Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2af5a891-d23e-3d5c-871c-e96b49a52239.roa
File: 2af5a891-d23e-3d5c-871c-e96b49a52239.roa (raw, json)
Hash identifier: /i7Uozfsk/k+5r/6TnU7e+5RE86L+jOmX8+fdKr4hMY=
Subject key identifier: BC:4E:46:5D:59:B3:D4:50:73:E0:27:DA:6F:F8:AA:A8:50:45:B4:39
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848854B5B6B5998E0C1BD9C4800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2af5a891-d23e-3d5c-871c-e96b49a52239.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 16625
IP address blocks: 23.52.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:5b:6b:59:98:e0:c1:bd:9c:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=eb9ab9bb-2408-441f-b689-decafd55203a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7c:58:bf:68:0c:58:87:58:03:fb:02:46:6f:
42:2c:18:1e:01:ed:99:84:1f:dc:83:7b:db:26:6f:
db:fc:b9:a0:b4:0e:3e:69:9f:a7:6a:3d:08:03:f0:
c2:2d:df:69:6c:5a:75:f5:0f:07:2f:c9:07:88:63:
7c:f3:bb:d3:be:e0:c3:07:74:de:69:b0:2a:7f:04:
99:40:ad:c8:3d:69:25:fa:cd:5a:95:5d:8f:67:48:
82:9b:c7:fb:85:ff:6b:d1:62:10:31:0b:45:27:1f:
f7:90:dc:8f:be:a4:53:08:d8:20:55:f1:15:58:4b:
c3:1d:02:40:a3:26:5c:85:b6:37:9c:0b:66:f0:8d:
c6:5e:b1:7b:c5:90:3f:51:d0:16:a1:9d:cb:42:21:
05:a3:c4:5d:39:b5:15:57:93:aa:53:6a:10:2f:e7:
ca:7d:2a:0a:6a:2e:50:30:33:19:9e:82:db:36:9a:
f6:97:2c:3d:dc:12:93:4c:23:81:d2:e8:7e:80:cf:
e3:9e:b8:1f:2e:b7:fd:dd:1b:6e:3b:57:03:87:c1:
24:b2:0d:4e:4d:b9:10:ca:74:b4:83:94:19:40:6b:
21:ca:2e:96:41:c0:3c:fb:37:bc:ea:70:1b:25:57:
c1:ca:f3:37:9b:f1:e9:20:c3:57:fe:f9:70:22:ff:
ce:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4E:46:5D:59:B3:D4:50:73:E0:27:DA:6F:F8:AA:A8:50:45:B4:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2af5a891-d23e-3d5c-871c-e96b49a52239.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.52.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:d8:9a:9e:a8:6d:82:bb:4a:25:b2:94:e0:48:10:a8:d6:ef:
55:07:e5:71:53:a8:f1:be:78:69:e7:0b:61:e4:fd:1a:b4:74:
7b:73:22:57:5d:ad:0d:58:d3:a5:81:60:ea:9b:89:89:09:39:
ed:3c:0a:30:00:e8:18:b9:f3:4e:73:82:14:fe:59:29:74:48:
cb:44:be:4f:f3:c1:c8:90:d0:49:97:cc:66:3f:ef:0d:9a:c9:
a9:84:93:31:f2:79:56:b5:60:ee:11:07:51:04:f4:6b:ca:95:
ab:96:c0:3d:41:26:ee:a4:5a:05:de:c7:e0:24:89:37:03:b1:
8f:d6:87:2c:88:7a:26:4b:10:82:1c:dc:e3:84:16:c4:15:d5:
e4:95:db:54:f3:5d:66:98:89:ef:42:d8:e2:cd:19:22:68:a6:
88:99:f9:8e:a1:c2:bd:bd:21:bf:d9:eb:bb:cd:a9:3b:b5:2d:
42:a8:44:22:fe:60:5a:17:de:dc:3d:23:09:bc:a9:79:bf:56:
d8:30:49:af:4a:0d:61:40:2a:d8:9c:0a:bc:19:f7:4d:3a:6e:
27:52:2e:56:9d:ad:08:20:49:a2:4e:5f:ca:ba:03:8d:9d:3a:
6a:5f:0e:0e:e9:65:b4:be:e1:a2:ae:ec:5f:a1:9f:18:85:9b:
d1:b8:09:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiFS1trWZjgwb2cSAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk
ZWI5YWI5YmItMjQwOC00NDFmLWI2ODktZGVjYWZkNTUyMDNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnxYv2gMWIdYA/sCRm9CLBgeAe2ZhB/cg3vb
Jm/b/LmgtA4+aZ+naj0IA/DCLd9pbFp19Q8HL8kHiGN887vTvuDDB3TeabAqfwSZ
QK3IPWkl+s1alV2PZ0iCm8f7hf9r0WIQMQtFJx/3kNyPvqRTCNggVfEVWEvDHQJA
oyZchbY3nAtm8I3GXrF7xZA/UdAWoZ3LQiEFo8RdObUVV5OqU2oQL+fKfSoKai5Q
MDMZnoLbNpr2lyw93BKTTCOB0uh+gM/jnrgfLrf93RtuO1cDh8Eksg1OTbkQynS0
g5QZQGshyi6WQcA8+ze86nAbJVfByvM3m/HpIMNX/vlwIv/OnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLxORl1Zs9RQc+An2m/4qqhQRbQ5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmFmNWE4OTEtZDIzZS0z
ZDVjLTg3MWMtZTk2YjQ5YTUyMjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzS8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHnYmp6obYK7SiWylOBIEKjW71UH5XFTqPG+eGnnC2Hk/Rq0dHtzIldd
rQ1Y06WBYOqbiYkJOe08CjAA6Bi5805zghT+WSl0SMtEvk/zwciQ0EmXzGY/7w2a
yamEkzHyeVa1YO4RB1EE9GvKlauWwD1BJu6kWgXex+AkiTcDsY/WhyyIeiZLEIIc
3OOEFsQV1eSV21TzXWaYie9C2OLNGSJopoiZ+Y6hwr29Ib/Z67vNqTu1LUKoRCL+
YFoX3tw9Iwm8qXm/VtgwSa9KDWFAKticCrwZ9006bidSLladrQggSaJOX8q6A42d
OmpfDg7pZbS+4aKu7F+hnxiFm9G4CT0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:58:05 2025 by rpki-client