Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f41a587f-2122-3bfe-bed3-650d4aba6e49.roa
File: f41a587f-2122-3bfe-bed3-650d4aba6e49.roa (raw, json)
Hash identifier: zqIpJvounzWsooZm3S+ciW1yAptjqM6ZnZRAY4witlA=
Subject key identifier: 15:52:2D:60:D5:22:D7:50:37:DE:23:B8:B4:06:4E:6A:D1:43:A0:2C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584827C535D1F678E3C5E68ECF80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f41a587f-2122-3bfe-bed3-650d4aba6e49.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 24319
IP address blocks: 23.205.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:35:d1:f6:78:e3:c5:e6:8e:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=b688ceb2-9b51-47e1-930f-09957a274800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fb:61:af:0c:14:32:6e:7b:3b:0b:3d:e4:e9:
10:33:e2:8c:b1:92:ec:fa:0f:f5:cc:a9:9c:6f:87:
0d:be:d4:84:80:20:29:0f:bd:18:23:92:1f:e4:40:
42:73:1e:ff:76:24:61:44:6a:b8:80:57:6b:b1:1b:
cc:a4:e4:17:57:43:9a:31:93:79:94:59:a4:4d:ae:
56:26:4f:f0:8f:90:9d:bd:02:69:b1:2a:a3:8c:53:
04:30:f3:f7:29:3a:a5:e3:1b:c2:6a:5a:c2:29:64:
fd:4a:30:89:08:f4:61:56:b9:4a:82:f4:d2:63:80:
0c:4e:d3:d6:f1:d7:77:f1:45:e1:08:e1:3f:e2:03:
45:84:c8:61:af:e5:0c:94:84:69:4b:d4:7a:fd:7a:
f5:7d:4d:81:b9:05:0f:53:c6:52:11:a5:61:ff:25:
9c:95:6b:27:5c:b5:ca:03:f2:84:ad:a3:c0:27:22:
f4:be:4a:03:99:9e:44:91:ba:40:57:3c:13:f2:a4:
01:b9:5f:df:3f:f0:d5:8e:1d:4b:ee:ad:56:54:4f:
73:d3:32:34:35:fd:5e:f5:b2:62:3e:0b:95:9d:67:
6d:fc:4a:f0:78:e8:bd:a1:c9:7e:e5:4d:02:60:91:
95:ca:90:8c:e9:1a:86:ea:5b:0e:d0:a7:ee:da:46:
44:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:52:2D:60:D5:22:D7:50:37:DE:23:B8:B4:06:4E:6A:D1:43:A0:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f41a587f-2122-3bfe-bed3-650d4aba6e49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.205.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:56:08:14:91:b9:00:1e:95:5c:83:73:71:63:28:ac:24:8f:
7a:65:e5:82:ec:4f:01:95:69:a3:cf:23:32:96:4f:7a:8b:06:
34:26:6e:2f:1c:de:be:c9:ec:19:af:58:2d:7b:2e:33:67:4f:
bb:9b:f4:93:dc:d2:0b:91:c7:74:74:70:2e:1f:92:bb:1e:bf:
cc:e4:73:e4:7c:31:46:ed:4c:a2:44:0f:74:96:2f:fd:3d:ad:
c3:ca:d6:f8:a1:b9:18:da:65:3e:f8:40:a6:1d:57:a7:41:b1:
3a:3a:29:89:6f:7c:4f:42:36:50:39:49:2d:79:f1:72:01:42:
89:b5:2f:37:3b:ea:36:ba:22:34:e7:d6:86:2f:cf:5e:c8:e6:
49:ba:a5:b4:ba:a1:4e:3a:db:c4:9b:33:cf:f0:02:e6:d6:55:
6d:22:14:b9:08:24:d9:51:3f:0a:c9:7a:92:af:ce:fd:4c:64:
a8:95:aa:d0:68:3c:d7:8a:0f:01:41:0c:90:24:9a:cd:a3:a4:
a4:24:57:74:a5:44:d1:5d:68:e0:dd:f8:29:99:87:97:b8:29:
a5:0c:62:b8:30:1a:90:6d:20:5c:c0:df:ac:5b:3c:3b:df:06:
52:ef:cb:e3:ba:69:01:fd:87:7b:c3:c0:17:ba:21:06:04:6e:
88:fb:1b:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgnxTXR9njjxeaOz4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIxMDAyMDA0MFoXDTI1MDMxMDAxMDA0MFowLzEtMCsGA1UEAxMk
YjY4OGNlYjItOWI1MS00N2UxLTkzMGYtMDk5NTdhMjc0ODAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvthrwwUMm57Ows95OkQM+KMsZLs+g/1zKmc
b4cNvtSEgCApD70YI5If5EBCcx7/diRhRGq4gFdrsRvMpOQXV0OaMZN5lFmkTa5W
Jk/wj5CdvQJpsSqjjFMEMPP3KTql4xvCalrCKWT9SjCJCPRhVrlKgvTSY4AMTtPW
8dd38UXhCOE/4gNFhMhhr+UMlIRpS9R6/Xr1fU2BuQUPU8ZSEaVh/yWclWsnXLXK
A/KEraPAJyL0vkoDmZ5EkbpAVzwT8qQBuV/fP/DVjh1L7q1WVE9z0zI0Nf1e9bJi
PguVnWdt/ErweOi9ocl+5U0CYJGVypCM6RqG6lsO0Kfu2kZE5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBVSLWDVItdQN94juLQGTmrRQ6AsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjQxYTU4N2YtMjEyMi0z
YmZlLWJlZDMtNjUwZDRhYmE2ZTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF81vMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABdWCBSRuQAelVyDc3FjKKwkj3pl5YLsTwGVaaPPIzKWT3qLBjQmbi8c
3r7J7BmvWC17LjNnT7ub9JPc0guRx3R0cC4fkrsev8zkc+R8MUbtTKJED3SWL/09
rcPK1vihuRjaZT74QKYdV6dBsTo6KYlvfE9CNlA5SS158XIBQom1Lzc76ja6IjTn
1oYvz17I5km6pbS6oU4628SbM8/wAubWVW0iFLkIJNlRPwrJepKvzv1MZKiVqtBo
PNeKDwFBDJAkms2jpKQkV3SlRNFdaODd+CmZh5e4KaUMYrgwGpBtIFzA36xbPDvf
BlLvy+O6aQH9h3vDwBe6IQYEboj7G7Y=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:49:48 2025 by rpki-client