Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b401aaa6-03f4-3f49-94b3-9146be6c1b39.roa
File: b401aaa6-03f4-3f49-94b3-9146be6c1b39.roa (raw, json)
Hash identifier: ot4oAhQgQA/lvSpK7lUxhMO/SFT9QWCGvfR7ClaInxQ=
Subject key identifier: 8E:E4:6A:1A:C7:FB:3A:4E:BC:31:60:16:64:54:CC:32:C8:AA:CA:20
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487FB5E9F3358486E9FC4A8F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b401aaa6-03f4-3f49-94b3-9146be6c1b39.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.47.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:e9:f3:35:84:86:e9:fc:4a:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=a6c59f29-7f32-468d-a648-1c0d32b2fc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0d:70:34:37:2d:46:03:68:a1:99:82:b6:ea:
20:b8:ea:8f:63:0c:c7:5a:cf:1e:6a:be:2f:df:74:
2c:64:85:08:67:1b:bc:a7:9d:67:84:67:cc:21:40:
49:58:bb:9e:93:5b:7e:21:ab:20:2c:b6:79:f9:4e:
54:1c:fc:7f:a6:a8:92:ff:53:42:dd:3b:71:19:71:
44:83:37:e4:63:0c:4b:a7:00:ed:f2:ab:26:d4:58:
7f:2d:1b:31:46:10:a6:37:04:de:0a:96:c1:61:28:
e4:6d:b2:5d:e7:5c:f0:01:b6:68:54:6a:a8:aa:97:
a0:a0:0d:e8:41:1e:45:e8:5d:e5:cd:fa:6a:28:ec:
ea:40:84:f5:c9:42:80:06:a4:7b:2e:66:dd:1e:94:
87:ba:e4:00:8f:a8:47:4b:41:32:c1:ce:4a:aa:86:
c9:d6:70:83:8f:03:c8:d2:a6:6d:6a:eb:c3:f1:a2:
4a:06:89:5b:b3:0d:b9:44:d8:9b:fe:2b:a2:00:9c:
4b:aa:a1:d6:83:1f:90:16:de:33:06:41:a8:1a:0f:
01:9c:92:bc:9d:c1:31:3d:28:6e:a1:74:de:17:65:
e0:27:be:61:54:9c:f7:5c:b5:a5:06:e9:5b:fa:e5:
86:9a:4f:ab:6f:aa:ed:fd:91:3e:e1:3e:88:6f:be:
9c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E4:6A:1A:C7:FB:3A:4E:BC:31:60:16:64:54:CC:32:C8:AA:CA:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b401aaa6-03f4-3f49-94b3-9146be6c1b39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.47.219.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:1d:63:99:29:85:23:6e:3f:78:7b:4b:2c:32:c2:b2:b2:3e:
69:5d:55:26:11:a6:f8:69:27:44:a8:3e:80:5c:e2:ab:96:a3:
f0:81:37:b1:ab:31:83:d6:08:7d:41:7a:7f:69:82:3f:a2:c4:
39:82:33:1a:34:17:38:c7:eb:13:d1:9b:7c:bd:6d:e0:46:79:
91:d0:2b:93:1e:61:fe:dc:cd:c3:63:b5:79:8f:25:f9:92:9f:
0f:c1:a7:31:93:84:2f:73:6c:20:38:0f:bd:cc:23:0f:6f:ac:
b7:ff:0e:42:e6:65:a6:05:11:5a:34:55:ae:87:17:97:ab:cf:
61:50:bc:70:8d:e3:ae:c8:f4:44:0f:ae:d8:4c:9c:e7:71:1a:
b7:a0:53:6c:ad:84:d1:9e:91:1f:8f:51:53:aa:32:4c:1e:f8:
9f:c7:c0:ca:7c:f6:0b:5e:ae:b8:7f:25:15:6b:94:99:c0:8b:
7a:bc:e2:ee:87:27:b7:e0:63:45:81:e8:eb:ff:3b:9b:27:7d:
2f:9b:4e:16:d5:0b:36:ba:7e:1a:a3:8f:60:2b:ba:85:d3:2a:
8b:5c:28:08:45:20:7b:ef:37:b3:b2:0e:17:89:61:6e:28:5a:
76:78:73:3b:83:f1:5d:14:ac:e7:57:13:8d:98:e7:ee:78:2e:
71:41:7a:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh/tenzNYSG6fxKjwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDExMDE0MDA1MVoXDTI1MDQxMDEzMDA1MVowLzEtMCsGA1UEAxMk
YTZjNTlmMjktN2YzMi00NjhkLWE2NDgtMWMwZDMyYjJmYzBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhg1wNDctRgNooZmCtuoguOqPYwzHWs8ear4v
33QsZIUIZxu8p51nhGfMIUBJWLuek1t+IasgLLZ5+U5UHPx/pqiS/1NC3TtxGXFE
gzfkYwxLpwDt8qsm1Fh/LRsxRhCmNwTeCpbBYSjkbbJd51zwAbZoVGqoqpegoA3o
QR5F6F3lzfpqKOzqQIT1yUKABqR7LmbdHpSHuuQAj6hHS0Eywc5KqobJ1nCDjwPI
0qZtauvD8aJKBolbsw25RNib/iuiAJxLqqHWgx+QFt4zBkGoGg8BnJK8ncExPShu
oXTeF2XgJ75hVJz3XLWlBulb+uWGmk+rb6rt/ZE+4T6Ib76cXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI7kahrH+zpOvDFgFmRUzDLIqsogMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjQwMWFhYTYtMDNmNC0z
ZjQ5LTk0YjMtOTE0NmJlNmMxYjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy/bMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADQdY5kphSNuP3h7SywywrKyPmldVSYRpvhpJ0SoPoBc4quWo/CBN7Gr
MYPWCH1Ben9pgj+ixDmCMxo0FzjH6xPRm3y9beBGeZHQK5MeYf7czcNjtXmPJfmS
nw/BpzGThC9zbCA4D73MIw9vrLf/DkLmZaYFEVo0Va6HF5erz2FQvHCN467I9EQP
rthMnOdxGregU2ythNGekR+PUVOqMkwe+J/HwMp89gterrh/JRVrlJnAi3q84u6H
J7fgY0WB6Ov/O5snfS+bThbVCza6fhqjj2AruoXTKotcKAhFIHvvN7OyDheJYW4o
WnZ4czuD8V0UrOdXE42Y5+54LnFBevk=
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:55:00 2025 by rpki-client