Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/836beaec-4ac1-3060-9f86-98cf929d48dc.roa
File: 836beaec-4ac1-3060-9f86-98cf929d48dc.roa (raw, json)
Hash identifier: Tyrit8uE82FbkdvZ7qvYhJ+4h3vvRIny/5CNuNdiEU4=
Subject key identifier: 44:6B:21:D7:2D:BA:6F:43:B3:46:67:9F:83:B3:0E:2F:D3:A7:D2:3D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848451598F3E221C6FDC51D1700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/836beaec-4ac1-3060-9f86-98cf929d48dc.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.5.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:98:f3:e2:21:c6:fd:c5:1d:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=b0e1dea4-e85d-4536-9cdb-7921f31c9860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3d:69:5d:cd:04:4c:13:14:c2:f6:3e:bd:d6:
f7:33:d5:6b:4f:f1:86:69:34:cd:e3:12:bf:e2:29:
22:ad:88:fa:0b:55:a2:38:bc:a9:e8:99:e1:fc:ad:
ad:e2:97:76:e2:53:03:c6:fe:dc:47:eb:61:aa:78:
f3:77:8f:79:31:e6:90:a5:9b:d4:c7:15:2c:5a:15:
38:59:f3:df:b2:8d:4a:4f:03:fa:12:47:a5:84:8b:
1f:78:61:59:37:56:4e:6b:0c:29:35:eb:07:da:57:
9b:61:6d:25:ca:07:a0:fb:cf:0b:cb:de:72:5f:a9:
f8:67:1a:6b:f2:00:94:98:a2:55:d4:1e:5a:d3:f0:
d4:fe:91:4d:af:72:22:95:07:7b:fd:99:08:e9:76:
42:95:d9:f4:ca:d8:9b:15:74:e1:66:d9:ad:50:9a:
86:3a:b5:88:18:87:29:90:d0:81:7e:1b:64:81:45:
45:1e:c1:0d:80:5b:6f:eb:58:35:a2:df:c8:a7:73:
c5:3e:7b:02:d5:7f:ec:70:21:4f:c7:4b:d8:b0:cd:
e9:07:9d:53:69:6a:f9:7c:75:ce:fe:eb:c5:8a:e5:
0e:a6:81:a7:ee:2d:89:4c:19:6c:5e:1e:28:37:65:
c2:dc:4c:ff:82:5c:5b:9c:f7:28:0c:54:3b:ce:bd:
ea:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6B:21:D7:2D:BA:6F:43:B3:46:67:9F:83:B3:0E:2F:D3:A7:D2:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/836beaec-4ac1-3060-9f86-98cf929d48dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.5.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:6b:f0:d5:b0:10:d3:f6:af:19:e0:03:dc:c3:9f:ea:b1:da:
c6:e3:79:3f:bf:2d:7a:bb:a2:4a:cf:6d:34:ac:47:57:b8:3f:
84:b8:b0:c3:bc:e3:40:af:60:f1:3c:1f:a9:61:36:62:ba:d8:
e8:fd:30:df:91:f0:08:d3:75:b4:e7:db:3d:3c:bc:bb:a2:85:
96:e2:12:45:ab:8d:44:56:a6:47:47:ef:e5:32:09:f5:27:22:
f6:2a:28:1c:4c:86:36:0f:4a:c1:3f:3b:3d:9b:f7:04:81:b4:
6a:5b:07:0a:3d:f0:0d:e7:fa:96:3d:92:bc:a2:b7:df:4a:e1:
42:b8:02:1c:e3:42:61:8b:d4:f8:31:ec:a2:23:b9:27:5a:44:
1a:fb:c9:7b:5a:7c:a2:16:c0:8b:0c:de:da:02:d3:90:8a:b3:
db:6b:09:87:8a:af:82:12:be:45:51:d1:b4:0c:d9:37:48:1a:
bf:bb:b4:8f:7a:1a:f6:2a:5c:0c:1c:d4:2f:c5:22:9a:d0:8d:
62:d8:11:e0:51:bb:f0:e9:2e:ce:7a:78:0c:6c:2b:7e:f7:70:
42:2d:03:6e:22:27:d2:bf:63:56:65:b8:36:5a:2a:24:b8:79:
be:2f:d5:b4:0b:91:e4:b6:0f:a4:86:81:45:62:88:26:60:88:
af:c4:fd:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhFFZjz4iHG/cUdFwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk
YjBlMWRlYTQtZTg1ZC00NTM2LTljZGItNzkyMWYzMWM5ODYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz1pXc0ETBMUwvY+vdb3M9VrT/GGaTTN4xK/
4ikirYj6C1WiOLyp6Jnh/K2t4pd24lMDxv7cR+thqnjzd495MeaQpZvUxxUsWhU4
WfPfso1KTwP6EkelhIsfeGFZN1ZOawwpNesH2lebYW0lygeg+88Ly95yX6n4Zxpr
8gCUmKJV1B5a0/DU/pFNr3IilQd7/ZkI6XZCldn0ytibFXThZtmtUJqGOrWIGIcp
kNCBfhtkgUVFHsENgFtv61g1ot/Ip3PFPnsC1X/scCFPx0vYsM3pB51TaWr5fHXO
/uvFiuUOpoGn7i2JTBlsXh4oN2XC3Ez/glxbnPcoDFQ7zr3qGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFERrIdctum9Ds0Znn4OzDi/Tp9I9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODM2YmVhZWMtNGFjMS0z
MDYwLTlmODYtOThjZjkyOWQ0OGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwXwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHZr8NWwENP2rxngA9zDn+qx2sbjeT+/LXq7okrPbTSsR1e4P4S4sMO8
40CvYPE8H6lhNmK62Oj9MN+R8AjTdbTn2z08vLuihZbiEkWrjURWpkdH7+UyCfUn
IvYqKBxMhjYPSsE/Oz2b9wSBtGpbBwo98A3n+pY9kryit99K4UK4AhzjQmGL1Pgx
7KIjuSdaRBr7yXtafKIWwIsM3toC05CKs9trCYeKr4ISvkVR0bQM2TdIGr+7tI96
GvYqXAwc1C/FIprQjWLYEeBRu/DpLs56eAxsK373cEItA24iJ9K/Y1ZluDZaKiS4
eb4v1bQLkeS2D6SGgUViiCZgiK/E/QE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:53:18 2025 by rpki-client