Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2dfb0fa5-e063-35db-84f3-e8017a6b0971.roa
File: 2dfb0fa5-e063-35db-84f3-e8017a6b0971.roa (raw, json)
Hash identifier: c+YBVwM/tMYtUyQQ34sVgl6kGt/ozopkUXITT1R1tCg=
Subject key identifier: FD:CD:93:54:7D:6B:85:06:B5:1D:3C:72:65:EE:26:8A:22:2D:6D:F6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858486C2B2FD2A3751DF1F5675F40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2dfb0fa5-e063-35db-84f3-e8017a6b0971.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.63.20.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:2f:d2:a3:75:1d:f1:f5:67:5f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=56fde8a4-cecd-461e-9e5b-cfadff08b6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b8:94:5f:f8:d6:93:fc:bd:ac:e0:8b:d6:17:
d3:a3:3b:4b:da:ce:1c:a2:ba:60:21:48:6d:33:2c:
8d:d6:ec:9c:5d:95:b0:8f:4d:6c:a1:f1:a3:03:62:
e2:84:d8:d1:4c:c6:b6:7b:af:d4:69:8d:d8:5c:b2:
17:dc:37:dc:a5:14:ac:42:33:e3:3c:9f:4b:25:b0:
d6:26:5b:f0:22:55:e7:5b:21:4a:91:06:63:39:27:
c9:04:75:a5:0a:81:b5:4a:22:36:39:a8:9c:13:5d:
c4:a5:74:30:56:c7:08:52:47:8a:43:ee:ab:52:a6:
de:f5:57:dd:81:81:bb:d6:b9:37:d1:95:76:95:de:
e7:29:02:86:58:eb:ff:ec:05:94:c0:86:ae:7c:6f:
43:60:da:e5:04:bf:fe:99:b3:cf:93:da:e2:3e:ce:
15:6b:bd:a5:65:36:f7:66:7f:d1:9b:45:2e:17:ff:
85:db:af:3c:5f:66:f9:63:0a:37:70:0c:71:7f:f6:
19:4f:85:ea:5d:53:71:bc:f2:74:09:70:0e:51:2f:
52:52:56:81:c7:66:09:f3:c0:02:e0:27:a4:29:ae:
04:23:ae:82:14:c3:52:d9:47:8d:9d:78:ec:be:7c:
69:ec:4c:36:ec:78:6a:d5:b5:15:35:49:56:b7:cc:
83:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CD:93:54:7D:6B:85:06:B5:1D:3C:72:65:EE:26:8A:22:2D:6D:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2dfb0fa5-e063-35db-84f3-e8017a6b0971.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.63.20.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:5a:58:9e:34:d4:7e:fe:21:b3:1e:96:64:1a:10:ac:2f:9b:
78:59:b4:19:d6:6d:8b:8b:4e:bf:fd:6f:ce:c9:ea:4d:ed:e9:
ed:a9:32:bb:88:b3:a3:52:c3:20:24:39:26:3e:c5:d6:cd:bd:
be:3e:26:f8:2f:13:ae:4c:84:9e:3a:87:f2:26:32:75:15:5e:
47:9b:32:98:4b:6b:fc:14:6d:e5:55:68:ed:dc:42:11:9b:1d:
ee:fd:11:4f:82:ef:d3:f2:48:46:1f:5a:53:89:52:d5:87:b8:
78:7e:53:82:36:30:3d:7c:c0:ad:43:43:70:ba:76:ac:16:4b:
45:4b:92:a1:cc:91:bd:ff:79:b0:57:73:d1:fa:55:65:45:c9:
9d:bb:db:d4:7b:55:10:de:6d:6f:0c:26:32:2b:45:8b:de:b5:
13:3d:53:f6:cd:d5:ee:ba:8b:68:24:ac:3b:bf:31:3b:6f:95:
24:14:dc:30:4a:13:48:1e:ca:be:25:83:58:c3:86:0f:fe:98:
d6:ca:ba:ed:43:b5:c3:0a:f1:e4:49:b4:d4:ba:b0:a7:2d:5a:
13:6b:34:ec:3a:2d:83:74:cb:ac:3c:64:9c:de:3d:fb:46:70:
11:37:05:e4:34:a7:e6:cf:d2:a8:80:fb:cd:4e:bf:9c:11:b2:
e1:f7:45:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKy/So3Ud8fVnX0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk
NTZmZGU4YTQtY2VjZC00NjFlLTllNWItY2ZhZGZmMDhiNmU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7iUX/jWk/y9rOCL1hfToztL2s4corpgIUht
MyyN1uycXZWwj01sofGjA2LihNjRTMa2e6/UaY3YXLIX3DfcpRSsQjPjPJ9LJbDW
JlvwIlXnWyFKkQZjOSfJBHWlCoG1SiI2OaicE13EpXQwVscIUkeKQ+6rUqbe9Vfd
gYG71rk30ZV2ld7nKQKGWOv/7AWUwIaufG9DYNrlBL/+mbPPk9riPs4Va72lZTb3
Zn/Rm0UuF/+F2688X2b5Ywo3cAxxf/YZT4XqXVNxvPJ0CXAOUS9SUlaBx2YJ88AC
4CekKa4EI66CFMNS2UeNnXjsvnxp7Ew27Hhq1bUVNUlWt8yDmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP3Nk1R9a4UGtR08cmXuJooiLW32MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmRmYjBmYTUtZTA2My0z
NWRiLTg0ZjMtZTgwMTdhNmIwOTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFz8UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGhaWJ401H7+IbMelmQaEKwvm3hZtBnWbYuLTr/9b87J6k3t6e2pMruI
s6NSwyAkOSY+xdbNvb4+JvgvE65MhJ46h/ImMnUVXkebMphLa/wUbeVVaO3cQhGb
He79EU+C79PySEYfWlOJUtWHuHh+U4I2MD18wK1DQ3C6dqwWS0VLkqHMkb3/ebBX
c9H6VWVFyZ2729R7VRDebW8MJjIrRYvetRM9U/bN1e66i2gkrDu/MTtvlSQU3DBK
E0geyr4lg1jDhg/+mNbKuu1DtcMK8eRJtNS6sKctWhNrNOw6LYN0y6w8ZJzePftG
cBE3BeQ0p+bP0qiA+81Ov5wRsuH3RZY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:00:38 2025 by rpki-client