Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25d826ef-7ca4-3998-8c07-e2034a4306d6.roa
File: 25d826ef-7ca4-3998-8c07-e2034a4306d6.roa (raw, json)
Hash identifier: 0c3mqinM6ojiF2MQUU7K7M8Y6sbfFxhBLrnljgKFFfw=
Subject key identifier: 22:BA:14:B8:73:9E:48:92:3E:08:7D:FD:6C:E7:B3:0C:AF:A9:E6:0C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858485B6B04C094F4C87C0CEF8100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25d826ef-7ca4-3998-8c07-e2034a4306d6.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.221.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6b:04:c0:94:f4:c8:7c:0c:ef:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=be001f58-94ba-49bb-8cdc-affe1da75617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:77:93:d8:66:27:89:45:d6:98:ce:10:07:
b5:bf:eb:d6:e9:ee:0c:20:b9:e6:36:d9:9f:99:09:
e6:bc:5d:d3:42:a1:d2:71:63:28:e1:c5:92:2c:e8:
9a:d3:94:a0:a9:ec:53:84:47:19:9d:d9:ce:21:7e:
78:59:2e:5f:dd:3c:49:11:d1:d3:df:23:4d:80:16:
94:a1:c0:fa:70:c1:ae:0e:0c:a5:dd:d5:89:de:43:
81:fa:08:46:0f:b9:6b:e8:39:1e:de:86:56:c7:16:
3a:e3:4e:13:f7:31:ae:fb:70:5f:68:aa:46:70:f4:
5f:0e:e4:b0:b0:6e:16:d4:e0:94:f4:2f:13:8d:4f:
e9:c9:6f:ae:e4:ae:76:ae:db:df:4d:01:ca:0c:24:
82:e0:11:c5:0a:88:1b:9b:f9:b5:c8:6e:49:80:af:
23:ec:18:72:ec:08:3a:2b:29:56:d0:48:dc:2a:95:
88:cc:e5:45:1b:40:ee:30:8f:9f:ec:a0:cf:91:1f:
a7:0b:47:08:1a:3f:57:09:25:99:8a:47:9a:46:60:
ab:8f:6e:45:93:91:c4:27:63:e6:fc:af:a9:9e:eb:
e1:fa:f4:f0:6d:45:c1:88:a2:b4:52:63:96:2b:d4:
07:32:fb:b3:2d:c2:a3:df:df:b1:50:dd:4d:94:5f:
8d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BA:14:B8:73:9E:48:92:3E:08:7D:FD:6C:E7:B3:0C:AF:A9:E6:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25d826ef-7ca4-3998-8c07-e2034a4306d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.221.56.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:22:c7:18:a8:84:dd:17:df:21:a2:cf:e5:f0:9c:3f:8f:f7:
a3:cb:fa:fe:1e:e6:68:b8:98:dd:81:e8:01:9a:76:d7:84:cf:
ff:b2:9c:ee:1f:92:d3:72:c5:81:37:f9:8a:51:13:37:9e:99:
54:bf:4f:11:a9:16:3e:c0:df:a3:33:9a:52:7e:ae:ea:2b:d9:
75:cc:69:8a:1c:47:e6:ea:05:bc:4a:74:82:89:c2:b2:15:f8:
73:e5:7e:3b:e5:d4:82:b8:f5:ff:22:8d:18:82:46:38:86:ee:
03:9f:a5:78:0c:61:80:57:7f:f6:17:90:75:8b:0c:ee:a7:ab:
a0:34:83:5d:cd:60:30:e7:2f:5d:86:39:43:12:96:a8:d7:3f:
f4:6d:a0:6f:a1:5c:6f:3b:05:5a:7f:65:50:57:6a:f6:1d:72:
b4:82:9d:b4:1a:14:09:0f:ed:0a:02:f0:e8:34:12:6c:72:7c:
0c:88:eb:94:7d:40:74:e5:58:66:36:0d:87:71:b6:77:61:97:
e2:f4:4f:9b:bf:68:e6:7a:24:3c:aa:c5:a7:b7:fd:2e:5e:97:
54:81:6d:ae:e9:c5:c6:4e:c5:6c:9e:7c:bb:7e:fc:8c:5a:c3:
cb:57:12:bb:7b:5d:15:5a:92:3c:ea:4e:bf:7c:c0:6b:41:70:
fd:e1:0f:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhbawTAlPTIfAzvgQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk
YmUwMDFmNTgtOTRiYS00OWJiLThjZGMtYWZmZTFkYTc1NjE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw353k9hmJ4lF1pjOEAe1v+vW6e4MILnmNtmf
mQnmvF3TQqHScWMo4cWSLOia05SgqexThEcZndnOIX54WS5f3TxJEdHT3yNNgBaU
ocD6cMGuDgyl3dWJ3kOB+ghGD7lr6Dke3oZWxxY6404T9zGu+3BfaKpGcPRfDuSw
sG4W1OCU9C8TjU/pyW+u5K52rtvfTQHKDCSC4BHFCogbm/m1yG5JgK8j7Bhy7Ag6
KylW0EjcKpWIzOVFG0DuMI+f7KDPkR+nC0cIGj9XCSWZikeaRmCrj25Fk5HEJ2Pm
/K+pnuvh+vTwbUXBiKK0UmOWK9QHMvuzLcKj39+xUN1NlF+NvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCK6FLhznkiSPgh9/WznswyvqeYMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjVkODI2ZWYtN2NhNC0z
OTk4LThjMDctZTIwMzRhNDMwNmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF904MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACgixxiohN0X3yGiz+XwnD+P96PL+v4e5mi4mN2B6AGadteEz/+ynO4f
ktNyxYE3+YpREzeemVS/TxGpFj7A36MzmlJ+ruor2XXMaYocR+bqBbxKdIKJwrIV
+HPlfjvl1IK49f8ijRiCRjiG7gOfpXgMYYBXf/YXkHWLDO6nq6A0g13NYDDnL12G
OUMSlqjXP/RtoG+hXG87BVp/ZVBXavYdcrSCnbQaFAkP7QoC8Og0EmxyfAyI65R9
QHTlWGY2DYdxtndhl+L0T5u/aOZ6JDyqxae3/S5el1SBba7pxcZOxWyefLt+/Ixa
w8tXErt7XRVakjzqTr98wGtBcP3hDxg=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:42:56 2025 by rpki-client