Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fc97993-0267-3733-b482-07b3ea56b923.roa
File: 3fc97993-0267-3733-b482-07b3ea56b923.roa (raw, json)
Hash identifier: PN8OwvmuYMHAOTm3hG+MkxniHeBi7IlQplDLAGiG1c8=
Subject key identifier: FD:C4:14:B7:C6:FF:7D:0B:CE:30:B8:C9:48:E7:64:72:72:D4:CA:06
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848897B1C9DC8EAA383307CAD80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fc97993-0267-3733-b482-07b3ea56b923.roa
Signing time: Tue 14 Jan 2025 02:00:39 +0000
ROA not before: Tue 14 Jan 2025 02:00:39 +0000
ROA not after: Mon 14 Apr 2025 01:00:39 +0000
asID: 16625
IP address blocks: 23.2.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:89:7b:1c:9d:c8:ea:a3:83:30:7c:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 14 02:00:39 2025 GMT
Not After : Apr 14 01:00:39 2025 GMT
Subject: CN=7f770f1f-a888-4bdd-a166-58c3ed44b9de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a8:9c:bf:d7:9f:a6:e2:29:19:80:6c:a2:c6:
7f:7d:f4:9b:1b:9e:83:bc:e5:f6:08:d0:31:c3:e6:
d9:73:be:76:2a:16:fd:30:1e:1d:fc:a7:38:c9:1d:
1f:dc:d4:bf:0e:d1:03:bd:0b:95:a1:18:25:c3:a2:
b9:56:5e:3c:6f:57:00:ee:3a:8a:ee:79:bf:0b:ef:
cd:dd:48:0d:38:fb:a3:6c:13:47:49:18:26:95:cc:
8b:25:69:9b:8d:3b:ec:ec:66:6d:e5:51:d0:dc:c3:
85:28:c7:d3:0a:b4:66:83:4c:79:4a:54:4a:af:f6:
db:e3:88:45:4c:8e:a3:8a:27:21:88:2a:0e:e6:7e:
6d:97:e4:a7:dd:ba:05:a0:8b:66:06:99:45:08:c4:
8b:20:5b:45:40:37:dc:9d:61:98:84:c4:98:7e:a6:
f0:c0:88:15:85:d8:83:3d:8b:bb:35:b7:2c:7d:cf:
5b:d6:73:69:c0:08:87:cb:ab:93:16:1a:e8:52:50:
97:2a:3e:9f:4f:92:8f:e0:ab:43:f7:02:2f:5f:de:
81:ad:c4:97:88:4f:68:4f:43:6d:9d:e8:52:9d:2c:
cf:06:05:97:88:20:0a:33:50:51:0a:24:e1:4c:15:
a7:2d:2e:f1:74:1b:71:a9:e4:40:bb:33:83:d1:0c:
67:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C4:14:B7:C6:FF:7D:0B:CE:30:B8:C9:48:E7:64:72:72:D4:CA:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fc97993-0267-3733-b482-07b3ea56b923.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.2.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:cf:16:39:64:82:c3:40:33:bb:b7:83:6c:0f:54:e4:89:2f:
58:da:bd:a5:79:d2:4f:11:2c:4c:70:e8:e4:23:d9:1a:20:24:
50:f1:30:98:ff:58:2d:63:55:b5:04:4f:82:16:28:d5:0e:14:
44:da:f9:0f:14:45:fd:df:3d:67:aa:63:55:2a:f7:1b:7e:75:
84:4c:08:16:63:76:d2:b9:c2:73:89:0f:a6:3d:63:c5:53:fb:
14:89:7f:40:e1:2c:8a:f0:dd:39:8a:da:34:fa:fd:4a:3b:a7:
49:4c:92:c2:ae:48:4a:48:0b:f7:41:e3:aa:4e:75:99:63:f8:
bb:80:32:a5:91:7d:fa:4e:b1:b3:e5:dc:9e:de:6f:86:ee:ba:
1b:c3:4d:00:73:ee:db:89:6c:34:c4:c8:89:b0:0a:a1:ee:6d:
ca:f0:9a:7e:4a:c2:09:29:7e:7b:a5:3a:50:fb:5b:7a:9e:81:
df:07:19:43:c3:52:3d:52:a4:82:c1:a6:73:f7:3e:88:b5:fe:
2a:46:eb:35:85:f3:e4:91:7a:75:94:1e:6a:da:c8:78:a6:56:
2d:e5:b2:25:3b:27:ba:af:73:0c:6e:93:42:63:e1:12:f4:8d:
f4:84:13:bb:8f:e6:72:24:aa:de:2c:2b:9f:c4:17:e2:b9:c0:
b2:c6:f5:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiJexydyOqjgzB8rYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDExNDAyMDAzOVoXDTI1MDQxNDAxMDAzOVowLzEtMCsGA1UEAxMk
N2Y3NzBmMWYtYTg4OC00YmRkLWExNjYtNThjM2VkNDRiOWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaicv9efpuIpGYBsosZ/ffSbG56DvOX2CNAx
w+bZc752Khb9MB4d/Kc4yR0f3NS/DtEDvQuVoRglw6K5Vl48b1cA7jqK7nm/C+/N
3UgNOPujbBNHSRgmlcyLJWmbjTvs7GZt5VHQ3MOFKMfTCrRmg0x5SlRKr/bb44hF
TI6jiichiCoO5n5tl+Sn3boFoItmBplFCMSLIFtFQDfcnWGYhMSYfqbwwIgVhdiD
PYu7Nbcsfc9b1nNpwAiHy6uTFhroUlCXKj6fT5KP4KtD9wIvX96BrcSXiE9oT0Nt
nehSnSzPBgWXiCAKM1BRCiThTBWnLS7xdBtxqeRAuzOD0Qxn3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP3EFLfG/30LzjC4yUjnZHJy1MoGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2ZjOTc5OTMtMDI2Ny0z
NzMzLWI0ODItMDdiM2VhNTZiOTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFwKAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABHPFjlkgsNAM7u3g2wPVOSJL1javaV50k8RLExw6OQj2RogJFDxMJj/
WC1jVbUET4IWKNUOFETa+Q8URf3fPWeqY1Uq9xt+dYRMCBZjdtK5wnOJD6Y9Y8VT
+xSJf0DhLIrw3TmK2jT6/Uo7p0lMksKuSEpIC/dB46pOdZlj+LuAMqWRffpOsbPl
3J7eb4buuhvDTQBz7tuJbDTEyImwCqHubcrwmn5KwgkpfnulOlD7W3qegd8HGUPD
Uj1SpILBpnP3Poi1/ipG6zWF8+SRenWUHmrayHimVi3lsiU7J7qvcwxuk0Jj4RL0
jfSEE7uP5nIkqt4sK5/EF+K5wLLG9dk=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:00:25 2025 by rpki-client