Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f069955-05ce-3662-8eeb-cf6fe17aa628.roa
File: 4f069955-05ce-3662-8eeb-cf6fe17aa628.roa (raw, json)
Hash identifier: 9w6XnnCRnsy4thRThk5cyoi89Gw0OBnIgeAH6KuKtkY=
Subject key identifier: 47:8F:8C:5B:89:B3:5E:3C:DC:FC:B7:F0:BD:B3:62:8B:92:EC:7A:4D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A208F8CB31E1F88F3626300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f069955-05ce-3662-8eeb-cf6fe17aa628.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.36.136.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:8f:8c:b3:1e:1f:88:f3:62:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=2a16ece6-def2-4faa-aac9-2baa7f9d4146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5f:3c:c8:d1:de:9e:18:5f:d4:c6:ab:e7:bc:
62:dc:88:b3:ed:26:5c:d3:6e:75:f2:84:71:8e:e8:
3b:86:0e:af:71:a1:63:83:7f:17:67:e6:df:67:49:
15:6b:9e:4d:aa:dc:ba:0c:ea:08:41:3b:94:5c:b8:
36:71:9c:13:76:11:c1:11:9f:ad:1e:90:ca:ae:86:
80:28:07:05:e9:0c:98:c4:4c:65:fd:36:3a:26:db:
a5:1e:48:7d:1b:38:e6:ac:de:05:60:86:a8:b6:62:
70:6f:53:4e:24:4b:3d:f6:c7:81:f6:7a:80:51:3d:
f0:79:e8:da:4a:74:d2:ef:2c:78:d5:dd:95:be:8a:
49:01:db:37:72:b7:cf:b6:c5:40:7f:42:36:6f:b9:
3c:a8:e1:3a:7a:66:52:09:67:15:a6:da:7c:96:f8:
00:26:a9:dd:98:59:b6:f6:e7:3c:69:4c:b5:99:83:
7c:e9:db:36:18:7c:5b:d1:72:41:ef:d3:d8:8f:8d:
68:56:c8:a9:5c:b9:47:c6:75:19:80:5b:48:4d:41:
1a:37:98:70:fc:ba:f6:fa:f8:56:de:3e:0f:ed:91:
7a:10:4f:01:06:57:28:4a:28:05:95:ad:47:77:56:
bf:7d:31:24:1e:2c:87:0e:bb:2d:83:7b:3e:be:c3:
56:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8F:8C:5B:89:B3:5E:3C:DC:FC:B7:F0:BD:B3:62:8B:92:EC:7A:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f069955-05ce-3662-8eeb-cf6fe17aa628.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.36.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:68:9a:b7:17:9f:ca:6a:9d:5d:0b:60:25:f0:e6:46:e9:e8:
82:66:28:99:4b:dc:a2:e9:d6:2c:96:11:46:77:c1:44:17:9b:
89:a7:0c:bc:5b:aa:62:01:da:86:9c:f3:6f:5c:d5:07:4c:d5:
b6:68:68:9c:7f:17:cd:10:02:08:30:ae:8a:67:84:d7:23:15:
6d:3e:fe:75:5e:25:8a:2d:66:46:65:52:cf:60:3d:f8:61:62:
57:32:42:19:8d:61:af:c3:22:1f:72:9f:45:ac:5f:9f:1e:97:
37:f4:ed:ab:e7:0d:75:bf:8e:d6:ad:3a:f2:91:c7:62:da:4e:
c4:59:fd:78:b1:0b:01:5d:6e:a5:e7:4a:3a:9a:c0:14:3a:00:
7d:fb:23:52:cf:f4:20:ae:ea:73:17:81:57:ac:ca:98:50:83:
d2:ad:1d:ef:88:04:56:e4:3c:93:c1:71:f7:ae:ab:61:4d:ee:
e6:a7:30:ba:09:9c:9b:e7:8c:b6:39:c5:25:95:05:f1:cf:72:
66:3e:aa:aa:1c:ab:e8:2a:37:7f:92:25:2a:57:6e:2c:2c:bc:
12:8f:3e:da:75:95:bf:38:4b:dd:26:64:a9:38:3e:fc:bb:19:
52:45:35:36:f8:e9:da:12:82:01:c9:13:b6:d1:f7:18:5c:2f:
66:0f:e1:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6II+Msx4fiPNiYwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk
MmExNmVjZTYtZGVmMi00ZmFhLWFhYzktMmJhYTdmOWQ0MTQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgV88yNHenhhf1Mar57xi3Iiz7SZc02518oRx
jug7hg6vcaFjg38XZ+bfZ0kVa55Nqty6DOoIQTuUXLg2cZwTdhHBEZ+tHpDKroaA
KAcF6QyYxExl/TY6JtulHkh9GzjmrN4FYIaotmJwb1NOJEs99seB9nqAUT3weeja
SnTS7yx41d2VvopJAds3crfPtsVAf0I2b7k8qOE6emZSCWcVptp8lvgAJqndmFm2
9uc8aUy1mYN86ds2GHxb0XJB79PYj41oVsipXLlHxnUZgFtITUEaN5hw/Lr2+vhW
3j4P7ZF6EE8BBlcoSigFla1Hd1a/fTEkHiyHDrstg3s+vsNWCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEePjFuJs1483Py38L2zYouS7HpNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGYwNjk5NTUtMDVjZS0z
NjYyLThlZWItY2Y2ZmUxN2FhNjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFySIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGtomrcXn8pqnV0LYCXw5kbp6IJmKJlL3KLp1iyWEUZ3wUQXm4mnDLxb
qmIB2oac829c1QdM1bZoaJx/F80QAggwropnhNcjFW0+/nVeJYotZkZlUs9gPfhh
YlcyQhmNYa/DIh9yn0WsX58elzf07avnDXW/jtatOvKRx2LaTsRZ/XixCwFdbqXn
SjqawBQ6AH37I1LP9CCu6nMXgVesyphQg9KtHe+IBFbkPJPBcfeuq2FN7uanMLoJ
nJvnjLY5xSWVBfHPcmY+qqocq+gqN3+SJSpXbiwsvBKPPtp1lb84S90mZKk4Pvy7
GVJFNTb46doSggHJE7bR9xhcL2YP4ek=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:57:08 2025 by rpki-client