Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/653bee35-e8bd-318d-a4aa-dc2342819da6.roa
File: 653bee35-e8bd-318d-a4aa-dc2342819da6.roa (raw, json)
Hash identifier: 4RGoiUMVUtq7jP5RgCFU/L1w3N9v1E+uuf7MGoBOBE0=
Subject key identifier: 8F:9D:0E:9C:E8:36:B7:D2:B1:DC:39:BE:32:0E:A5:A9:22:59:32:B1
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858483CB57AF8A642F16E7B696380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/653bee35-e8bd-318d-a4aa-dc2342819da6.roa
Signing time: Tue 17 Dec 2024 14:00:52 +0000
ROA not before: Tue 17 Dec 2024 14:00:52 +0000
ROA not after: Mon 17 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.211.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3c:b5:7a:f8:a6:42:f1:6e:7b:69:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 17 14:00:52 2024 GMT
Not After : Mar 17 13:00:52 2025 GMT
Subject: CN=910a6968-24e6-4293-948e-69db30beca35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:57:91:b2:37:40:ef:38:7f:fb:f5:9b:68:39:
ad:45:56:3f:81:30:94:4d:72:34:29:c2:de:6b:b2:
8d:17:2a:04:60:fa:3c:d5:a8:84:65:52:c7:70:9e:
9c:08:6f:47:b5:02:7b:dc:1f:ae:9b:37:05:c1:26:
b0:cd:d1:a6:5a:33:4b:36:0f:44:6d:e9:b1:d1:72:
b1:4f:b5:d1:ba:a4:db:fd:c7:ca:13:c2:97:6f:18:
1a:fb:da:24:82:95:a9:da:d5:20:64:05:21:f2:77:
04:5d:a0:38:e0:c1:f4:12:8e:b1:d5:09:fc:ea:fc:
a2:08:08:53:1d:fb:1b:b2:a1:e6:ea:fb:d0:78:bc:
8d:1c:8d:dd:a1:7e:cd:4a:94:62:bd:96:55:9f:55:
18:20:4e:35:46:78:17:f9:9f:e5:51:20:df:94:d9:
45:f1:9e:2b:57:4e:49:69:9a:5e:6a:3c:50:80:ea:
2f:b5:be:c3:bd:3c:b1:99:a2:f5:85:2f:58:e2:43:
17:51:e7:1b:df:87:90:81:bd:58:fd:66:5c:b9:7a:
88:4f:59:90:07:30:d9:a8:40:45:3c:69:5c:48:53:
76:5a:74:39:ba:6a:56:a8:3d:30:97:e2:b8:a2:91:
74:bc:66:08:bf:5a:d9:e3:13:49:15:6b:df:39:27:
8a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9D:0E:9C:E8:36:B7:D2:B1:DC:39:BE:32:0E:A5:A9:22:59:32:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/653bee35-e8bd-318d-a4aa-dc2342819da6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.211.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:ad:0b:96:8c:ea:27:75:cc:35:b4:89:4a:7e:3a:9c:c6:08:
eb:47:a7:cf:6a:83:29:79:e6:6f:38:e0:b1:64:cb:ee:ba:81:
04:19:43:27:0f:e9:8f:8f:2d:2a:1c:ea:1b:b0:84:06:f4:61:
76:37:e4:89:c5:b7:27:d6:21:60:63:79:07:6b:cf:8c:b3:a8:
45:55:bd:b9:b2:26:d9:0a:4b:02:45:f0:e0:ca:15:75:9b:5c:
2d:8d:db:b2:30:2f:3b:60:1e:b1:25:10:b7:07:b7:19:ec:6c:
85:a1:ec:ef:29:2f:6d:82:ad:dc:e2:e1:9e:1e:2e:56:e8:7c:
87:17:eb:2b:24:ae:ef:a9:16:7e:f5:6e:19:b2:de:31:29:a8:
eb:05:cd:58:a5:37:d7:ec:dd:ef:57:34:06:64:02:0d:9d:fa:
0f:10:81:d5:18:96:45:5a:42:ae:bc:ee:ed:25:a1:13:e9:11:
69:ff:c7:81:0e:c9:46:47:eb:6d:db:5a:13:bf:18:c6:26:f4:
43:0f:81:6b:52:02:e4:93:14:61:4c:d9:d4:b7:f1:2d:00:31:
0f:3f:08:b1:07:0e:c4:c7:22:45:0d:db:4e:55:13:54:ac:7b:
bf:a1:be:2b:26:0e:77:6c:86:7c:bd:db:ee:01:b3:90:f0:44:
9c:d2:fc:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg8tXr4pkLxbntpY4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIxNzE0MDA1MloXDTI1MDMxNzEzMDA1MlowLzEtMCsGA1UEAxMk
OTEwYTY5NjgtMjRlNi00MjkzLTk0OGUtNjlkYjMwYmVjYTM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjleRsjdA7zh/+/WbaDmtRVY/gTCUTXI0KcLe
a7KNFyoEYPo81aiEZVLHcJ6cCG9HtQJ73B+umzcFwSawzdGmWjNLNg9Ebemx0XKx
T7XRuqTb/cfKE8KXbxga+9okgpWp2tUgZAUh8ncEXaA44MH0Eo6x1Qn86vyiCAhT
HfsbsqHm6vvQeLyNHI3doX7NSpRivZZVn1UYIE41RngX+Z/lUSDflNlF8Z4rV05J
aZpeajxQgOovtb7DvTyxmaL1hS9Y4kMXUecb34eQgb1Y/WZcuXqIT1mQBzDZqEBF
PGlcSFN2WnQ5umpWqD0wl+K4opF0vGYIv1rZ4xNJFWvfOSeKCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI+dDpzoNrfSsdw5vjIOpakiWTKxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjUzYmVlMzUtZThiZC0z
MThkLWE0YWEtZGMyMzQyODE5ZGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9OAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHmtC5aM6id1zDW0iUp+OpzGCOtHp89qgyl55m844LFky+66gQQZQycP
6Y+PLSoc6huwhAb0YXY35InFtyfWIWBjeQdrz4yzqEVVvbmyJtkKSwJF8ODKFXWb
XC2N27IwLztgHrElELcHtxnsbIWh7O8pL22Crdzi4Z4eLlbofIcX6yskru+pFn71
bhmy3jEpqOsFzVilN9fs3e9XNAZkAg2d+g8QgdUYlkVaQq687u0loRPpEWn/x4EO
yUZH623bWhO/GMYm9EMPgWtSAuSTFGFM2dS38S0AMQ8/CLEHDsTHIkUN205VE1Ss
e7+hvismDndshny92+4Bs5DwRJzS/B4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:06:06 2025 by rpki-client