Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb36fbde-d390-3dd8-b6c3-236744567678.roa
File: fb36fbde-d390-3dd8-b6c3-236744567678.roa (raw, json)
Hash identifier: Ns1KxtqIspAtCgIHbVfgMM53WlCjTUYOMZWaNEWAj1o=
Subject key identifier: 88:3A:DB:82:6B:99:4D:1B:6E:6C:BF:05:D1:40:BE:71:15:DE:E4:19
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848451596E461F458255B6AF2A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb36fbde-d390-3dd8-b6c3-236744567678.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.1.80.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:96:e4:61:f4:58:25:5b:6a:f2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=ffa97b0d-7150-451c-a2bf-43b311eecbd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a8:ad:ac:67:b0:79:6b:42:48:87:1f:7b:90:
2e:a7:fb:73:bc:69:3c:34:89:96:f0:4c:4b:40:ea:
a1:47:01:18:9d:21:06:6b:51:b5:5f:06:f8:91:55:
8b:46:d8:b4:5b:4b:ca:63:67:d6:2f:8e:89:1f:2a:
2d:64:7f:ee:ae:d5:e8:bc:2c:98:f2:4d:c6:60:4b:
57:48:54:85:de:58:49:a7:4b:e4:6e:dc:6e:2e:aa:
62:81:d1:29:97:b3:b2:bd:55:33:09:80:66:47:75:
e5:29:89:76:e3:a5:de:8e:28:2f:21:94:af:eb:9e:
ca:da:4f:4d:8c:37:da:a7:ca:84:da:a0:25:ea:10:
39:e7:3b:03:cc:9f:05:25:25:1a:5a:83:47:43:e0:
fe:51:73:80:84:2e:d2:8d:49:a2:b0:f2:92:05:2c:
19:bf:44:bd:bf:13:3a:cf:6d:ae:01:ea:14:94:0f:
d5:89:43:4d:70:e8:0f:02:88:8e:3b:13:1b:2e:d4:
e5:7e:20:1f:b6:3c:ae:86:cc:88:f8:19:dc:a6:d6:
a7:08:65:b9:6f:a8:25:b3:a4:24:aa:80:4d:58:d3:
5b:5b:40:8f:21:6d:3f:75:b7:12:cd:8a:cf:e1:f9:
24:71:74:7b:0f:ba:06:fa:b2:03:b6:f6:a0:e6:81:
37:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3A:DB:82:6B:99:4D:1B:6E:6C:BF:05:D1:40:BE:71:15:DE:E4:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb36fbde-d390-3dd8-b6c3-236744567678.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.1.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:14:c1:09:89:7e:6e:99:1a:65:ba:45:ac:4d:2a:98:cc:f2:
4f:ea:d4:11:50:c8:b4:04:f9:75:1d:d7:cd:cc:48:4a:42:60:
f2:7d:18:55:ad:e2:08:34:0b:fc:54:87:55:b1:54:e8:9e:16:
31:e8:71:78:f7:fc:7c:3c:e8:ea:99:1d:4a:89:2a:a6:bc:96:
76:83:c0:e4:04:b8:7b:80:46:0f:04:6e:3d:b8:b2:10:85:93:
46:1f:8d:4a:8c:b8:31:4d:bd:15:d2:9d:70:46:dd:54:82:9a:
64:5e:ea:d0:b8:2c:d6:7a:80:48:c6:fb:74:80:2e:51:30:0e:
1f:54:b3:da:12:7a:93:7e:3e:57:bf:84:64:b9:ff:dc:ad:a6:
62:2c:26:46:99:52:41:9a:12:61:67:81:39:b9:03:75:db:c2:
ef:e2:d6:d5:b4:59:f7:09:d0:e1:f7:cf:3f:56:0f:21:94:c0:
3c:f1:12:01:40:03:da:4d:dc:dc:e6:4f:34:6c:b9:72:4c:e3:
24:c4:02:d8:9b:cf:35:50:89:2a:c8:8d:1d:80:47:0f:7e:5d:
e3:29:e9:78:b6:e7:fd:db:95:ce:03:52:ae:2f:15:6c:be:3f:
8b:0b:dc:2e:79:d2:3e:8a:da:91:72:a4:3b:24:1e:9c:b0:35:
17:b9:a9:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhFFZbkYfRYJVtq8qAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk
ZmZhOTdiMGQtNzE1MC00NTFjLWEyYmYtNDNiMzExZWVjYmQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6itrGeweWtCSIcfe5Aup/tzvGk8NImW8ExL
QOqhRwEYnSEGa1G1Xwb4kVWLRti0W0vKY2fWL46JHyotZH/urtXovCyY8k3GYEtX
SFSF3lhJp0vkbtxuLqpigdEpl7OyvVUzCYBmR3XlKYl246XejigvIZSv657K2k9N
jDfap8qE2qAl6hA55zsDzJ8FJSUaWoNHQ+D+UXOAhC7SjUmisPKSBSwZv0S9vxM6
z22uAeoUlA/ViUNNcOgPAoiOOxMbLtTlfiAftjyuhsyI+BncptanCGW5b6gls6Qk
qoBNWNNbW0CPIW0/dbcSzYrP4fkkcXR7D7oG+rIDtvag5oE3IwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIg624JrmU0bbmy/BdFAvnEV3uQZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmIzNmZiZGUtZDM5MC0z
ZGQ4LWI2YzMtMjM2NzQ0NTY3Njc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwFQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABwUwQmJfm6ZGmW6RaxNKpjM8k/q1BFQyLQE+XUd183MSEpCYPJ9GFWt
4gg0C/xUh1WxVOieFjHocXj3/Hw86OqZHUqJKqa8lnaDwOQEuHuARg8Ebj24shCF
k0YfjUqMuDFNvRXSnXBG3VSCmmRe6tC4LNZ6gEjG+3SALlEwDh9Us9oSepN+Ple/
hGS5/9ytpmIsJkaZUkGaEmFngTm5A3Xbwu/i1tW0WfcJ0OH3zz9WDyGUwDzxEgFA
A9pN3NzmTzRsuXJM4yTEAtibzzVQiSrIjR2ARw9+XeMp6Xi25/3blc4DUq4vFWy+
P4sL3C550j6K2pFypDskHpywNRe5qZY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:59:11 2025 by rpki-client