWIyMTAtM2Y2YzRmMzhjOWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ltMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFnTNZYNdBNbFIaFbJ1r2KgTttkGgydG1E9aMfwnxSVFP3sv1JURd4Lu
0Uak0R7SlnqquY8s5j28/kfX2CzzG0+b8fQpjCwr5vgYEAxl/HyCkbn4N+AnvyAJ
8VNiWq5AyptA5prt9TS3XXmdjJ6M94zqHftbxwCdt8sy3/NL8CwTUQFDNi15ONg8
Hw++T2n/u9qQgj4UR7smefICiOPXSStZl5F+AJtAjwxZ72cqTL/5jBzD13HrwSMW
HaGzeZdXjH/Hc0RIokPMXiFCvf3dxAuhWIj1AypZeGikZU4cB5/Uao/RXfhhr3y6
uY1PT8zzdAEdyn1EwA+ZM752YDvuFQE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:47:47 2025 by rpki-client