Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28464964-e18a-34dc-b99b-717ba0d7c5e6.roa
File: 28464964-e18a-34dc-b99b-717ba0d7c5e6.roa (raw, json)
Hash identifier: toAdsUSqMnQFDouhXWtaOhICFTAsAuL3Dg0N9+oaLek=
Subject key identifier: 42:3D:69:FF:C9:99:C0:D3:13:31:3E:65:C1:9B:0C:90:3F:0C:B5:2D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858486EF5C8B61796D59C13668A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28464964-e18a-34dc-b99b-717ba0d7c5e6.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.35.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:c8:b6:17:96:d5:9c:13:66:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=f26b3128-098b-4c79-8bc6-6af9a595786f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:19:03:f4:a8:2b:f2:ff:05:bd:ef:37:38:
0f:eb:25:b4:72:fa:cc:8d:12:78:db:b2:1e:cf:53:
77:bf:42:43:68:3c:ae:95:9e:52:01:46:6e:90:da:
a5:65:a0:b0:09:14:19:5a:31:ed:c9:6d:8c:0a:4b:
3b:fe:b2:b2:2e:b9:a3:a9:6d:5b:5b:da:17:72:d7:
61:51:74:ba:0d:d2:f0:3a:ad:6a:9a:7a:59:81:c1:
4b:75:13:a8:5a:20:59:1c:09:b0:2f:1d:62:67:0e:
a9:71:e3:12:2f:0a:25:bd:8b:61:fe:d6:63:eb:13:
5f:e3:47:6c:64:36:9c:51:ec:12:e2:ea:ea:8a:3a:
b3:f3:a6:b9:af:a8:ec:1c:c1:a5:cb:fc:f9:61:b8:
10:32:9e:21:49:97:1a:29:c4:83:8a:e4:7b:7e:2a:
26:f9:5e:7a:04:ef:96:82:1c:80:7c:99:3a:7d:ce:
97:c1:dc:d1:f4:da:d3:a0:01:83:35:dc:6d:fa:b3:
b2:d0:13:57:43:90:8c:7b:85:6d:41:5a:30:52:56:
f0:0c:90:e4:32:3f:c1:e0:47:39:42:fa:92:55:f6:
0e:83:22:35:9f:31:b0:26:59:a8:e9:4e:1b:d4:22:
66:11:e7:8c:7b:fc:ee:38:64:c9:74:49:3b:60:b0:
12:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3D:69:FF:C9:99:C0:D3:13:31:3E:65:C1:9B:0C:90:3F:0C:B5:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28464964-e18a-34dc-b99b-717ba0d7c5e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.35.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:35:41:c8:1c:5c:8f:bf:5e:e6:02:a3:a1:1d:36:b8:51:81:
6a:41:c2:8a:1a:71:cb:bb:4a:42:f9:c9:8a:3c:7d:b7:9e:b6:
68:6a:7d:3d:24:f1:9b:b1:84:08:e6:86:f2:5b:02:16:d1:ab:
8e:a9:17:55:eb:eb:d2:8a:c5:4b:b2:de:19:a7:7c:9e:c2:ce:
c3:00:2d:cd:04:d6:c6:0f:33:4c:f6:e4:66:9e:5c:17:c1:b9:
7a:5f:19:51:65:73:5f:fc:47:f4:02:07:f5:7d:57:fb:be:5b:
8e:66:b4:16:e5:7c:ed:e5:e9:2d:9f:d8:63:12:c7:da:be:51:
72:63:93:74:86:b3:cd:11:19:7e:1f:0a:67:1a:3a:55:94:bd:
91:7f:a9:b5:92:98:8e:1c:22:b0:8f:57:fa:3b:88:dc:dc:ae:
e9:e3:a2:ac:2b:ae:0c:e5:51:22:06:ae:ba:10:7d:95:dd:64:
40:d2:a3:2d:71:fe:2f:49:ef:2d:85:07:43:80:1d:b0:de:90:
ef:9b:aa:a5:e5:c2:07:07:9a:24:42:96:e2:3a:78:74:85:41:
9e:c0:f2:6d:fb:b6:eb:2d:42:79:28:f1:a1:01:0c:6f:e8:e1:
ef:98:8a:77:6d:60:ca:f7:5c:c5:d7:8a:ab:b6:39:61:51:37:
81:c3:45:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhu9ci2F5bVnBNmigAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEwNDE0MDA1MVoXDTI1MDQwNDEzMDA1MVowLzEtMCsGA1UEAxMk
ZjI2YjMxMjgtMDk4Yi00Yzc5LThiYzYtNmFmOWE1OTU3ODZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm0ZA/SoK/L/Bb3vNzgP6yW0cvrMjRJ427Ie
z1N3v0JDaDyulZ5SAUZukNqlZaCwCRQZWjHtyW2MCks7/rKyLrmjqW1bW9oXctdh
UXS6DdLwOq1qmnpZgcFLdROoWiBZHAmwLx1iZw6pceMSLwolvYth/tZj6xNf40ds
ZDacUewS4urqijqz86a5r6jsHMGly/z5YbgQMp4hSZcaKcSDiuR7fiom+V56BO+W
ghyAfJk6fc6XwdzR9NrToAGDNdxt+rOy0BNXQ5CMe4VtQVowUlbwDJDkMj/B4Ec5
QvqSVfYOgyI1nzGwJlmo6U4b1CJmEeeMe/zuOGTJdEk7YLASCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEI9af/JmcDTEzE+ZcGbDJA/DLUtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjg0NjQ5NjQtZTE4YS0z
NGRjLWI5OWItNzE3YmEwZDdjNWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyP8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADw1QcgcXI+/XuYCo6EdNrhRgWpBwooaccu7SkL5yYo8fbeetmhqfT0k
8ZuxhAjmhvJbAhbRq46pF1Xr69KKxUuy3hmnfJ7CzsMALc0E1sYPM0z25GaeXBfB
uXpfGVFlc1/8R/QCB/V9V/u+W45mtBblfO3l6S2f2GMSx9q+UXJjk3SGs80RGX4f
CmcaOlWUvZF/qbWSmI4cIrCPV/o7iNzcrunjoqwrrgzlUSIGrroQfZXdZEDSoy1x
/i9J7y2FB0OAHbDekO+bqqXlwgcHmiRCluI6eHSFQZ7A8m37tustQnko8aEBDG/o
4e+YindtYMr3XMXXiqu2OWFRN4HDRe4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:52:56 2025 by rpki-client