Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ccdc472-a688-30e8-8f8b-a5cf08be2a5f.roa
File: 0ccdc472-a688-30e8-8f8b-a5cf08be2a5f.roa (raw, json)
Hash identifier: aZhnYrXGIETxsnTc10+lhfsz3WoS5HdStAvnA0wY8hU=
Subject key identifier: 68:5E:94:A8:28:BC:30:D4:69:21:21:60:5F:A7:BB:D9:E5:8B:1F:02
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849244E8FCA195A82B804241E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ccdc472-a688-30e8-8f8b-a5cf08be2a5f.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.12.160.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:8f:ca:19:5a:82:b8:04:24:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=baa7cb4e-f3ee-45bd-9cec-050e1f334e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:40:f4:e4:8f:f3:e6:4f:9d:3d:f2:9d:53:aa:
4f:f7:48:ca:04:64:09:0e:ea:c6:d9:7f:fb:69:80:
f4:ed:66:da:75:56:3f:68:e5:d9:c1:53:02:f4:1f:
01:11:3f:d4:7c:8f:57:7f:52:32:38:b9:1c:c1:cc:
a4:2e:40:d5:72:bc:a5:79:39:c9:16:94:32:d5:a8:
c1:c2:5f:38:60:dd:23:47:16:8e:73:07:48:7c:24:
df:83:43:82:c9:0f:f6:8a:16:1c:bf:62:5d:57:55:
52:57:4a:8c:1c:3e:c9:05:10:10:73:47:6a:86:dd:
c4:a9:d6:c2:64:66:39:a0:d1:3f:92:d2:73:56:68:
50:a3:eb:bc:42:8c:23:93:45:70:47:66:44:44:a8:
64:6d:75:7d:f3:dd:4a:d9:4b:4c:5e:16:5f:3b:d6:
fd:5d:34:ac:32:ac:1a:68:15:14:d1:33:b4:01:44:
55:be:5c:22:87:80:d5:2a:b3:26:a7:70:64:f0:c6:
46:88:ed:71:d4:75:2d:98:00:ab:f4:f8:2e:8a:45:
23:dd:78:5c:47:1d:5e:8d:c8:06:9b:e5:ce:27:8d:
13:80:9b:c2:f1:ad:f8:75:1e:57:df:c7:e0:a6:ec:
9a:85:5b:6e:16:e0:21:85:b7:70:a0:2f:c3:0c:28:
98:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5E:94:A8:28:BC:30:D4:69:21:21:60:5F:A7:BB:D9:E5:8B:1F:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ccdc472-a688-30e8-8f8b-a5cf08be2a5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.12.160.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:71:f1:80:55:08:c3:7f:19:03:16:79:75:ed:27:f5:b5:ae:
9d:19:a7:a8:86:ac:ff:c3:7e:39:df:7e:42:71:01:cb:af:78:
26:45:8e:98:89:4e:21:43:9c:a0:a9:d7:4e:40:79:fd:c3:9e:
9e:13:ec:2d:40:d5:82:1c:b4:9f:bb:9f:af:48:83:bc:cc:fe:
f4:4d:ac:d9:d2:05:b4:96:ce:10:5b:0f:fc:04:99:af:41:81:
4a:6d:21:a3:28:2d:0a:7e:5d:a2:d1:a0:18:5f:48:35:75:36:
d1:4c:d7:c2:96:e7:89:d5:b1:59:3e:4b:0e:98:3e:fb:b1:cf:
5f:b3:6b:58:b5:4d:53:8f:8f:f8:41:77:81:35:3d:57:da:bc:
d2:fc:ce:a6:0c:86:23:67:20:bb:0b:4e:8d:af:2c:cf:a7:a2:
9b:92:87:53:03:e6:c7:8d:82:6f:27:03:dd:39:52:69:9d:92:
41:85:7f:11:82:a8:64:54:2d:bd:8c:f8:7f:cc:d5:d3:19:c4:
6d:e0:43:9d:b6:6f:24:d2:40:af:a5:92:80:76:db:ac:1a:c3:
0b:fd:56:ac:d0:90:56:62:63:b7:e6:f0:48:20:5c:47:8f:01:
bc:89:77:ce:b3:a6:a2:39:bc:a3:a8:1b:f2:dc:f6:69:38:df:
a7:32:23:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTo/KGVqCuAQkHgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk
YmFhN2NiNGUtZjNlZS00NWJkLTljZWMtMDUwZTFmMzM0ZTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUD05I/z5k+dPfKdU6pP90jKBGQJDurG2X/7
aYD07WbadVY/aOXZwVMC9B8BET/UfI9Xf1IyOLkcwcykLkDVcryleTnJFpQy1ajB
wl84YN0jRxaOcwdIfCTfg0OCyQ/2ihYcv2JdV1VSV0qMHD7JBRAQc0dqht3EqdbC
ZGY5oNE/ktJzVmhQo+u8Qowjk0VwR2ZERKhkbXV9891K2UtMXhZfO9b9XTSsMqwa
aBUU0TO0AURVvlwih4DVKrMmp3Bk8MZGiO1x1HUtmACr9PguikUj3XhcRx1ejcgG
m+XOJ40TgJvC8a34dR5X38fgpuyahVtuFuAhhbdwoC/DDCiY0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGhelKgovDDUaSEhYF+nu9nlix8CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGNjZGM0NzItYTY4OC0z
MGU4LThmOGItYTVjZjA4YmUyYTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFwygMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACtx8YBVCMN/GQMWeXXtJ/W1rp0Zp6iGrP/DfjnffkJxAcuveCZFjpiJ
TiFDnKCp105Aef3Dnp4T7C1A1YIctJ+7n69Ig7zM/vRNrNnSBbSWzhBbD/wEma9B
gUptIaMoLQp+XaLRoBhfSDV1NtFM18KW54nVsVk+Sw6YPvuxz1+za1i1TVOPj/hB
d4E1PVfavNL8zqYMhiNnILsLTo2vLM+nopuSh1MD5seNgm8nA905UmmdkkGFfxGC
qGRULb2M+H/M1dMZxG3gQ522byTSQK+lkoB226wawwv9VqzQkFZiY7fm8EggXEeP
AbyJd86zpqI5vKOoG/Lc9mk436cyIxs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:10 2025 by rpki-client