Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8754caa5-a5d2-3434-bef5-1d99fb4fce7b.roa
File: 8754caa5-a5d2-3434-bef5-1d99fb4fce7b.roa (raw, json)
Hash identifier: dmnoWukPGZ4n5EBsD1E/GMUu9W92tMpOCRh+b2CaEEI=
Subject key identifier: 6A:67:1F:F5:82:06:29:97:3A:12:93:AA:6A:26:48:0E:60:E1:3F:69
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858485CD039E427C8A78B9F5E4F20
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8754caa5-a5d2-3434-bef5-1d99fb4fce7b.roa
Signing time: Sun 29 Dec 2024 02:00:39 +0000
ROA not before: Sun 29 Dec 2024 02:00:39 +0000
ROA not after: Sat 29 Mar 2025 01:00:39 +0000
asID: 16625
IP address blocks: 23.44.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5c:d0:39:e4:27:c8:a7:8b:9f:5e:4f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 29 02:00:39 2024 GMT
Not After : Mar 29 01:00:39 2025 GMT
Subject: CN=941aa888-2910-441c-9aa7-c94cfc636cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:93:c9:20:2d:8d:aa:e7:27:23:08:90:0d:c0:
5c:cd:55:ab:67:1b:a5:ab:47:4a:3b:84:27:7d:7c:
4a:16:97:49:88:e1:74:19:94:bd:a8:f5:21:ca:14:
de:9d:92:71:18:bc:41:b9:b1:cd:2d:f5:11:77:c8:
74:f4:6f:98:ab:db:80:1e:23:97:4c:8f:03:04:2e:
8b:e8:2d:97:ca:d3:6f:c6:2c:7a:e8:1a:0f:af:ba:
8f:08:e0:d7:ac:a1:69:18:db:8b:42:1d:13:cf:1a:
1f:61:43:2b:1e:20:72:c4:16:eb:b6:45:80:90:0c:
b6:87:83:c0:b7:fe:42:5b:ac:de:e4:2a:a2:3b:f1:
6d:9b:0e:31:74:52:77:80:b1:79:94:a1:c9:51:bb:
55:68:3e:93:00:bb:c9:0c:bc:6f:9c:b4:81:03:d0:
ea:b0:76:48:19:99:ee:86:ab:aa:b0:d4:8a:6e:d4:
c8:d6:a9:d9:9d:51:e1:a0:57:78:e8:fe:61:59:b6:
96:f9:10:a8:95:54:51:59:2d:85:fb:69:46:cc:1f:
92:64:a0:89:e6:55:1c:2e:7f:17:6a:c7:e2:ec:12:
cd:46:35:ce:02:42:a9:f4:7d:5f:dd:ef:58:6e:fa:
c8:a0:19:71:27:07:db:05:5e:dc:10:bc:f4:97:ef:
3c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:67:1F:F5:82:06:29:97:3A:12:93:AA:6A:26:48:0E:60:E1:3F:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8754caa5-a5d2-3434-bef5-1d99fb4fce7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.44.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:90:14:1b:2d:95:63:59:bc:d5:0e:a5:92:85:af:d5:0a:f9:
a0:27:d1:b4:1d:3e:10:ac:06:38:3d:73:4c:bf:1e:4e:7d:37:
cf:3e:66:45:28:82:32:7d:ee:a5:a8:33:ec:95:fb:72:a8:93:
82:fc:8b:dd:ef:49:55:44:f9:3c:71:c8:be:5f:45:13:cf:a7:
95:71:56:40:46:00:2f:a0:b9:1c:99:31:28:49:41:10:e3:ea:
ed:e8:3c:56:3e:eb:2f:c8:6a:3d:6e:f6:65:26:e3:f4:a7:19:
f6:6f:52:3b:e1:24:48:fb:b7:94:da:cf:32:a8:eb:a3:31:f2:
08:32:85:2c:f9:bb:a3:5a:9c:c6:d0:d1:e4:32:ff:51:22:5b:
92:92:1c:88:08:4f:92:d1:57:45:64:b0:51:e0:19:b5:db:df:
e6:9f:ac:56:25:20:40:42:c2:b6:22:af:1a:9e:9a:72:7d:a3:
1f:90:40:74:46:14:48:75:df:99:53:77:37:be:d8:11:70:17:
ee:eb:bc:de:88:15:49:93:fa:06:41:a3:ed:c7:cd:71:ac:a4:
79:33:49:a3:fa:8a:d7:ca:b8:e8:b9:b9:dd:ae:6e:b4:6a:8b:
22:d9:5a:bc:bb:cd:d6:f3:ae:de:d5:99:d0:3c:df:1a:3b:87:
52:a9:d8:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhc0DnkJ8ini59eTyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIyOTAyMDAzOVoXDTI1MDMyOTAxMDAzOVowLzEtMCsGA1UEAxMk
OTQxYWE4ODgtMjkxMC00NDFjLTlhYTctYzk0Y2ZjNjM2Y2M1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJPJIC2NqucnIwiQDcBczVWrZxulq0dKO4Qn
fXxKFpdJiOF0GZS9qPUhyhTenZJxGLxBubHNLfURd8h09G+Yq9uAHiOXTI8DBC6L
6C2XytNvxix66BoPr7qPCODXrKFpGNuLQh0TzxofYUMrHiByxBbrtkWAkAy2h4PA
t/5CW6ze5CqiO/Ftmw4xdFJ3gLF5lKHJUbtVaD6TALvJDLxvnLSBA9DqsHZIGZnu
hquqsNSKbtTI1qnZnVHhoFd46P5hWbaW+RColVRRWS2F+2lGzB+SZKCJ5lUcLn8X
asfi7BLNRjXOAkKp9H1f3e9YbvrIoBlxJwfbBV7cELz0l+88nQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGpnH/WCBimXOhKTqmomSA5g4T9pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODc1NGNhYTUtYTVkMi0z
NDM0LWJlZjUtMWQ5OWZiNGZjZTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFyzwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGiQFBstlWNZvNUOpZKFr9UK+aAn0bQdPhCsBjg9c0y/Hk59N88+ZkUo
gjJ97qWoM+yV+3Kok4L8i93vSVVE+TxxyL5fRRPPp5VxVkBGAC+guRyZMShJQRDj
6u3oPFY+6y/Iaj1u9mUm4/SnGfZvUjvhJEj7t5TazzKo66Mx8ggyhSz5u6NanMbQ
0eQy/1EiW5KSHIgIT5LRV0VksFHgGbXb3+afrFYlIEBCwrYirxqemnJ9ox+QQHRG
FEh135lTdze+2BFwF+7rvN6IFUmT+gZBo+3HzXGspHkzSaP6itfKuOi5ud2ubrRq
iyLZWry7zdbzrt7VmdA83xo7h1Kp2DA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:37:13 2025 by rpki-client