Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/05af755a-a254-3bd6-ba01-7b5232550dee.roa
File: 05af755a-a254-3bd6-ba01-7b5232550dee.roa (raw, json)
Hash identifier: P91qqGNIU6NsChQi6p3vzB8R4eeYetVthqxLC0NA36g=
Subject key identifier: 26:F5:FD:66:CA:83:F0:5B:A8:C1:AF:91:39:D5:0F:DA:F8:45:A2:D7
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A830CA9A88FF7D9DEA98C9C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/05af755a-a254-3bd6-ba01-7b5232550dee.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 16625
IP address blocks: 23.201.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:ca:9a:88:ff:7d:9d:ea:98:c9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=e4233cab-9bbf-433f-910d-ee2bc28137f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:24:0a:34:8d:73:20:e8:cb:85:ee:91:8c:53:
20:26:02:29:f4:a3:59:b5:d4:4b:a7:5e:33:a1:21:
e5:94:dd:66:be:69:f8:4a:77:c4:39:6e:b8:5f:87:
fa:a6:0a:85:5d:db:27:12:5b:5e:be:3f:59:a2:86:
7d:30:c2:a4:e9:18:6e:26:68:a1:23:10:39:03:f5:
8e:aa:3f:e4:2b:b1:95:89:71:21:c2:c4:bf:e9:27:
cf:02:2e:62:db:4c:24:f1:8b:63:a8:ef:81:d5:6c:
be:f9:d6:4a:97:ce:2d:2e:08:55:3a:a6:e1:7f:54:
4d:83:52:91:87:e6:8d:5c:83:55:18:5b:9b:28:f4:
b3:89:5a:36:b3:3d:4e:b0:6d:98:d7:cf:e5:df:fa:
f7:cf:70:3b:fa:d2:a3:9b:d7:30:41:fa:07:a5:5c:
84:a7:17:47:86:ee:44:54:15:ce:13:1d:3c:b6:f4:
80:c5:4f:ba:ca:c7:6f:0f:b1:33:44:5b:54:a8:82:
9a:73:27:f3:9e:9e:84:32:27:3c:10:6a:bd:ae:d9:
71:16:1f:b7:e4:f9:b4:32:76:8e:3c:f9:f4:81:25:
90:a9:1a:4c:9d:03:07:ca:29:f5:6a:ee:91:64:47:
92:0c:4c:c9:e0:1a:20:f8:ad:2c:5b:eb:d5:51:35:
56:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F5:FD:66:CA:83:F0:5B:A8:C1:AF:91:39:D5:0F:DA:F8:45:A2:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/05af755a-a254-3bd6-ba01-7b5232550dee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.201.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:71:bf:6d:ef:9f:11:3b:0d:3e:ed:fc:be:d1:35:99:bc:dd:
4d:58:1d:bc:6b:66:e5:1d:e6:f8:93:2a:ba:51:5f:2c:39:69:
c6:0f:b7:4f:6a:07:ae:52:3e:fc:0b:98:ce:96:d3:79:41:5c:
5f:95:98:f6:10:52:b1:75:74:13:43:72:d3:b8:4c:fb:e3:32:
17:d2:c0:47:af:ff:6d:bc:e0:62:91:3f:41:a5:05:07:74:31:
da:d6:32:bd:f7:a7:0e:75:22:a3:4d:70:e4:06:58:c9:e8:38:
f8:75:ad:9c:6e:a8:97:a9:26:d8:4c:87:4c:d4:b7:00:2c:c7:
9d:2b:7b:44:c2:44:5d:88:44:3c:5b:6f:51:e2:98:f5:e4:df:
ee:f2:f7:15:28:7c:ae:d3:d1:0c:f3:8b:1d:27:d5:b4:a1:ee:
98:5f:89:5a:79:ee:10:93:47:1f:d7:0d:f8:5e:b4:f6:1a:74:
e4:b7:df:5a:ba:b9:51:ea:79:41:d1:36:45:ab:fd:c2:fc:7b:
02:42:0c:fb:a2:0d:9b:17:35:ea:2a:37:73:19:72:60:e1:ef:
d5:80:4f:b9:80:18:7b:93:54:28:92:80:22:96:31:7c:8e:49:
fc:99:98:cc:e6:5c:53:ae:eb:13:b9:84:9c:64:09:68:df:d8:
10:44:0f:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMMqaiP99neqYycAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk
ZTQyMzNjYWItOWJiZi00MzNmLTkxMGQtZWUyYmMyODEzN2Y4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCQKNI1zIOjLhe6RjFMgJgIp9KNZtdRLp14z
oSHllN1mvmn4SnfEOW64X4f6pgqFXdsnEltevj9ZooZ9MMKk6RhuJmihIxA5A/WO
qj/kK7GViXEhwsS/6SfPAi5i20wk8YtjqO+B1Wy++dZKl84tLghVOqbhf1RNg1KR
h+aNXINVGFubKPSziVo2sz1OsG2Y18/l3/r3z3A7+tKjm9cwQfoHpVyEpxdHhu5E
VBXOEx08tvSAxU+6ysdvD7EzRFtUqIKacyfznp6EMic8EGq9rtlxFh+35Pm0MnaO
PPn0gSWQqRpMnQMHyin1au6RZEeSDEzJ4Bog+K0sW+vVUTVWUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCb1/WbKg/BbqMGvkTnVD9r4RaLXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDVhZjc1NWEtYTI1NC0z
YmQ2LWJhMDEtN2I1MjMyNTUwZGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF8nwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAApxv23vnxE7DT7t/L7RNZm83U1YHbxrZuUd5viTKrpRXyw5acYPt09q
B65SPvwLmM6W03lBXF+VmPYQUrF1dBNDctO4TPvjMhfSwEev/2284GKRP0GlBQd0
MdrWMr33pw51IqNNcOQGWMnoOPh1rZxuqJepJthMh0zUtwAsx50re0TCRF2IRDxb
b1HimPXk3+7y9xUofK7T0Qzzix0n1bSh7phfiVp57hCTRx/XDfhetPYadOS331q6
uVHqeUHRNkWr/cL8ewJCDPuiDZsXNeoqN3MZcmDh79WAT7mAGHuTVCiSgCKWMXyO
SfyZmMzmXFOu6xO5hJxkCWjf2BBEDww=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:13:13 2025 by rpki-client