Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1846216e-e6c6-33db-92dd-d823b2c4c9f7.roa
File: 1846216e-e6c6-33db-92dd-d823b2c4c9f7.roa (raw, json)
Hash identifier: NyqMFyB2CxizilqfbKrAtISJ6v9QXzOj0luKEh31MfA=
Subject key identifier: 0D:1E:08:A2:AC:D7:A4:05:95:02:F0:B8:F0:3E:E6:06:7C:19:FE:72
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487CEB73AA3DAA4E4646B0C1C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1846216e-e6c6-33db-92dd-d823b2c4c9f7.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.43.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:73:aa:3d:aa:4e:46:46:b0:c1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=2ff81e75-291e-4f38-b803-2555720114f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f6:f1:a0:5e:4d:02:4e:b8:8e:9a:cb:f0:27:
ea:7d:30:ad:81:40:2c:45:30:28:25:51:d1:26:87:
a8:ce:65:13:7d:88:93:76:02:14:ea:12:a8:b4:cd:
4e:00:0d:0d:24:9e:02:5f:b3:b2:9d:f1:91:8e:86:
91:a7:a6:e2:cd:bb:9d:ab:b0:63:85:4a:d6:34:59:
43:80:e0:25:68:50:88:aa:53:3d:d5:af:bc:c4:3b:
c5:f3:3e:38:04:49:b4:18:0e:1d:3c:df:0b:4c:df:
f9:68:23:79:3c:08:6c:48:82:bb:da:ba:81:b2:d8:
8a:61:b4:fc:12:6e:1f:46:b1:d9:6c:e2:9c:77:d8:
af:f0:7b:3f:ab:b9:3e:ec:87:71:38:8b:d4:eb:95:
b9:64:57:9c:2d:ab:e5:70:f1:95:1d:ce:af:fe:b8:
ed:4a:98:01:85:87:e5:42:cd:b7:ca:36:59:2f:ca:
3d:d2:8b:5a:d8:4a:f4:7f:53:f3:a9:f0:11:22:fa:
ac:d9:b5:3c:6f:34:48:6b:e1:3d:46:d9:7d:1e:00:
fa:b6:70:2a:b9:18:eb:64:ee:80:a0:ba:bc:a1:f4:
e8:4e:4c:b7:ac:5d:6e:25:92:7a:6a:ee:22:20:b0:
e0:f2:da:35:04:54:4a:27:70:9d:df:e1:ee:3f:e4:
9e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1E:08:A2:AC:D7:A4:05:95:02:F0:B8:F0:3E:E6:06:7C:19:FE:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1846216e-e6c6-33db-92dd-d823b2c4c9f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.43.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:7c:5c:26:19:1a:ce:13:c1:c9:b2:0f:76:20:79:80:b9:53:
07:39:cb:b9:22:c2:9e:97:88:47:9c:9b:6d:db:cd:06:da:b3:
b0:86:13:84:9f:5f:38:76:b8:b5:95:03:3a:4a:fb:b1:82:2b:
6f:11:39:a5:c7:60:a8:fa:3f:38:a6:48:ad:87:7c:e7:60:fd:
01:f4:12:70:cd:fe:6d:b7:ba:dc:3b:86:0d:16:69:85:9e:c6:
26:e0:6f:b9:ce:52:1c:b8:31:24:7e:b7:40:67:44:68:ff:1e:
d1:e4:0a:e9:cf:41:7f:c5:32:8c:fa:cc:c4:f1:3e:9a:65:70:
ca:3c:4e:c7:c7:c7:d3:53:25:d4:eb:ac:65:34:e1:5d:e6:a4:
9d:1d:31:df:17:ab:74:bb:dc:30:14:69:44:12:72:e3:04:3c:
0c:8e:7d:c7:d7:8d:6f:d4:92:8f:45:6a:84:74:05:1a:59:9e:
0f:45:76:d3:3e:61:71:49:fc:a9:67:dd:75:50:13:8c:b2:dc:
f8:d0:f7:4f:3e:cd:c0:d3:94:7f:fd:91:c4:b2:19:a0:01:52:
b7:b7:4f:38:30:9a:88:01:f7:b2:5d:6d:da:6f:00:97:06:35:
d2:a1:f9:3a:0d:a0:c6:3d:7a:49:57:6e:d6:4a:85:c3:96:08:
44:f5:b6:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh863OqPapORkawwcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
MmZmODFlNzUtMjkxZS00ZjM4LWI4MDMtMjU1NTcyMDExNGYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvbxoF5NAk64jprL8CfqfTCtgUAsRTAoJVHR
JoeozmUTfYiTdgIU6hKotM1OAA0NJJ4CX7OynfGRjoaRp6bizbudq7BjhUrWNFlD
gOAlaFCIqlM91a+8xDvF8z44BEm0GA4dPN8LTN/5aCN5PAhsSIK72rqBstiKYbT8
Em4fRrHZbOKcd9iv8Hs/q7k+7IdxOIvU65W5ZFecLavlcPGVHc6v/rjtSpgBhYfl
Qs23yjZZL8o90ota2Er0f1PzqfARIvqs2bU8bzRIa+E9Rtl9HgD6tnAquRjrZO6A
oLq8ofToTky3rF1uJZJ6au4iILDg8to1BFRKJ3Cd3+HuP+SeCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA0eCKKs16QFlQLwuPA+5gZ8Gf5yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTg0NjIxNmUtZTZjNi0z
M2RiLTkyZGQtZDgyM2IyYzRjOWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFytoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGV8XCYZGs4TwcmyD3YgeYC5Uwc5y7kiwp6XiEecm23bzQbas7CGE4Sf
Xzh2uLWVAzpK+7GCK28ROaXHYKj6PzimSK2HfOdg/QH0EnDN/m23utw7hg0WaYWe
xibgb7nOUhy4MSR+t0BnRGj/HtHkCunPQX/FMoz6zMTxPpplcMo8TsfHx9NTJdTr
rGU04V3mpJ0dMd8Xq3S73DAUaUQScuMEPAyOfcfXjW/Uko9FaoR0BRpZng9FdtM+
YXFJ/Kln3XVQE4yy3PjQ908+zcDTlH/9kcSyGaABUre3TzgwmogB97JdbdpvAJcG
NdKh+ToNoMY9eklXbtZKhcOWCET1thc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:17 2025 by rpki-client