Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4165ca3f-83b4-34a3-8f24-e13d876b5294.roa
File: 4165ca3f-83b4-34a3-8f24-e13d876b5294.roa (raw, json)
Hash identifier: 8OTfyvXdr2q1JAcb0vPpeMampnFkM/oIIMlndEL7Yiw=
Subject key identifier: 03:90:4B:90:99:BE:C7:1F:21:80:2F:2B:1B:13:D3:C0:B3:2E:0D:83
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858482A8FDB2C32392547B91E7280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4165ca3f-83b4-34a3-8f24-e13d876b5294.roa
Signing time: Wed 11 Dec 2024 02:00:38 +0000
ROA not before: Wed 11 Dec 2024 02:00:38 +0000
ROA not after: Tue 11 Mar 2025 01:00:38 +0000
asID: 12222
IP address blocks: 23.56.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8f:db:2c:32:39:25:47:b9:1e:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 11 02:00:38 2024 GMT
Not After : Mar 11 01:00:38 2025 GMT
Subject: CN=014732fe-514d-4b44-990d-2e576cbca1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:88:3a:78:97:a4:ef:02:e2:c9:11:56:b6:c4:
24:5c:31:b4:71:06:81:14:97:8b:de:ec:03:18:f2:
59:12:fc:1f:10:32:4d:61:51:08:78:77:61:78:df:
4c:17:8a:ef:e3:d9:cb:2e:e6:4b:64:40:b9:da:e4:
5a:2d:3b:2d:b6:d2:04:87:53:c9:1c:b9:0e:8c:f9:
c9:ef:c3:27:98:f1:04:a5:34:3e:e0:8d:91:ce:6b:
87:19:b4:c5:51:a6:5f:44:f6:27:58:87:54:f5:42:
45:6f:fb:fe:2e:53:06:09:91:52:3c:ce:45:b6:53:
0e:bf:3d:20:6e:41:b7:38:76:15:c8:b8:05:8f:bb:
7e:c6:ac:5d:db:34:3d:e2:2f:b1:02:e4:2f:d9:17:
e6:be:38:4c:97:99:bb:30:67:3a:df:f8:fc:12:8d:
fd:f8:59:fa:41:ed:19:6b:cf:62:50:02:90:5a:63:
d4:47:fa:9d:60:a6:24:25:95:fa:d8:83:46:5d:c2:
20:3c:3f:c4:3d:a1:f8:2e:40:73:0d:2a:87:b8:dd:
9b:88:ab:4a:90:0f:dc:b7:b3:68:ca:c1:9a:16:f6:
7b:54:46:32:14:b8:5b:f1:14:d0:e1:1b:d3:f9:f6:
43:56:09:69:4b:97:5a:88:f7:5c:9c:75:04:b7:33:
7f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:90:4B:90:99:BE:C7:1F:21:80:2F:2B:1B:13:D3:C0:B3:2E:0D:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4165ca3f-83b4-34a3-8f24-e13d876b5294.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.56.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:0f:3a:fb:28:7a:f2:b2:64:67:a9:ff:43:ee:60:56:21:24:
92:7b:6e:9b:51:02:fa:2a:b6:6c:ff:94:fd:a6:c8:a7:23:33:
77:a8:ac:8a:c9:16:f2:87:38:e4:04:fa:72:d7:87:69:31:5b:
4c:04:40:54:ac:cf:91:8a:9f:16:42:e3:af:53:9e:8b:97:99:
e4:68:41:8c:81:7d:20:56:44:ad:1d:72:98:43:1b:33:bc:97:
55:f3:27:24:05:1f:aa:c0:f4:b0:77:45:f2:b9:fa:3f:2c:61:
1f:f4:40:1f:90:f8:ab:37:00:a2:2e:87:bc:cd:1c:70:27:11:
28:1b:34:a8:2b:ff:73:36:9a:64:8d:bc:42:d9:65:a1:25:c8:
a5:51:da:c1:65:16:b8:06:52:c5:0c:59:01:bf:c5:ea:83:bf:
78:4b:af:a5:03:6e:90:06:56:87:95:34:e8:ad:64:00:2c:dc:
79:97:58:d8:6a:25:63:d6:d4:56:ba:ee:4d:3d:2e:df:33:9b:
f4:2b:b1:85:00:c6:ac:42:8b:df:8c:d9:5e:75:49:f9:f7:f4:
b7:3c:87:74:05:48:1b:ae:7a:35:40:83:a5:98:19:0e:61:0c:
fb:38:1c:ab:39:aa:5e:30:97:e1:68:2c:c2:2d:9e:2c:b8:b1:
fa:7b:6c:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgqj9ssMjklR7kecoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIxMTAyMDAzOFoXDTI1MDMxMTAxMDAzOFowLzEtMCsGA1UEAxMk
MDE0NzMyZmUtNTE0ZC00YjQ0LTk5MGQtMmU1NzZjYmNhMWE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4g6eJek7wLiyRFWtsQkXDG0cQaBFJeL3uwD
GPJZEvwfEDJNYVEIeHdheN9MF4rv49nLLuZLZEC52uRaLTstttIEh1PJHLkOjPnJ
78MnmPEEpTQ+4I2RzmuHGbTFUaZfRPYnWIdU9UJFb/v+LlMGCZFSPM5FtlMOvz0g
bkG3OHYVyLgFj7t+xqxd2zQ94i+xAuQv2RfmvjhMl5m7MGc63/j8Eo39+Fn6Qe0Z
a89iUAKQWmPUR/qdYKYkJZX62INGXcIgPD/EPaH4LkBzDSqHuN2biKtKkA/ct7No
ysGaFvZ7VEYyFLhb8RTQ4RvT+fZDVglpS5daiPdcnHUEtzN/lwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAOQS5CZvscfIYAvKxsT08CzLg2DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDE2NWNhM2YtODNiNC0z
NGEzLThmMjQtZTEzZDg3NmI1Mjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzjRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEQPOvsoevKyZGep/0PuYFYhJJJ7bptRAvoqtmz/lP2myKcjM3eorIrJ
FvKHOOQE+nLXh2kxW0wEQFSsz5GKnxZC469TnouXmeRoQYyBfSBWRK0dcphDGzO8
l1XzJyQFH6rA9LB3RfK5+j8sYR/0QB+Q+Ks3AKIuh7zNHHAnESgbNKgr/3M2mmSN
vELZZaElyKVR2sFlFrgGUsUMWQG/xeqDv3hLr6UDbpAGVoeVNOitZAAs3HmXWNhq
JWPW1Fa67k09Lt8zm/QrsYUAxqxCi9+M2V51Sfn39Lc8h3QFSBuuejVAg6WYGQ5h
DPs4HKs5ql4wl+FoLMItniy4sfp7bLE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:35:50 2025 by rpki-client