Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07c3a9d5-4bad-3ad9-9709-b7fb7555c971.roa
File: 07c3a9d5-4bad-3ad9-9709-b7fb7555c971.roa (raw, json)
Hash identifier: HmZRp6Lq3YTzBtzUfLBR2gZ4A/yViW5oTMx3pd4FoDE=
Subject key identifier: AF:F2:C6:6C:8F:01:D8:C2:F5:11:9A:74:1B:7C:7E:5B:5F:3F:28:06
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858491D7164544AB80CD9CE17B700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07c3a9d5-4bad-3ad9-9709-b7fb7555c971.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 16625
IP address blocks: 23.57.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:64:54:4a:b8:0c:d9:ce:17:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=77a88f03-a179-45d9-ace3-68dc485c05bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:75:08:b2:81:ab:58:af:69:8b:77:a2:6f:5d:
b2:8b:30:65:a7:3d:f1:98:ef:13:ab:f8:3d:7d:84:
8a:73:8a:68:db:5e:67:34:6d:b6:18:1b:8a:dc:43:
81:51:29:1c:10:00:95:3e:38:19:cb:ae:ae:ed:c2:
dd:32:e1:b9:1c:66:83:9d:45:90:97:3e:50:26:9a:
4d:85:2b:91:d7:98:8f:b3:8c:30:4d:bf:0a:a2:35:
31:d1:c6:b3:c9:64:20:ad:ec:bf:39:87:66:1a:9d:
c6:00:91:a2:a0:84:c1:1b:c8:52:43:87:57:32:d3:
92:7c:2a:29:ca:3a:13:25:cf:19:c2:50:fd:e2:e5:
09:04:0e:82:8b:39:ea:8c:62:2b:10:be:14:e5:ae:
8f:cf:59:3b:97:ae:d3:1d:99:3b:ec:ad:65:05:69:
d1:b3:cd:de:d7:5e:02:9d:84:f5:20:1b:8a:09:ef:
95:e7:30:7c:53:a0:dd:ec:18:b7:05:c1:c9:40:ab:
4c:5d:0a:84:29:2e:8d:86:17:5e:d0:5b:39:a9:e6:
d2:51:96:03:90:5d:eb:4e:6a:fd:34:fc:50:4b:a7:
48:c7:ce:09:3b:5e:68:06:98:98:ff:db:c9:da:3e:
f3:d6:a6:3c:75:11:1e:bc:98:ef:a9:fa:77:17:d8:
44:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F2:C6:6C:8F:01:D8:C2:F5:11:9A:74:1B:7C:7E:5B:5F:3F:28:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07c3a9d5-4bad-3ad9-9709-b7fb7555c971.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.57.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:c9:0d:45:d3:be:24:e7:02:ed:cc:5b:00:cd:8b:ff:58:13:
fa:29:a6:32:1d:08:8b:24:7f:3d:aa:3c:b5:89:6a:9e:13:a9:
e9:76:82:11:e2:46:ad:89:99:bc:d7:a8:d6:82:fb:1a:bb:d4:
79:85:27:5f:67:f4:42:e8:ec:7d:91:6e:f1:a5:80:e0:75:15:
e2:c9:ac:05:a6:c3:8e:48:20:f8:82:d0:eb:6a:6d:cf:9d:99:
bf:f4:33:73:7a:06:2c:37:1d:c7:cd:da:ab:d5:51:b5:54:17:
50:05:bb:52:c7:1c:31:99:22:46:0f:fc:9b:93:93:bf:fc:aa:
7f:20:d9:bb:fb:5b:56:78:9c:bb:68:c0:6b:02:10:43:86:18:
75:ad:70:91:a8:f0:4b:14:81:fb:ad:c5:4a:df:bd:d3:76:b7:
3e:a4:c3:ea:d1:a3:e5:79:5b:5a:7a:e0:1d:d9:78:ad:ef:a0:
b7:70:cb:b0:0a:d9:b9:c2:78:ca:c2:d0:1d:c8:4c:80:28:ef:
b0:73:c6:62:0b:c6:da:7d:67:87:c9:9f:9d:60:fa:27:e3:75:
38:73:4f:84:45:e4:e0:ff:62:b5:f2:88:16:be:d8:d9:a0:1b:
ae:c7:ca:f2:2f:a4:52:40:76:9f:56:7d:f6:1a:47:47:69:49:
16:4c:1d:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWRUSrgM2c4XtwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk
NzdhODhmMDMtYTE3OS00NWQ5LWFjZTMtNjhkYzQ4NWMwNWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXUIsoGrWK9pi3eib12yizBlpz3xmO8Tq/g9
fYSKc4po215nNG22GBuK3EOBUSkcEACVPjgZy66u7cLdMuG5HGaDnUWQlz5QJppN
hSuR15iPs4wwTb8KojUx0cazyWQgrey/OYdmGp3GAJGioITBG8hSQ4dXMtOSfCop
yjoTJc8ZwlD94uUJBA6CiznqjGIrEL4U5a6Pz1k7l67THZk77K1lBWnRs83e114C
nYT1IBuKCe+V5zB8U6Dd7Bi3BcHJQKtMXQqEKS6Nhhde0Fs5qebSUZYDkF3rTmr9
NPxQS6dIx84JO15oBpiY/9vJ2j7z1qY8dREevJjvqfp3F9hEwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK/yxmyPAdjC9RGadBt8fltfPygGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDdjM2E5ZDUtNGJhZC0z
YWQ5LTk3MDktYjdmYjc1NTVjOTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFzmAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADXJDUXTviTnAu3MWwDNi/9YE/oppjIdCIskfz2qPLWJap4Tqel2ghHi
Rq2JmbzXqNaC+xq71HmFJ19n9ELo7H2RbvGlgOB1FeLJrAWmw45IIPiC0Otqbc+d
mb/0M3N6Biw3HcfN2qvVUbVUF1AFu1LHHDGZIkYP/JuTk7/8qn8g2bv7W1Z4nLto
wGsCEEOGGHWtcJGo8EsUgfutxUrfvdN2tz6kw+rRo+V5W1p64B3ZeK3voLdwy7AK
2bnCeMrC0B3ITIAo77BzxmILxtp9Z4fJn51g+ifjdThzT4RF5OD/YrXyiBa+2Nmg
G67HyvIvpFJAdp9WffYaR0dpSRZMHWY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:23:27 2025 by rpki-client