Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7405b4fe-20f0-30a0-84ae-e792143df6c3.roa
File: 7405b4fe-20f0-30a0-84ae-e792143df6c3.roa (raw, json)
Hash identifier: E7St9E972+ejGD4jlOzAXtUPQXGfSWBf+MjgkxgrckU=
Subject key identifier: DF:37:A8:7A:C4:BE:7D:E3:1F:ED:56:BA:24:96:80:49:1C:22:BC:32
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847FF257A999ED820FB5B0D4780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7405b4fe-20f0-30a0-84ae-e792143df6c3.roa
Signing time: Mon 25 Nov 2024 12:46:36 +0000
ROA not before: Mon 25 Nov 2024 12:46:36 +0000
ROA not after: Sun 23 Feb 2025 12:46:36 +0000
asID: 20940
IP address blocks: 23.217.206.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:25:7a:99:9e:d8:20:fb:5b:0d:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 25 12:46:36 2024 GMT
Not After : Feb 23 12:46:36 2025 GMT
Subject: CN=c1d2c77e-04cf-4055-a2ef-fcca36a01880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b0:2d:88:f7:e3:cb:dd:98:11:c0:f4:83:df:
2e:39:82:91:23:d6:7c:5d:eb:7f:4e:d9:7e:d6:63:
06:42:8d:2b:fa:1d:9f:04:ad:4c:c2:e7:f4:df:c5:
55:2f:70:2d:c2:a9:74:6e:7c:e0:b1:c2:6b:8b:44:
65:21:b0:3f:bb:32:7a:5b:a3:b8:82:85:da:40:b5:
d4:9d:da:9e:6f:8b:f2:b5:46:13:ff:ed:2b:31:65:
c1:a9:bc:f9:93:d7:99:0e:ea:a7:d1:ec:dc:9b:26:
59:9a:fa:83:6b:70:79:55:f4:72:7c:07:a8:b4:c1:
1a:9b:02:4c:8e:71:29:5d:b0:77:ab:39:c1:12:d8:
be:04:f7:7a:88:a2:fc:4f:9c:be:29:ac:23:c1:19:
45:81:c8:ef:72:a3:99:83:92:d4:47:e3:cc:ec:34:
40:4d:d1:8c:3c:b1:2a:a2:b0:f2:97:98:b2:74:80:
2b:8c:05:86:c9:0d:f8:d8:41:3f:3b:f4:ce:fc:d0:
33:7b:4c:23:a6:18:2b:15:9d:29:35:3f:ee:be:cc:
8f:1b:7e:60:5c:f9:c4:8c:ef:97:6f:9a:66:5c:f9:
5c:a8:6f:93:5c:99:d4:ab:07:af:98:e1:4b:9b:d4:
a3:ad:e0:20:fc:a5:7f:3e:ef:7a:40:da:01:ba:a8:
6e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:37:A8:7A:C4:BE:7D:E3:1F:ED:56:BA:24:96:80:49:1C:22:BC:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7405b4fe-20f0-30a0-84ae-e792143df6c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.217.206.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:aa:01:8e:30:45:15:87:69:94:6e:ad:a1:b7:22:62:9e:fc:
10:1a:5e:48:fc:f0:07:71:3b:5d:95:6a:50:ca:8d:12:5a:43:
8c:df:3c:42:3f:81:9a:bf:5e:79:11:ff:48:75:4a:7a:b5:15:
44:2a:1a:08:2c:aa:03:45:2b:a3:77:ed:7e:3c:fc:db:50:d0:
fc:8a:d2:48:2b:c7:73:7c:c3:ad:d3:2a:3b:55:e3:d9:45:3f:
dd:f4:69:ef:e9:7f:74:58:ab:d2:ae:47:c5:65:f2:35:53:5b:
0d:91:c0:5b:35:d1:a6:07:46:1e:e8:e4:7e:03:f5:30:bf:5b:
47:45:c9:f1:cc:c9:f0:10:fe:14:93:be:6e:f4:6b:1a:35:23:
52:ec:81:8e:7e:82:1f:3b:e6:33:51:2f:ed:b8:c7:5f:47:39:
0d:99:7a:f6:b5:2b:72:5f:e5:c4:02:84:be:7f:a3:80:27:c0:
a7:77:0c:f7:5a:38:4a:58:8e:05:37:a7:6e:40:9a:13:3c:d6:
ef:f1:a7:49:7b:5d:a7:7f:ac:7d:26:91:24:8c:37:e6:ce:ef:
52:0c:87:ac:4d:11:69:35:e2:e7:ff:15:16:66:9b:88:0a:af:
da:e7:cb:06:e6:e8:9f:48:55:87:49:86:19:44:ff:33:d6:4c:
4e:62:8a:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf/JXqZntgg+1sNR4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTEyNTEyNDYzNloXDTI1MDIyMzEyNDYzNlowLzEtMCsGA1UEAxMk
YzFkMmM3N2UtMDRjZi00MDU1LWEyZWYtZmNjYTM2YTAxODgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rAtiPfjy92YEcD0g98uOYKRI9Z8Xet/Ttl+
1mMGQo0r+h2fBK1Mwuf038VVL3Atwql0bnzgscJri0RlIbA/uzJ6W6O4goXaQLXU
ndqeb4vytUYT/+0rMWXBqbz5k9eZDuqn0ezcmyZZmvqDa3B5VfRyfAeotMEamwJM
jnEpXbB3qznBEti+BPd6iKL8T5y+KawjwRlFgcjvcqOZg5LUR+PM7DRATdGMPLEq
orDyl5iydIArjAWGyQ342EE/O/TO/NAze0wjphgrFZ0pNT/uvsyPG35gXPnEjO+X
b5pmXPlcqG+TXJnUqwevmOFLm9SjreAg/KV/Pu96QNoBuqhuvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN83qHrEvn3jH+1WuiSWgEkcIrwyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzQwNWI0ZmUtMjBmMC0z
MGEwLTg0YWUtZTc5MjE0M2RmNmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9nOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACGqAY4wRRWHaZRuraG3ImKe/BAaXkj88AdxO12ValDKjRJaQ4zfPEI/
gZq/XnkR/0h1Snq1FUQqGggsqgNFK6N37X48/NtQ0PyK0kgrx3N8w63TKjtV49lF
P930ae/pf3RYq9KuR8Vl8jVTWw2RwFs10aYHRh7o5H4D9TC/W0dFyfHMyfAQ/hST
vm70axo1I1LsgY5+gh875jNRL+24x19HOQ2Zeva1K3Jf5cQChL5/o4AnwKd3DPda
OEpYjgU3p25AmhM81u/xp0l7Xad/rH0mkSSMN+bO71IMh6xNEWk14uf/FRZmm4gK
r9rnywbm6J9IVYdJhhlE/zPWTE5iikE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:49:23 2025 by rpki-client