Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/474c51fc-ef1d-372e-98d0-42666d8f87c1.roa
File: 474c51fc-ef1d-372e-98d0-42666d8f87c1.roa (raw, json)
Hash identifier: Lh3GNj7KXA8M0UQ/Gs0DpszSGo6IO6ja9AYJOPP3opc=
Subject key identifier: 66:36:8D:37:DC:72:E3:26:DF:D8:27:E6:2E:AD:02:46:D5:E7:51:27
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858486EF5C47D1EE339465CCBB6C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/474c51fc-ef1d-372e-98d0-42666d8f87c1.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 24319
IP address blocks: 23.33.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:c4:7d:1e:e3:39:46:5c:cb:b6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=cdd64e48-44aa-41e0-a208-16d60f670b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:07:f5:ef:c2:07:23:a0:7b:6d:83:0e:ba:80:
5c:c4:b7:fd:9a:cb:8f:e3:5b:00:71:74:52:8e:47:
a4:ff:43:ce:f1:f1:f3:e4:74:ae:6a:79:44:89:61:
df:95:2e:43:b0:aa:14:c1:f1:ec:59:39:ca:c9:c3:
c4:39:04:0c:93:a6:ea:24:8a:35:b9:61:53:36:b5:
a0:da:95:80:4a:55:47:3a:c5:4d:b8:53:9a:85:2f:
17:c3:53:f7:36:11:a8:d7:da:d0:07:b9:f6:26:61:
93:6e:46:2e:75:65:8c:74:6e:1c:ac:c4:0b:ef:78:
a1:6c:d5:23:d0:c3:b1:f5:8c:92:f8:fc:a2:88:8c:
b9:c1:ec:e6:28:89:d4:c6:af:10:ca:5c:f2:fe:99:
9a:f6:16:91:0a:4b:fc:87:9c:15:ce:34:58:61:00:
82:1a:53:d5:9a:b3:f8:33:13:80:fb:7c:1d:d3:0f:
20:2e:35:1e:22:7e:75:46:32:4e:fc:c9:e5:01:5a:
7f:13:1d:b3:3c:c3:d9:72:6f:0d:2c:94:67:94:4e:
bb:b3:a6:0f:5e:29:cb:42:df:1b:66:48:34:95:b3:
67:cd:72:b3:71:d2:3e:b4:ba:aa:eb:76:74:3b:9b:
92:46:43:e3:67:be:37:b5:e5:f5:e9:c4:70:57:f0:
18:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:36:8D:37:DC:72:E3:26:DF:D8:27:E6:2E:AD:02:46:D5:E7:51:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/474c51fc-ef1d-372e-98d0-42666d8f87c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.33.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:64:a1:73:3c:6c:d6:bb:21:a0:e4:ff:2f:93:3e:01:4f:e1:
a3:82:d7:ff:5d:b1:07:69:cf:a5:7a:eb:1f:54:5e:f7:b0:28:
ca:c7:12:f7:d2:d1:f2:c4:36:0d:35:ec:63:9e:98:df:3d:a7:
8e:4f:6a:08:66:fa:f8:b5:fd:7c:60:e0:b4:00:01:b4:40:1a:
35:be:e7:ab:90:b2:8d:db:e0:6c:ed:8e:dc:ef:eb:3e:24:1a:
31:46:09:4f:1e:01:af:b0:b2:32:0c:96:49:95:cc:59:9f:aa:
7b:5e:31:93:61:4a:34:92:9c:2e:7e:53:3d:cf:e6:4e:33:9f:
64:71:68:fe:d1:6b:ba:b3:fd:c4:b2:13:65:5a:0d:62:d9:35:
f6:ad:00:10:b3:af:3a:9a:ba:81:bc:2a:05:ed:7c:23:ae:0c:
49:24:58:e1:a3:31:17:ea:5a:17:40:e4:f4:6b:85:09:96:2c:
62:7e:65:ff:33:70:3b:d4:9c:ce:f2:3e:cf:21:b0:e7:3b:03:
32:5a:26:86:95:e1:a0:be:6e:6d:6e:7d:8f:38:27:70:d2:56:
06:73:80:a1:25:1c:c9:ff:7f:fd:ed:62:80:b4:4e:36:36:8b:
48:de:93:29:82:6e:78:10:59:71:0a:13:bd:63:8b:fb:ce:61:
7b:ae:0f:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhu9cR9HuM5RlzLtsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEwNDE0MDA1MVoXDTI1MDQwNDEzMDA1MVowLzEtMCsGA1UEAxMk
Y2RkNjRlNDgtNDRhYS00MWUwLWEyMDgtMTZkNjBmNjcwYjUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wf178IHI6B7bYMOuoBcxLf9msuP41sAcXRS
jkek/0PO8fHz5HSuanlEiWHflS5DsKoUwfHsWTnKycPEOQQMk6bqJIo1uWFTNrWg
2pWASlVHOsVNuFOahS8Xw1P3NhGo19rQB7n2JmGTbkYudWWMdG4crMQL73ihbNUj
0MOx9YyS+PyiiIy5wezmKInUxq8Qylzy/pma9haRCkv8h5wVzjRYYQCCGlPVmrP4
MxOA+3wd0w8gLjUeIn51RjJO/MnlAVp/Ex2zPMPZcm8NLJRnlE67s6YPXinLQt8b
Zkg0lbNnzXKzcdI+tLqq63Z0O5uSRkPjZ743teX16cRwV/AYSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGY2jTfccuMm39gn5i6tAkbV51EnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDc0YzUxZmMtZWYxZC0z
NzJlLTk4ZDAtNDI2NjZkOGY4N2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyFwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACJkoXM8bNa7IaDk/y+TPgFP4aOC1/9dsQdpz6V66x9UXvewKMrHEvfS
0fLENg017GOemN89p45Paghm+vi1/Xxg4LQAAbRAGjW+56uQso3b4Gztjtzv6z4k
GjFGCU8eAa+wsjIMlkmVzFmfqnteMZNhSjSSnC5+Uz3P5k4zn2RxaP7Ra7qz/cSy
E2VaDWLZNfatABCzrzqauoG8KgXtfCOuDEkkWOGjMRfqWhdA5PRrhQmWLGJ+Zf8z
cDvUnM7yPs8hsOc7AzJaJoaV4aC+bm1ufY84J3DSVgZzgKElHMn/f/3tYoC0TjY2
i0jekymCbngQWXEKE71ji/vOYXuuD4Q=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:53:32 2025 by rpki-client