Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f23db843-7c81-3761-aa09-2ac6c393b0ee.roa
File: f23db843-7c81-3761-aa09-2ac6c393b0ee.roa (raw, json)
Hash identifier: KP3fXt1hJtCvl6Gk93Ffz1Sr+tUNvAp4+QRskNO3yfA=
Subject key identifier: 81:D5:2C:E4:AC:46:FD:40:43:86:41:2B:6A:79:26:DD:80:05:5F:BF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584834558B391AD760DE1B1E7D00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f23db843-7c81-3761-aa09-2ac6c393b0ee.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.65.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:8b:39:1a:d7:60:de:1b:1e:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=b4514f3c-80da-45a8-a383-1ed3f4875587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:8b:8b:95:1d:08:ee:55:11:4a:3c:fa:ee:6a:
fa:d2:46:97:ca:13:f3:5e:f3:ad:26:86:e6:96:33:
9b:37:8d:6b:13:8f:a4:d5:21:fe:c8:74:4f:25:00:
98:51:1f:c9:f0:2a:88:99:98:bb:b9:c9:4c:50:78:
54:1e:da:de:65:3c:b9:fc:d1:da:1c:a8:3c:5f:d6:
ce:69:f2:17:53:82:4f:c2:83:73:9b:a8:00:ff:e4:
0c:b5:8f:14:9b:53:6a:b7:15:93:f2:3c:38:be:c1:
14:51:cb:2a:1d:a0:95:df:14:f1:44:8a:86:9c:fe:
ae:bd:83:9d:d6:33:95:64:76:ad:0b:02:91:f9:d8:
54:60:25:e0:f4:d9:33:c1:71:6e:e1:11:76:7c:ed:
bb:4c:81:71:69:cc:93:90:f2:de:7f:16:eb:0a:7c:
2d:f6:5b:9b:f4:30:02:44:e3:58:0d:c0:7b:ae:63:
f3:7c:ec:ab:15:37:06:07:30:8f:41:7b:1e:36:f0:
a2:44:5a:f5:f8:75:02:50:7b:99:2e:4f:75:3f:80:
b9:28:91:2d:0d:81:60:1c:72:ba:1e:3f:98:2b:7f:
2a:2c:67:2e:3e:8e:94:d4:44:b6:29:db:11:a1:79:
66:be:64:d3:05:d6:38:98:b2:a3:53:2d:51:3b:57:
cd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D5:2C:E4:AC:46:FD:40:43:86:41:2B:6A:79:26:DD:80:05:5F:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f23db843-7c81-3761-aa09-2ac6c393b0ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.65.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:15:69:70:b7:09:d7:dd:20:64:e5:79:51:c5:a9:6b:60:bb:
b8:1e:34:a3:8e:ce:fc:b2:55:9b:55:01:6c:a6:8d:74:36:f5:
17:00:af:51:b7:fb:55:83:ca:67:07:0d:d3:90:9d:46:02:7b:
d1:64:3b:2c:f2:80:aa:c1:f1:e1:f2:4b:d6:2c:75:4c:cc:b2:
f1:c1:58:d4:2e:3a:a6:f6:22:97:99:26:da:ed:ef:32:05:a1:
47:ec:ac:88:98:2d:a5:d3:ed:f0:18:0c:6b:59:2c:31:e3:cd:
00:dc:35:86:79:a0:2e:2e:25:9f:53:98:eb:5f:b6:cb:2d:25:
36:89:32:41:aa:64:76:4b:37:93:e2:93:0b:cc:d1:dc:d2:64:
3a:09:ba:39:96:6a:32:d6:fb:35:04:7f:e1:d3:ed:5e:1d:e9:
32:ea:d0:87:ee:4c:0a:37:a3:0d:42:7d:26:45:3b:9e:0b:1a:
c9:9f:04:23:80:1a:d6:e7:7b:a3:ab:83:bc:aa:00:18:09:57:
37:d9:6b:ae:38:e2:3f:8f:bf:e7:e7:40:c5:02:68:fd:d1:ea:
19:72:81:57:3e:c1:09:32:3a:84:06:5a:c5:bb:1f:21:65:e6:
94:bc:4b:5e:c5:7f:3e:06:75:f5:7f:20:42:9a:1a:08:c5:8e:
b3:2a:ec:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg0VYs5Gtdg3hsefQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk
YjQ1MTRmM2MtODBkYS00NWE4LWEzODMtMWVkM2Y0ODc1NTg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ouLlR0I7lURSjz67mr60kaXyhPzXvOtJobm
ljObN41rE4+k1SH+yHRPJQCYUR/J8CqImZi7uclMUHhUHtreZTy5/NHaHKg8X9bO
afIXU4JPwoNzm6gA/+QMtY8Um1NqtxWT8jw4vsEUUcsqHaCV3xTxRIqGnP6uvYOd
1jOVZHatCwKR+dhUYCXg9NkzwXFu4RF2fO27TIFxacyTkPLefxbrCnwt9lub9DAC
RONYDcB7rmPzfOyrFTcGBzCPQXseNvCiRFr1+HUCUHuZLk91P4C5KJEtDYFgHHK6
Hj+YK38qLGcuPo6U1ES2KdsRoXlmvmTTBdY4mLKjUy1RO1fNRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIHVLOSsRv1AQ4ZBK2p5Jt2ABV+/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjIzZGI4NDMtN2M4MS0z
NzYxLWFhMDktMmFjNmMzOTNiMGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF0EAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHwVaXC3CdfdIGTleVHFqWtgu7geNKOOzvyyVZtVAWymjXQ29RcAr1G3
+1WDymcHDdOQnUYCe9FkOyzygKrB8eHyS9YsdUzMsvHBWNQuOqb2IpeZJtrt7zIF
oUfsrIiYLaXT7fAYDGtZLDHjzQDcNYZ5oC4uJZ9TmOtftsstJTaJMkGqZHZLN5Pi
kwvM0dzSZDoJujmWajLW+zUEf+HT7V4d6TLq0IfuTAo3ow1CfSZFO54LGsmfBCOA
Gtbne6Org7yqABgJVzfZa6444j+Pv+fnQMUCaP3R6hlygVc+wQkyOoQGWsW7HyFl
5pS8S17Ffz4GdfV/IEKaGgjFjrMq7MI=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:38:16 2025 by rpki-client