Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9d647b7-eff1-363b-8359-c1450f30a04b.roa
File: c9d647b7-eff1-363b-8359-c1450f30a04b.roa (raw, json)
Hash identifier: 9T8XXbHzGG1tidRsf6iYZWn7IP8r5sspL4gM9s5kcOY=
Subject key identifier: 70:DE:BB:8F:0B:46:44:C4:B7:F2:E2:38:49:1B:52:2F:A7:C1:3E:D5
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A20975E2623085690160D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9d647b7-eff1-363b-8359-c1450f30a04b.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.36.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:97:5e:26:23:08:56:90:16:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=732aa98b-cffd-4da3-82e0-bcbefe733eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:63:aa:4d:dc:c3:7d:30:d5:34:bc:5b:9a:76:
1d:2c:5b:83:dc:a2:7e:ba:b8:67:ae:f1:76:81:8c:
ed:42:45:3e:39:ce:9b:b6:19:18:94:ad:c4:d9:7b:
e1:3f:00:c7:58:82:7d:0b:48:3c:00:d1:16:9e:ea:
f7:7c:00:67:40:80:f4:5a:1f:12:37:d2:1e:44:11:
47:ab:2d:a5:c9:b3:8e:46:b5:5a:79:8d:ce:c4:51:
fb:49:1b:13:7d:65:89:39:05:1a:41:c5:4f:ae:c0:
d7:2b:8e:7a:31:20:dc:8c:e9:a5:2d:21:46:6b:0b:
52:9b:d5:28:f7:b3:16:35:47:cf:98:35:fe:25:b6:
5b:9c:03:64:00:16:22:56:26:96:98:ac:b1:40:67:
66:6f:6d:57:fa:d7:b4:52:f7:ea:60:8a:0f:e3:07:
fd:dd:f3:24:6c:da:47:da:a8:83:1f:ef:b1:15:02:
84:6c:bc:cb:cb:67:d4:37:fc:ed:e1:ab:0d:1a:5b:
fe:32:1d:79:a2:a2:95:c6:49:d1:06:33:42:0b:9c:
cb:97:ad:54:06:ae:3e:14:5b:80:13:fa:70:d2:ba:
f5:7e:1c:d4:9b:a4:c5:db:6d:6b:c0:41:06:0d:49:
81:ce:74:ee:6c:6f:85:4f:52:ca:63:10:16:e0:8d:
49:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DE:BB:8F:0B:46:44:C4:B7:F2:E2:38:49:1B:52:2F:A7:C1:3E:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9d647b7-eff1-363b-8359-c1450f30a04b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.36.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:d8:c8:32:33:8a:3b:57:be:e0:e5:24:7a:5e:a3:6b:fa:5c:
84:76:4d:10:71:ff:e3:e1:1e:52:1f:fd:3f:3a:b1:86:80:6a:
f3:ab:45:fd:b3:ca:d6:3b:06:f1:6b:b5:f9:a3:7c:c6:0d:c7:
f6:65:ff:74:7f:a1:1c:db:95:e3:0e:6b:ba:2a:d8:f9:12:5f:
82:a2:b7:47:f6:3b:11:cb:6b:b6:d4:0f:f0:5b:97:17:db:43:
dc:74:09:bc:bb:82:73:33:2c:c5:dc:18:4f:98:05:0f:eb:51:
f2:63:3a:90:a7:f5:12:7a:bb:d5:b7:9e:49:78:bc:b8:e1:0b:
e9:4e:6f:cb:80:17:51:f9:7d:21:77:e6:c1:19:18:3c:39:50:
89:19:94:73:47:71:b2:13:a6:ca:e4:c6:e0:7b:80:2a:e8:66:
06:3b:68:57:e0:82:23:3e:28:62:06:13:39:43:b9:ae:33:64:
ba:54:cd:9d:7c:9b:7e:01:2a:fd:b3:3d:59:05:0f:ec:2b:1d:
9d:08:d5:28:cb:d3:e6:30:45:7b:cf:fe:cd:01:ff:da:ed:91:
54:7a:73:37:ca:c5:4a:72:a0:e2:eb:91:c8:8c:f1:16:1e:5c:
a6:8d:eb:cf:0e:8a:af:eb:d8:3b:0f:88:7b:2e:95:1c:10:1b:
0d:2f:ea:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6IJdeJiMIVpAWDYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk
NzMyYWE5OGItY2ZmZC00ZGEzLTgyZTAtYmNiZWZlNzMzZWViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGOqTdzDfTDVNLxbmnYdLFuD3KJ+urhnrvF2
gYztQkU+Oc6bthkYlK3E2XvhPwDHWIJ9C0g8ANEWnur3fABnQID0Wh8SN9IeRBFH
qy2lybOORrVaeY3OxFH7SRsTfWWJOQUaQcVPrsDXK456MSDcjOmlLSFGawtSm9Uo
97MWNUfPmDX+JbZbnANkABYiViaWmKyxQGdmb21X+te0UvfqYIoP4wf93fMkbNpH
2qiDH++xFQKEbLzLy2fUN/zt4asNGlv+Mh15oqKVxknRBjNCC5zLl61UBq4+FFuA
E/pw0rr1fhzUm6TF221rwEEGDUmBznTubG+FT1LKYxAW4I1JHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHDeu48LRkTEt/LiOEkbUi+nwT7VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzlkNjQ3YjctZWZmMS0z
NjNiLTgzNTktYzE0NTBmMzBhMDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFyQYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFPYyDIzijtXvuDlJHpeo2v6XIR2TRBx/+PhHlIf/T86sYaAavOrRf2z
ytY7BvFrtfmjfMYNx/Zl/3R/oRzbleMOa7oq2PkSX4Kit0f2OxHLa7bUD/Bblxfb
Q9x0Cby7gnMzLMXcGE+YBQ/rUfJjOpCn9RJ6u9W3nkl4vLjhC+lOb8uAF1H5fSF3
5sEZGDw5UIkZlHNHcbITpsrkxuB7gCroZgY7aFfggiM+KGIGEzlDua4zZLpUzZ18
m34BKv2zPVkFD+wrHZ0I1SjL0+YwRXvP/s0B/9rtkVR6czfKxUpyoOLrkciM8RYe
XKaN688Oiq/r2DsPiHsulRwQGw0v6r4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:02:23 2025 by rpki-client