Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9bba8a5-2f36-386c-9bdd-36e0facc3ad9.roa
File: d9bba8a5-2f36-386c-9bdd-36e0facc3ad9.roa (raw, json)
Hash identifier: S2aaERxVOkrYBEy3BLQ2/1pHHvJj1gPZlvNwpa6fdUU=
Subject key identifier: E3:75:B2:AC:60:83:D4:7A:44:0F:F3:CD:6B:2E:21:05:56:ED:32:62
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487CEB4B59BCBB674482FE0C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9bba8a5-2f36-386c-9bdd-36e0facc3ad9.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.45.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:4b:59:bc:bb:67:44:82:fe:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=e950d805-fdb8-4f25-9805-2dd8638edf29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:85:4c:8c:9b:63:37:8d:29:55:a7:b1:ab:d6:
bf:b1:14:6f:aa:f9:04:7f:b9:c4:53:d9:0d:6c:fc:
06:cd:19:43:6a:65:86:86:5c:00:20:96:fa:0a:ef:
93:75:75:de:58:19:da:d3:34:cd:1f:31:2c:f0:70:
53:dc:0c:00:ee:9c:6b:48:03:dd:11:2a:87:53:0e:
84:5d:01:f9:02:4b:12:11:a0:b0:4b:ed:4d:02:d7:
c3:a3:ea:ec:a7:73:53:f7:21:ad:4b:20:c5:0c:97:
9d:63:88:9f:3f:f2:39:b0:74:e2:84:fd:4b:37:1a:
ba:26:d9:fb:94:b0:46:74:9e:3d:f8:22:56:4f:53:
c2:8b:09:85:fd:f5:b9:50:69:7e:bb:cd:44:3c:e0:
ed:60:e9:26:b7:ca:85:d5:de:6a:9f:88:ba:33:0f:
53:af:cc:4f:52:81:08:f8:84:4d:22:1a:09:97:45:
c2:56:c7:dd:5a:8d:08:a3:17:c7:dd:51:b4:26:61:
23:47:51:38:c8:bd:bb:c7:d5:dc:30:ee:a8:e6:14:
f4:be:c5:fe:93:9f:f1:f2:58:19:47:b7:3a:6a:22:
b7:89:fa:77:a7:8a:38:3f:5b:a3:54:0f:a2:67:74:
99:52:3b:f9:1f:96:24:1a:21:f0:53:87:12:eb:af:
95:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:75:B2:AC:60:83:D4:7A:44:0F:F3:CD:6B:2E:21:05:56:ED:32:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9bba8a5-2f36-386c-9bdd-36e0facc3ad9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.45.46.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:ee:d3:5b:7c:4f:bd:e4:d8:51:87:1f:27:38:eb:42:97:bc:
91:34:67:f9:ff:77:f5:e1:eb:ad:15:ee:e0:c0:15:fd:e0:3c:
7c:5b:5c:ae:31:45:39:4a:50:3e:8c:97:5d:2f:d0:6d:4a:c9:
60:9c:fd:82:42:f1:4f:d5:91:30:5d:58:f1:be:a8:6f:0f:82:
09:54:cb:92:b5:5a:2b:a6:8b:ed:a4:81:76:41:60:aa:18:c6:
5c:16:28:88:40:d8:39:12:c8:b1:43:86:d0:af:a8:66:eb:4a:
2f:b4:77:6b:b3:a2:97:ed:e4:97:77:43:e2:ac:92:f3:67:ad:
58:5e:3a:36:b3:61:41:0c:c7:39:d3:1f:34:53:9d:de:7d:0e:
6c:7e:f3:63:4d:f7:90:69:8a:90:c8:3c:85:9b:d5:08:a1:f8:
91:91:f6:c0:53:be:7b:a1:93:19:03:b0:6f:91:ef:3a:ca:16:
e1:16:4b:85:7a:a9:bb:46:2e:41:bf:0f:0f:c2:b7:b9:80:f3:
dd:73:86:b7:c9:6a:df:d7:71:9c:dc:fd:8a:0a:1b:12:ef:7e:
6b:84:21:bc:59:84:cf:54:b1:03:e6:86:b5:c8:e5:f9:90:e1:
85:5b:28:94:35:44:1c:25:34:b2:71:e0:b0:88:c9:54:65:f9:
e6:ec:3a:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh860tZvLtnRIL+DIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
ZTk1MGQ4MDUtZmRiOC00ZjI1LTk4MDUtMmRkODYzOGVkZjI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIVMjJtjN40pVaexq9a/sRRvqvkEf7nEU9kN
bPwGzRlDamWGhlwAIJb6Cu+TdXXeWBna0zTNHzEs8HBT3AwA7pxrSAPdESqHUw6E
XQH5AksSEaCwS+1NAtfDo+rsp3NT9yGtSyDFDJedY4ifP/I5sHTihP1LNxq6Jtn7
lLBGdJ49+CJWT1PCiwmF/fW5UGl+u81EPODtYOkmt8qF1d5qn4i6Mw9Tr8xPUoEI
+IRNIhoJl0XCVsfdWo0IoxfH3VG0JmEjR1E4yL27x9XcMO6o5hT0vsX+k5/x8lgZ
R7c6aiK3ifp3p4o4P1ujVA+iZ3SZUjv5H5YkGiHwU4cS66+VMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFON1sqxgg9R6RA/zzWsuIQVW7TJiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDliYmE4YTUtMmYzNi0z
ODZjLTliZGQtMzZlMGZhY2MzYWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy0uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHXu01t8T73k2FGHHyc460KXvJE0Z/n/d/Xh660V7uDAFf3gPHxbXK4x
RTlKUD6Ml10v0G1KyWCc/YJC8U/VkTBdWPG+qG8PgglUy5K1Wiumi+2kgXZBYKoY
xlwWKIhA2DkSyLFDhtCvqGbrSi+0d2uzopft5Jd3Q+KskvNnrVheOjazYUEMxznT
HzRTnd59Dmx+82NN95BpipDIPIWb1Qih+JGR9sBTvnuhkxkDsG+R7zrKFuEWS4V6
qbtGLkG/Dw/Ct7mA891zhrfJat/XcZzc/YoKGxLvfmuEIbxZhM9UsQPmhrXI5fmQ
4YVbKJQ1RBwlNLJx4LCIyVRl+ebsOng=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:28:32 2025 by rpki-client