Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0c66cba-a1fa-3feb-9bae-1c6a0d737b2f.roa
File: b0c66cba-a1fa-3feb-9bae-1c6a0d737b2f.roa (raw, json)
Hash identifier: HFxIhV1ynivAqC09IW1QYbeZLg/RaLlMUJBc/BwEfxk=
Subject key identifier: A9:AC:F9:10:29:DB:6D:60:AE:DE:03:72:C9:20:9E:B9:1D:2D:C3:A4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847F584DECF3A5BA5E17EBDE580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0c66cba-a1fa-3feb-9bae-1c6a0d737b2f.roa
Signing time: Fri 22 Nov 2024 02:00:40 +0000
ROA not before: Fri 22 Nov 2024 02:00:40 +0000
ROA not after: Thu 20 Feb 2025 02:00:40 +0000
asID: 20940
IP address blocks: 23.222.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f5:84:de:cf:3a:5b:a5:e1:7e:bd:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 22 02:00:40 2024 GMT
Not After : Feb 20 02:00:40 2025 GMT
Subject: CN=155b8c63-bdbd-475d-997e-858edb7989eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e9:5f:ab:2c:e3:da:8a:45:23:85:67:19:6d:
07:b9:cb:19:2c:b9:c5:be:0c:c5:05:87:a9:2c:a9:
8a:67:a5:59:cc:9a:f7:46:ec:c5:f4:b8:65:25:df:
f0:e0:85:00:8b:bb:63:ff:e0:31:6e:a9:98:1b:c1:
39:75:35:a5:8c:4e:f1:03:d5:c2:4d:86:a9:ad:87:
d9:a0:3a:9d:27:eb:61:a4:0f:69:97:8a:0b:b9:11:
c0:44:4f:25:69:0c:31:b5:22:55:f3:40:df:f5:2d:
25:8b:81:72:b8:de:5d:55:82:51:94:31:5b:04:f0:
29:89:6f:5f:cb:2c:6f:d3:d7:9c:d1:c7:63:1e:5a:
24:5e:66:7f:93:17:28:d2:13:b6:8a:80:e0:6c:4e:
4c:82:66:5c:84:be:30:e4:b0:f3:58:01:3c:af:70:
d4:60:09:b2:2a:d1:35:9b:a0:c1:5a:e4:19:1d:19:
be:22:80:7c:f5:18:74:dc:6a:cf:34:60:57:c3:ca:
b7:cb:97:b6:2b:af:03:87:a6:45:38:23:8e:40:04:
f1:9f:22:b6:27:1e:5b:5a:18:fa:09:32:a9:09:b1:
e0:c4:35:2f:9e:ad:b6:96:94:8b:4f:6e:59:27:c6:
c4:ca:e3:74:ea:12:8a:6c:74:8b:a3:10:7d:32:bb:
24:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AC:F9:10:29:DB:6D:60:AE:DE:03:72:C9:20:9E:B9:1D:2D:C3:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0c66cba-a1fa-3feb-9bae-1c6a0d737b2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.222.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:28:d0:3f:a8:33:db:49:eb:86:85:d5:75:40:6e:f1:dd:81:
de:39:c3:c6:22:e0:49:f6:c3:1b:29:44:9e:ae:be:6b:18:5c:
d0:0c:50:a3:ac:48:0c:c7:88:a2:a9:03:07:34:fe:22:1c:2f:
c3:25:cb:25:a2:9c:8c:6b:06:a9:3f:7b:fd:d8:6c:14:8f:63:
f3:38:42:b8:36:16:6c:5d:6d:79:e0:c7:30:82:85:da:f4:29:
c6:f3:22:8b:a7:76:95:90:6d:30:64:27:ea:8a:50:c9:32:05:
cd:de:f1:12:01:9f:0d:6d:7b:dd:e6:f2:1e:d5:e0:9a:bd:83:
4a:62:8b:33:08:32:96:c5:2b:85:4c:40:5a:01:34:ee:12:79:
da:b7:38:26:d3:10:7a:b1:37:7c:3b:af:90:7f:45:76:2c:87:
ea:b4:c9:d3:c4:f0:f4:38:71:41:ef:5f:ac:fd:bf:bd:1c:d3:
21:0b:ec:83:70:f1:65:69:5e:47:29:90:af:a4:b5:78:9c:39:
0a:a7:45:66:ae:f5:26:c8:ae:a8:4b:2e:ed:46:5e:6b:4d:fb:
be:20:a0:b1:bd:f3:11:c1:aa:1c:00:f2:45:41:94:05:1d:af:
a3:3f:48:a4:4a:cf:aa:59:03:2f:18:c4:ee:21:25:64:7d:3c:
f1:33:cb:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf1hN7POlul4X695YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTEyMjAyMDA0MFoXDTI1MDIyMDAyMDA0MFowLzEtMCsGA1UEAxMk
MTU1YjhjNjMtYmRiZC00NzVkLTk5N2UtODU4ZWRiNzk4OWViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqelfqyzj2opFI4VnGW0HucsZLLnFvgzFBYep
LKmKZ6VZzJr3RuzF9LhlJd/w4IUAi7tj/+AxbqmYG8E5dTWljE7xA9XCTYaprYfZ
oDqdJ+thpA9pl4oLuRHARE8laQwxtSJV80Df9S0li4FyuN5dVYJRlDFbBPApiW9f
yyxv09ec0cdjHlokXmZ/kxco0hO2ioDgbE5MgmZchL4w5LDzWAE8r3DUYAmyKtE1
m6DBWuQZHRm+IoB89Rh03GrPNGBXw8q3y5e2K68Dh6ZFOCOOQATxnyK2Jx5bWhj6
CTKpCbHgxDUvnq22lpSLT25ZJ8bEyuN06hKKbHSLoxB9MrsksQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKms+RAp221grt4DcskgnrkdLcOkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjBjNjZjYmEtYTFmYS0z
ZmViLTliYWUtMWM2YTBkNzM3YjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF94DMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADUo0D+oM9tJ64aF1XVAbvHdgd45w8Yi4En2wxspRJ6uvmsYXNAMUKOs
SAzHiKKpAwc0/iIcL8MlyyWinIxrBqk/e/3YbBSPY/M4Qrg2FmxdbXngxzCChdr0
KcbzIoundpWQbTBkJ+qKUMkyBc3e8RIBnw1te93m8h7V4Jq9g0piizMIMpbFK4VM
QFoBNO4Sedq3OCbTEHqxN3w7r5B/RXYsh+q0ydPE8PQ4cUHvX6z9v70c0yEL7INw
8WVpXkcpkK+ktXicOQqnRWau9SbIrqhLLu1GXmtN+74goLG98xHBqhwA8kVBlAUd
r6M/SKRKz6pZAy8YxO4hJWR9PPEzyx4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:57:42 2025 by rpki-client