Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/540be059-c7de-3e0e-9c92-4aa01f8b7a86.roa
File: 540be059-c7de-3e0e-9c92-4aa01f8b7a86.roa (raw, json)
Hash identifier: d4dAkyqhjC9YVpE2NjUrMSWj46rUOnnUsr3a4NN5rH4=
Subject key identifier: 55:B1:77:E4:DE:53:5D:98:50:82:3B:DF:61:01:D8:24:F0:0D:E6:86
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847EA5A0AFAD082CD371C654300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/540be059-c7de-3e0e-9c92-4aa01f8b7a86.roa
Signing time: Mon 18 Nov 2024 02:00:27 +0000
ROA not before: Mon 18 Nov 2024 02:00:27 +0000
ROA not after: Sun 16 Feb 2025 02:00:27 +0000
asID: 16625
IP address blocks: 23.218.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ea:5a:0a:fa:d0:82:cd:37:1c:65:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 18 02:00:27 2024 GMT
Not After : Feb 16 02:00:27 2025 GMT
Subject: CN=d0187103-a2a4-4f01-bd6f-e74dd0c14712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7f:ba:cb:24:55:df:1c:e8:e1:e7:e0:7f:ff:
d7:8e:9b:1e:b3:96:29:60:69:63:c0:97:8d:3c:f1:
58:3f:06:47:c7:04:9b:69:f7:9b:2e:9f:ba:50:ef:
db:ee:64:77:cb:74:45:a8:63:00:7d:2d:c0:8d:0c:
1f:d4:f9:57:6d:11:e4:ee:24:92:b1:ee:3a:cc:8e:
7f:f1:de:1b:14:cf:e4:c3:40:02:e2:75:fc:19:53:
e8:4c:11:f5:b2:d4:92:bd:f0:4e:2b:68:ec:7e:84:
fd:ed:82:3e:50:a0:05:57:53:e1:93:28:61:d9:ba:
0c:1c:f2:49:0a:63:2d:57:cc:aa:06:6a:2e:1a:ae:
57:2e:2c:14:0e:97:52:a9:62:9a:a4:dd:ec:60:05:
ad:d5:37:04:ea:79:f4:4e:e6:e4:0c:bc:63:cb:5e:
4e:28:5e:99:88:18:55:fc:61:a9:cc:cb:1d:48:e3:
a7:23:7d:3d:81:7d:e8:40:91:8d:c2:4f:cd:4f:b4:
91:d8:31:b4:d8:74:f2:ed:8b:3f:41:ac:2c:f1:54:
af:e6:38:da:16:6b:3b:19:ac:95:83:8d:96:c8:7f:
fb:87:7c:37:e1:29:28:38:64:4b:fa:ab:c6:65:56:
6f:b7:f4:97:84:f3:0b:53:78:b4:41:a0:9a:04:5b:
9b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B1:77:E4:DE:53:5D:98:50:82:3B:DF:61:01:D8:24:F0:0D:E6:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/540be059-c7de-3e0e-9c92-4aa01f8b7a86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.218.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:a3:2e:80:3b:64:f6:49:36:50:6d:b2:49:0e:a5:34:8d:4b:
fd:c5:51:55:f9:e0:82:71:ed:10:a7:11:0e:83:36:5a:d9:08:
e5:dc:41:72:42:a4:ea:f7:26:86:be:69:47:7b:bc:c8:e5:2c:
54:b0:68:22:b4:ea:21:c3:de:44:41:80:e4:3f:86:7e:77:28:
b1:f2:77:9a:45:f9:d1:40:a3:fb:d2:f5:92:ac:9a:55:04:59:
26:e8:65:0c:81:f3:b4:04:bc:37:e8:0b:6e:15:4c:e9:80:e1:
34:cb:49:6e:ca:99:3d:fa:1d:71:5a:61:70:60:9f:12:60:d3:
9d:44:c3:b8:bc:e9:27:ca:c5:b1:d8:3f:53:ac:df:03:8f:73:
1a:f2:62:32:d7:ac:f1:08:87:03:42:1e:f0:54:0e:39:d8:94:
59:64:9c:fe:a8:bd:6e:f3:42:4d:4a:ab:58:ab:fe:38:ce:5d:
ea:90:c9:40:9f:de:96:20:8b:74:5b:99:e3:12:56:9e:db:2e:
62:48:76:47:28:ad:8c:5f:a4:16:8a:ce:8e:64:a4:91:86:d8:
1e:c1:41:0d:5e:ac:00:6e:ce:a0:15:9b:7e:23:7d:04:60:aa:
9a:b9:ac:24:5a:63:23:26:6c:56:bd:ea:0e:b8:fc:1f:dd:38:
56:7f:ab:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfqWgr60ILNNxxlQwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTExODAyMDAyN1oXDTI1MDIxNjAyMDAyN1owLzEtMCsGA1UEAxMk
ZDAxODcxMDMtYTJhNC00ZjAxLWJkNmYtZTc0ZGQwYzE0NzEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH+6yyRV3xzo4efgf//Xjpses5YpYGljwJeN
PPFYPwZHxwSbafebLp+6UO/b7mR3y3RFqGMAfS3AjQwf1PlXbRHk7iSSse46zI5/
8d4bFM/kw0AC4nX8GVPoTBH1stSSvfBOK2jsfoT97YI+UKAFV1Phkyhh2boMHPJJ
CmMtV8yqBmouGq5XLiwUDpdSqWKapN3sYAWt1TcE6nn0TubkDLxjy15OKF6ZiBhV
/GGpzMsdSOOnI309gX3oQJGNwk/NT7SR2DG02HTy7Ys/Qaws8VSv5jjaFms7GayV
g42WyH/7h3w34SkoOGRL+qvGZVZvt/SXhPMLU3i0QaCaBFubCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFWxd+TeU12YUII732EB2CTwDeaGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTQwYmUwNTktYzdkZS0z
ZTBlLTljOTItNGFhMDFmOGI3YTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9okMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADyjLoA7ZPZJNlBtskkOpTSNS/3FUVX54IJx7RCnEQ6DNlrZCOXcQXJC
pOr3Joa+aUd7vMjlLFSwaCK06iHD3kRBgOQ/hn53KLHyd5pF+dFAo/vS9ZKsmlUE
WSboZQyB87QEvDfoC24VTOmA4TTLSW7KmT36HXFaYXBgnxJg051Ew7i86SfKxbHY
P1Os3wOPcxryYjLXrPEIhwNCHvBUDjnYlFlknP6ovW7zQk1Kq1ir/jjOXeqQyUCf
3pYgi3RbmeMSVp7bLmJIdkcorYxfpBaKzo5kpJGG2B7BQQ1erABuzqAVm34jfQRg
qpq5rCRaYyMmbFa96g64/B/dOFZ/qxg=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:44:04 2025 by rpki-client