Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc81e598-a2b7-3cf3-b4e4-eb70a0d8be74.roa
File: bc81e598-a2b7-3cf3-b4e4-eb70a0d8be74.roa (raw, json)
Hash identifier: HkglxB+0rc2v0YToGiCKssl6hozIxg8OLi6M9nyKJb0=
Subject key identifier: EE:4E:DB:B0:8A:D4:F7:A7:EE:0C:F9:35:C5:44:6F:27:97:9B:0F:AC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848222FD74F42952A44B515F580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc81e598-a2b7-3cf3-b4e4-eb70a0d8be74.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 35994
IP address blocks: 23.32.18.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:d7:4f:42:95:2a:44:b5:15:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=328fd5a9-3b15-40ae-a458-ac169360d124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fd:dc:cf:db:ac:9a:3c:89:7d:18:a6:cf:25:
da:78:a4:9f:ab:4e:5c:55:28:41:c5:3e:ce:1f:24:
a1:3d:f5:35:fc:a5:91:35:2d:16:99:61:ce:79:ef:
01:85:55:f5:26:cd:97:71:46:74:50:ee:e3:e1:bb:
77:f1:a0:76:4d:38:b6:d2:af:7f:85:de:79:6a:ca:
c2:b0:90:3b:73:b3:f6:5f:cd:b6:7f:ae:ac:bc:c5:
d2:91:93:19:b6:45:2a:e9:b3:05:d0:a4:d9:77:ec:
f8:1b:ca:64:76:34:97:c4:3d:f1:2a:ed:bb:53:ab:
ba:25:d1:77:5e:05:6b:af:9c:fb:38:16:29:3c:e3:
cb:d5:56:c5:00:ed:f8:44:d4:8a:fb:f7:49:78:bb:
c4:11:4e:ac:d6:be:11:b1:1e:41:cd:59:35:ab:52:
18:43:b0:40:34:ba:09:51:81:e7:09:79:3c:5b:1f:
d1:78:96:22:e0:b6:65:69:0b:b2:4d:c0:c8:50:d7:
5b:cb:74:e5:e5:0f:bc:48:ba:2a:37:3a:71:ea:9f:
62:9a:87:d9:8d:f4:d5:82:38:e5:fe:90:83:6a:ca:
15:b8:79:4f:f0:7c:cc:0c:53:31:12:46:d2:ab:ba:
de:09:9e:6b:29:f2:f5:6a:ef:9a:28:93:d6:00:d8:
86:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4E:DB:B0:8A:D4:F7:A7:EE:0C:F9:35:C5:44:6F:27:97:9B:0F:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc81e598-a2b7-3cf3-b4e4-eb70a0d8be74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.32.18.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:84:d1:90:6b:93:db:7d:25:49:12:d7:45:12:ce:44:05:f4:
5e:19:b3:f5:bd:43:c3:6f:cc:35:10:2e:a8:ab:dd:77:70:ff:
47:59:86:89:de:cf:74:ba:f5:4e:42:a9:08:88:2e:fc:7a:24:
de:84:22:eb:80:f0:08:9c:da:e5:a2:50:3b:d1:57:b7:46:96:
5f:10:7f:f5:2f:3d:00:3f:a9:70:b4:6f:a0:51:f4:51:fd:f5:
a8:60:68:75:c3:c4:ab:91:21:8b:3d:66:1a:5a:bd:e3:37:e9:
22:f2:9a:b0:89:8d:a8:b2:2a:6e:bd:1b:8e:cd:00:9d:a8:1b:
36:d8:70:2f:15:cd:81:4b:b7:9c:c2:9d:49:1e:7e:0d:83:9f:
f6:d0:5c:ec:5d:12:17:19:89:03:38:6e:80:dd:ed:df:13:4b:
f1:b1:b7:8c:2a:82:cb:72:15:42:55:de:a7:a1:8f:c8:c7:b0:
13:9c:77:0d:d1:1b:0e:3e:b8:97:e0:9f:40:1c:3a:92:e5:a9:
96:ff:39:31:bf:92:25:ca:e2:96:47:bd:5d:3f:f6:0c:76:57:
b6:fa:70:f1:91:0f:98:66:3f:5e:1a:4f:17:3e:f4:2d:73:d8:
8e:81:ea:28:74:e5:9c:47:56:39:92:04:1e:38:f3:ee:0f:c5:
e0:c1:8b:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgiL9dPQpUqRLUV9YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIwODAyMDAzOVoXDTI1MDMwODAyMDAzOVowLzEtMCsGA1UEAxMk
MzI4ZmQ1YTktM2IxNS00MGFlLWE0NTgtYWMxNjkzNjBkMTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/3cz9usmjyJfRimzyXaeKSfq05cVShBxT7O
HyShPfU1/KWRNS0WmWHOee8BhVX1Js2XcUZ0UO7j4bt38aB2TTi20q9/hd55asrC
sJA7c7P2X822f66svMXSkZMZtkUq6bMF0KTZd+z4G8pkdjSXxD3xKu27U6u6JdF3
XgVrr5z7OBYpPOPL1VbFAO34RNSK+/dJeLvEEU6s1r4RsR5BzVk1q1IYQ7BANLoJ
UYHnCXk8Wx/ReJYi4LZlaQuyTcDIUNdby3Tl5Q+8SLoqNzpx6p9imofZjfTVgjjl
/pCDasoVuHlP8HzMDFMxEkbSq7reCZ5rKfL1au+aKJPWANiGIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO5O27CK1Pen7gz5NcVEbyeXmw+sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmM4MWU1OTgtYTJiNy0z
Y2YzLWI0ZTQtZWI3MGEwZDhiZTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyASMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIqE0ZBrk9t9JUkS10USzkQF9F4Zs/W9Q8NvzDUQLqir3Xdw/0dZhone
z3S69U5CqQiILvx6JN6EIuuA8Aic2uWiUDvRV7dGll8Qf/UvPQA/qXC0b6BR9FH9
9ahgaHXDxKuRIYs9ZhpaveM36SLymrCJjaiyKm69G47NAJ2oGzbYcC8VzYFLt5zC
nUkefg2Dn/bQXOxdEhcZiQM4boDd7d8TS/Gxt4wqgstyFUJV3qehj8jHsBOcdw3R
Gw4+uJfgn0AcOpLlqZb/OTG/kiXK4pZHvV0/9gx2V7b6cPGRD5hmP14aTxc+9C1z
2I6B6ih05ZxHVjmSBB448+4PxeDBi2w=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:32:32 2025 by rpki-client