Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a188f693-7c84-3ff2-84e8-6ac12e9ab6d1.roa
File: a188f693-7c84-3ff2-84e8-6ac12e9ab6d1.roa (raw, json)
Hash identifier: Q40RrmhVOc5jqKmNzZOJ1RcRk1XhAVkl6NiiM2YyiCU=
Subject key identifier: 0D:EA:76:C6:76:6D:5E:CC:30:3A:BE:82:33:7D:3F:3A:D7:84:4C:44
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858486EF5CE0264631F3E12B8D920
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a188f693-7c84-3ff2-84e8-6ac12e9ab6d1.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.35.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:ce:02:64:63:1f:3e:12:b8:d9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=c1d05d4a-a528-491c-ad73-b4b323193e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6e:33:6c:5a:fd:37:b3:6f:2a:fe:c8:a7:96:
b2:9b:4d:bd:26:39:36:a5:ad:1d:02:6b:93:51:4f:
49:37:32:76:84:9c:61:47:05:b1:a5:7b:12:5f:7e:
73:6b:ba:4f:c5:2c:6a:8e:1e:aa:02:40:86:22:02:
3b:a8:7b:da:8f:48:76:28:56:ca:0e:96:e8:24:44:
da:64:9c:6d:fd:49:ad:d8:f3:b0:f9:02:ed:06:44:
68:49:f2:46:59:7e:d5:98:64:ee:64:2c:75:82:f3:
50:76:b8:a3:e4:4f:a9:bd:ad:5a:a6:c6:3f:a8:96:
b6:e9:da:02:6c:dd:ff:51:57:08:02:d2:99:43:17:
87:5c:92:ed:d7:a0:97:70:08:86:21:ba:c5:97:5a:
14:41:0f:39:e3:1c:be:ae:22:0f:06:5e:1d:48:dc:
55:24:df:1e:88:ac:b3:21:dd:f0:d2:28:96:ff:73:
cd:6f:ad:91:8b:39:ff:ce:15:84:e2:76:d1:f3:a9:
09:5e:a4:cc:22:e9:bf:c8:ec:83:f8:39:6b:7f:a9:
5d:ad:69:fa:7b:45:49:e5:4b:14:41:30:a2:95:cb:
c7:47:ca:d6:88:9d:bc:84:23:9f:14:ef:91:7f:05:
27:13:4c:06:fd:02:fd:af:f1:28:b7:43:53:f8:f8:
50:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EA:76:C6:76:6D:5E:CC:30:3A:BE:82:33:7D:3F:3A:D7:84:4C:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a188f693-7c84-3ff2-84e8-6ac12e9ab6d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.35.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:dd:19:47:d5:03:05:24:e0:8b:7a:af:d1:ea:17:bc:02:02:
18:14:55:5a:1a:75:62:2b:25:af:7a:ee:67:d5:30:e1:44:c0:
fc:f4:9f:f7:71:77:aa:37:20:30:cb:24:c0:d1:c7:5c:14:ae:
d4:88:fc:4c:a0:6d:be:0d:86:f0:89:64:d8:0b:01:9e:a1:ea:
62:29:b6:e5:ae:47:6c:7b:98:5f:aa:4d:37:90:a9:00:b4:42:
30:6b:80:14:a5:5d:3e:19:80:29:9c:14:b3:bf:ea:9f:0a:ba:
6f:0c:5d:1e:6f:07:17:f6:b2:77:35:86:98:65:67:98:43:24:
58:5e:4a:da:08:bd:a1:5c:f9:c7:4d:4b:b1:f6:36:03:17:0e:
02:33:a5:11:78:c9:c6:56:19:81:bf:fe:db:40:33:e7:6f:6f:
14:99:f3:e7:87:41:a9:be:59:40:c9:36:13:76:2a:54:63:45:
7c:a1:13:b0:e2:69:6f:95:6a:bc:49:4a:c9:13:df:55:47:72:
61:31:07:27:fa:38:5c:95:f2:99:e6:be:a1:e1:1c:4b:a3:b3:
57:92:b5:29:f0:79:c3:a0:b3:bf:d0:24:5f:aa:21:cf:c0:a8:
cb:dd:e4:43:63:0a:27:72:46:43:e0:44:c2:65:7d:fe:60:42:
9f:87:5b:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhu9c4CZGMfPhK42SAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEwNDE0MDA1MVoXDTI1MDQwNDEzMDA1MVowLzEtMCsGA1UEAxMk
YzFkMDVkNGEtYTUyOC00OTFjLWFkNzMtYjRiMzIzMTkzZThjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk24zbFr9N7NvKv7Ip5aym029Jjk2pa0dAmuT
UU9JNzJ2hJxhRwWxpXsSX35za7pPxSxqjh6qAkCGIgI7qHvaj0h2KFbKDpboJETa
ZJxt/Umt2POw+QLtBkRoSfJGWX7VmGTuZCx1gvNQdrij5E+pva1apsY/qJa26doC
bN3/UVcIAtKZQxeHXJLt16CXcAiGIbrFl1oUQQ854xy+riIPBl4dSNxVJN8eiKyz
Id3w0iiW/3PNb62Rizn/zhWE4nbR86kJXqTMIum/yOyD+Dlrf6ldrWn6e0VJ5UsU
QTCilcvHR8rWiJ28hCOfFO+RfwUnE0wG/QL9r/Eot0NT+PhQIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA3qdsZ2bV7MMDq+gjN9PzrXhExEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTE4OGY2OTMtN2M4NC0z
ZmYyLTg0ZTgtNmFjMTJlOWFiNmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyPcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADzdGUfVAwUk4It6r9HqF7wCAhgUVVoadWIrJa967mfVMOFEwPz0n/dx
d6o3IDDLJMDRx1wUrtSI/Eygbb4NhvCJZNgLAZ6h6mIptuWuR2x7mF+qTTeQqQC0
QjBrgBSlXT4ZgCmcFLO/6p8Kum8MXR5vBxf2snc1hphlZ5hDJFheStoIvaFc+cdN
S7H2NgMXDgIzpRF4ycZWGYG//ttAM+dvbxSZ8+eHQam+WUDJNhN2KlRjRXyhE7Di
aW+VarxJSskT31VHcmExByf6OFyV8pnmvqHhHEujs1eStSnwecOgs7/QJF+qIc/A
qMvd5ENjCidyRkPgRMJlff5gQp+HW4k=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:31 2025 by rpki-client