Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbaf8ec5-3327-3455-b442-c52264f96c65.roa
File: dbaf8ec5-3327-3455-b442-c52264f96c65.roa (raw, json)
Hash identifier: UkTBPy1hP+CeW5+A/4pu8toZ77TJ5fwWBAF/B2MlcNw=
Subject key identifier: 85:8C:7E:72:7D:E5:78:44:F4:4B:E2:0A:67:87:9D:C8:DB:1E:89:C0
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858486EF5C4B09F729B91AC866A80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbaf8ec5-3327-3455-b442-c52264f96c65.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 18403
IP address blocks: 23.33.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:c4:b0:9f:72:9b:91:ac:86:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=764b203b-1b49-46b0-8e78-d6f9093322be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cd:87:12:e8:e1:be:ae:61:d5:ea:5b:3e:a1:
3a:58:01:cb:a3:93:8b:63:c3:6b:09:a3:8f:08:1b:
ef:d1:d3:70:1e:c5:66:7c:b7:c9:2e:0c:31:9c:2a:
1c:80:58:80:98:8d:59:1d:5f:ef:79:15:6d:7b:e8:
5c:13:00:1b:e4:d9:73:5d:48:5b:23:a7:7c:8a:d7:
b5:ae:f7:1e:98:40:db:25:10:fa:a4:38:0d:19:63:
83:73:54:c4:43:21:49:dd:fa:1b:46:69:75:5e:1a:
f5:3f:3e:b0:ef:22:ad:21:6d:28:81:45:d2:f9:0e:
55:b3:7a:37:d6:4c:7e:fe:f1:24:61:1c:31:2e:b2:
30:48:5d:07:1a:4b:e0:57:e9:bb:c5:f4:fc:fb:0c:
01:25:0c:72:29:25:60:14:d6:01:02:3e:e8:95:a2:
89:70:d8:c0:a8:f9:ce:69:6d:2b:ab:4a:62:2d:a1:
08:29:b2:e2:85:80:8e:05:7f:84:9c:62:8c:53:0f:
65:84:f7:db:8d:ef:73:ba:57:72:55:e7:65:ba:c7:
2d:4e:ba:e6:70:c6:07:97:38:93:75:cd:da:f4:bc:
9b:b7:a4:8f:17:2d:d1:e7:74:ca:f8:02:58:a3:23:
10:60:79:37:40:0e:80:a8:0b:3f:53:86:59:a1:01:
90:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8C:7E:72:7D:E5:78:44:F4:4B:E2:0A:67:87:9D:C8:DB:1E:89:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbaf8ec5-3327-3455-b442-c52264f96c65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.33.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:67:25:47:92:22:2a:be:64:ec:9f:31:81:0c:af:b6:35:81:
e1:82:f1:11:e0:87:0b:ae:a0:a8:3d:b4:17:f4:0f:79:0b:21:
04:8a:8f:d8:f8:4a:b4:03:4a:7e:14:1c:67:b7:39:90:6d:28:
f7:6d:69:81:8a:0c:7c:d8:3c:e8:5c:0f:f4:76:d0:57:0a:99:
5b:70:05:28:4c:12:72:fe:3b:4b:1c:af:eb:ac:45:bb:18:ef:
cb:e0:dc:8b:c5:ad:3b:f0:dd:90:f9:5a:23:3a:e6:84:d0:dd:
31:79:9d:e6:c8:e4:67:42:ff:cd:71:50:b8:49:b0:73:6d:c8:
3a:3b:99:90:91:3a:c3:a5:50:98:ab:a9:6b:94:cb:4b:fb:c8:
6b:6c:88:49:f1:bf:9d:04:e4:6a:3b:f4:b3:18:6a:a9:4d:87:
f8:da:ef:92:1d:b5:f0:e5:28:0b:44:1c:20:c9:ab:4c:10:e0:
a7:0e:d3:61:72:60:ba:14:a6:77:f8:1a:23:e9:2a:48:01:0c:
92:4e:9f:22:f6:78:50:d6:1b:c4:be:5f:56:de:89:7c:44:d2:
59:86:83:c3:2c:0f:3d:7c:48:45:6f:af:9f:57:94:bc:33:19:
90:bf:4b:72:9f:0e:38:18:8a:10:52:5e:5d:d5:40:55:15:44:
d3:b7:8c:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhu9cSwn3KbkayGaoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEwNDE0MDA1MVoXDTI1MDQwNDEzMDA1MVowLzEtMCsGA1UEAxMk
NzY0YjIwM2ItMWI0OS00NmIwLThlNzgtZDZmOTA5MzMyMmJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM2HEujhvq5h1epbPqE6WAHLo5OLY8NrCaOP
CBvv0dNwHsVmfLfJLgwxnCocgFiAmI1ZHV/veRVte+hcEwAb5NlzXUhbI6d8ite1
rvcemEDbJRD6pDgNGWODc1TEQyFJ3fobRml1Xhr1Pz6w7yKtIW0ogUXS+Q5Vs3o3
1kx+/vEkYRwxLrIwSF0HGkvgV+m7xfT8+wwBJQxyKSVgFNYBAj7olaKJcNjAqPnO
aW0rq0piLaEIKbLihYCOBX+EnGKMUw9lhPfbje9zuldyVedlusctTrrmcMYHlziT
dc3a9Lybt6SPFy3R53TK+AJYoyMQYHk3QA6AqAs/U4ZZoQGQlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIWMfnJ95XhE9EviCmeHncjbHonAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGJhZjhlYzUtMzMyNy0z
NDU1LWI0NDItYzUyMjY0Zjk2YzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyF4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAINnJUeSIiq+ZOyfMYEMr7Y1geGC8RHghwuuoKg9tBf0D3kLIQSKj9j4
SrQDSn4UHGe3OZBtKPdtaYGKDHzYPOhcD/R20FcKmVtwBShMEnL+O0scr+usRbsY
78vg3IvFrTvw3ZD5WiM65oTQ3TF5nebI5GdC/81xULhJsHNtyDo7mZCROsOlUJir
qWuUy0v7yGtsiEnxv50E5Go79LMYaqlNh/ja75IdtfDlKAtEHCDJq0wQ4KcO02Fy
YLoUpnf4GiPpKkgBDJJOnyL2eFDWG8S+X1beiXxE0lmGg8MsDz18SEVvr59XlLwz
GZC/S3KfDjgYihBSXl3VQFUVRNO3jDs=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:54:46 2025 by rpki-client