Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94e2a028-632a-3273-9867-915d42097f64.roa
File: 94e2a028-632a-3273-9867-915d42097f64.roa (raw, json)
Hash identifier: hrn8znFLa8lJBM/pUbQsZGBWy8L7YX1/T0voInJpQIM=
Subject key identifier: 46:79:79:C4:40:CA:0F:0E:5A:05:21:E2:1E:E0:89:B9:93:9C:F5:6B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A209EAB48F9DF8C13721CC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94e2a028-632a-3273-9867-915d42097f64.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.40.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:9e:ab:48:f9:df:8c:13:72:1c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=ba150324-1f8a-4ddc-9c0e-38d53f21a443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:eb:25:c0:fa:3f:ef:65:e4:29:57:a7:2a:94:
42:ed:cf:fd:50:56:6f:7c:c0:4f:47:96:1d:5d:05:
32:f3:f0:e9:16:78:11:36:fe:c4:3e:92:02:d0:40:
79:f3:19:f4:12:19:57:3d:4f:2b:bf:a0:3a:78:1e:
89:ab:ee:85:46:f3:18:d4:fa:d8:48:4b:83:db:4d:
4d:68:96:a1:74:ff:3e:ce:8b:46:16:fc:00:23:1c:
2c:6b:3f:ec:53:43:70:b1:97:4b:87:92:84:43:cb:
b8:c3:2b:24:5f:ba:82:86:b2:13:51:e6:9a:34:4f:
53:1e:5f:d3:38:53:e1:1d:be:c5:da:2e:e1:46:45:
14:2f:35:da:86:b6:37:1d:49:b2:60:05:8d:91:0a:
d6:3a:59:47:49:29:69:a8:d8:8c:62:a4:d8:95:37:
d8:59:37:76:51:47:e1:d3:d6:bf:22:95:2d:2d:d2:
c3:54:27:b2:3b:23:6a:3d:64:ca:45:ad:e1:9a:a4:
1c:52:d2:67:83:43:f9:ba:f9:dd:b3:9a:4d:79:94:
af:42:22:14:6c:23:0f:e0:f4:14:14:7c:ec:10:37:
fd:85:af:25:57:20:2d:07:3b:30:15:67:32:26:71:
6a:63:02:bb:08:e4:bc:07:f3:5b:cc:96:3d:a2:b5:
de:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:79:79:C4:40:CA:0F:0E:5A:05:21:E2:1E:E0:89:B9:93:9C:F5:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94e2a028-632a-3273-9867-915d42097f64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.40.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:da:9e:b2:db:01:7c:35:e7:ad:51:cc:33:9a:c5:85:99:0f:
47:e6:46:5c:eb:94:f0:0e:6b:ae:8a:53:7b:ac:13:4c:a5:16:
5c:d8:51:05:2a:81:06:28:85:17:9e:e8:07:53:5a:a3:6b:a1:
58:83:20:68:e5:0b:15:0e:55:44:0d:70:c6:76:39:d4:11:f3:
c0:df:b8:81:22:19:7a:93:67:11:fc:7f:36:c3:59:45:e7:a0:
e8:b2:3c:2b:d8:52:c1:78:67:77:d5:b0:47:0e:54:a7:38:04:
2c:8a:bc:19:a5:2e:cf:bb:2e:0a:f8:b0:b8:db:39:d3:c0:3f:
51:d0:61:b2:8f:00:63:80:e8:0f:24:21:7e:5c:df:4f:9a:69:
70:70:d4:a1:8d:e5:b6:9a:09:8d:85:ea:10:06:91:96:ae:10:
49:db:0b:0f:87:82:2d:3d:ed:3c:cb:67:c1:2f:46:02:07:df:
86:2d:b7:f8:93:c2:a4:57:ef:a8:a3:61:c4:5d:97:e3:ee:0f:
82:f2:82:b9:2b:94:03:6b:93:02:52:48:2e:50:21:e1:4f:91:
54:71:2d:c8:e6:b6:b4:78:10:fa:a5:a7:22:e6:0e:79:84:51:
3a:67:54:75:e2:99:cb:29:2f:58:64:8c:05:fc:62:6a:a7:4d:
ea:4a:82:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6IJ6rSPnfjBNyHMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk
YmExNTAzMjQtMWY4YS00ZGRjLTljMGUtMzhkNTNmMjFhNDQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+slwPo/72XkKVenKpRC7c/9UFZvfMBPR5Yd
XQUy8/DpFngRNv7EPpIC0EB58xn0EhlXPU8rv6A6eB6Jq+6FRvMY1PrYSEuD201N
aJahdP8+zotGFvwAIxwsaz/sU0NwsZdLh5KEQ8u4wyskX7qChrITUeaaNE9THl/T
OFPhHb7F2i7hRkUULzXahrY3HUmyYAWNkQrWOllHSSlpqNiMYqTYlTfYWTd2UUfh
09a/IpUtLdLDVCeyOyNqPWTKRa3hmqQcUtJng0P5uvnds5pNeZSvQiIUbCMP4PQU
FHzsEDf9ha8lVyAtBzswFWcyJnFqYwK7COS8B/NbzJY9orXekwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEZ5ecRAyg8OWgUh4h7gibmTnPVrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTRlMmEwMjgtNjMyYS0z
MjczLTk4NjctOTE1ZDQyMDk3ZjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyjwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGzanrLbAXw1561RzDOaxYWZD0fmRlzrlPAOa66KU3usE0ylFlzYUQUq
gQYohRee6AdTWqNroViDIGjlCxUOVUQNcMZ2OdQR88DfuIEiGXqTZxH8fzbDWUXn
oOiyPCvYUsF4Z3fVsEcOVKc4BCyKvBmlLs+7Lgr4sLjbOdPAP1HQYbKPAGOA6A8k
IX5c30+aaXBw1KGN5baaCY2F6hAGkZauEEnbCw+Hgi097TzLZ8EvRgIH34Ytt/iT
wqRX76ijYcRdl+PuD4LygrkrlANrkwJSSC5QIeFPkVRxLcjmtrR4EPqlpyLmDnmE
UTpnVHXimcspL1hkjAX8YmqnTepKgmo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:46:32 2025 by rpki-client