Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9829ac0-369e-3677-a622-3a4b19b270cc.roa
File: d9829ac0-369e-3677-a622-3a4b19b270cc.roa (raw, json)
Hash identifier: hFTQOBR/g+Vj1005zS/3hRU9iOKWxW6YfG/eTXx2fPQ=
Subject key identifier: 73:20:8D:79:52:2B:EF:1C:5D:7B:5D:B5:E9:A3:EE:44:DE:14:E7:C9
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487CEB778D8C49955EABA7D080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9829ac0-369e-3677-a622-3a4b19b270cc.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.45.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:77:8d:8c:49:95:5e:ab:a7:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=669fcb2f-c0b0-470d-95f6-12bd4a7452e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c5:f8:de:0e:de:0d:d0:f2:e1:07:7d:57:0d:
2c:16:c3:b7:d3:24:70:00:eb:7d:0d:f6:73:d0:5c:
20:1f:63:73:55:7f:a8:b5:c7:dd:fe:23:71:b4:08:
e6:69:e6:ed:00:ec:73:52:1f:64:4a:32:aa:8a:92:
73:f4:72:5d:ff:77:a1:62:e4:f5:f4:a1:a5:b9:1e:
fd:53:5b:e1:fa:dd:ee:f0:ad:e0:23:f6:ab:8d:de:
53:21:f6:7d:69:e0:1b:1e:19:a9:4f:7d:a7:7b:7e:
66:e5:7f:e2:85:be:42:bd:4a:df:8b:73:22:f9:ed:
85:a7:c0:6c:a9:6d:6d:f4:47:77:fa:a8:73:68:09:
e4:71:4e:73:8e:05:59:43:4b:05:8b:07:db:88:72:
e3:4e:d8:6b:c6:52:a7:35:ee:26:5f:c8:2b:93:0f:
ff:a9:41:22:17:fb:b3:b5:29:f5:8d:40:3e:bb:0c:
81:aa:08:4a:07:59:77:53:63:68:50:e2:10:d5:c0:
24:30:1a:23:7c:c8:43:fc:df:7a:20:2e:25:f3:85:
57:41:b4:54:bd:df:b8:6f:45:c4:94:05:be:19:60:
6d:7c:5f:66:ae:6a:c0:c9:8e:47:de:97:e4:a6:f3:
e9:8a:b9:14:83:34:85:70:b5:03:d7:22:c9:b1:12:
44:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:20:8D:79:52:2B:EF:1C:5D:7B:5D:B5:E9:A3:EE:44:DE:14:E7:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9829ac0-369e-3677-a622-3a4b19b270cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.45.60.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:a7:e4:40:1a:50:4a:14:65:b5:a6:95:b1:25:f4:68:35:b1:
4e:d6:16:b4:fa:f4:29:7b:ad:e5:c8:be:66:4d:7f:e8:aa:77:
44:62:1d:1b:ce:99:c6:75:8c:ba:91:7b:f8:5e:07:71:41:4a:
f4:d2:fe:f3:96:8a:38:36:0d:27:89:d3:06:d7:5d:dc:51:a1:
ac:8e:e4:07:ab:65:3e:c6:2f:e9:73:d2:7e:fd:d2:75:9c:ed:
2f:02:70:be:c1:03:fc:25:b2:97:c8:2c:34:97:eb:b1:e3:d8:
3d:69:6a:29:58:96:88:85:03:70:e5:d4:8a:dc:b4:33:ba:fe:
4f:c2:14:31:a0:f0:53:60:d9:18:6b:11:6a:c8:c9:5a:43:03:
35:8b:70:dd:6d:cd:7c:74:47:f6:f7:9c:ad:ea:31:72:95:5f:
36:42:47:10:8a:97:ec:bc:74:63:7c:48:e5:0c:08:98:f4:db:
58:d7:39:50:1f:d7:1b:54:f3:a5:66:62:35:b8:00:6d:f4:7b:
61:59:d5:b7:74:fa:3d:48:0e:7b:02:9f:ca:8a:b4:0c:34:dd:
3a:77:3e:c6:a5:e7:b1:34:b7:04:59:a3:03:ee:ff:e3:0b:82:
79:10:ad:9d:21:7b:0a:c6:29:80:c3:e4:03:2a:fc:b8:66:fd:
69:ea:4f:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh863eNjEmVXqun0IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
NjY5ZmNiMmYtYzBiMC00NzBkLTk1ZjYtMTJiZDRhNzQ1MmUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusX43g7eDdDy4Qd9Vw0sFsO30yRwAOt9DfZz
0FwgH2NzVX+otcfd/iNxtAjmaebtAOxzUh9kSjKqipJz9HJd/3ehYuT19KGluR79
U1vh+t3u8K3gI/arjd5TIfZ9aeAbHhmpT32ne35m5X/ihb5CvUrfi3Mi+e2Fp8Bs
qW1t9Ed3+qhzaAnkcU5zjgVZQ0sFiwfbiHLjTthrxlKnNe4mX8grkw//qUEiF/uz
tSn1jUA+uwyBqghKB1l3U2NoUOIQ1cAkMBojfMhD/N96IC4l84VXQbRUvd+4b0XE
lAW+GWBtfF9mrmrAyY5H3pfkpvPpirkUgzSFcLUD1yLJsRJEVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHMgjXlSK+8cXXtdtemj7kTeFOfJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDk4MjlhYzAtMzY5ZS0z
Njc3LWE2MjItM2E0YjE5YjI3MGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFy08MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEun5EAaUEoUZbWmlbEl9Gg1sU7WFrT69Cl7reXIvmZNf+iqd0RiHRvO
mcZ1jLqRe/heB3FBSvTS/vOWijg2DSeJ0wbXXdxRoayO5AerZT7GL+lz0n790nWc
7S8CcL7BA/wlspfILDSX67Hj2D1pailYloiFA3Dl1IrctDO6/k/CFDGg8FNg2Rhr
EWrIyVpDAzWLcN1tzXx0R/b3nK3qMXKVXzZCRxCKl+y8dGN8SOUMCJj021jXOVAf
1xtU86VmYjW4AG30e2FZ1bd0+j1IDnsCn8qKtAw03Tp3Psal57E0twRZowPu/+ML
gnkQrZ0hewrGKYDD5AMq/Lhm/WnqT1c=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:51:24 2025 by rpki-client