Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/191a2206-7e30-3ad8-872b-b70a1a50fea1.roa
File: 191a2206-7e30-3ad8-872b-b70a1a50fea1.roa (raw, json)
Hash identifier: ThHNQD79eAQFSrJNswJ7ucIDyUo2vLb6H2MGgLt9xAw=
Subject key identifier: CC:90:88:0F:F4:0F:94:65:C0:C8:51:0A:54:D3:6A:9B:A2:0C:33:CC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848DBD674D4E3D04F77C9A9BD40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/191a2206-7e30-3ad8-872b-b70a1a50fea1.roa
Signing time: Wed 12 Feb 2025 14:00:53 +0000
ROA not before: Wed 12 Feb 2025 14:00:53 +0000
ROA not after: Tue 13 May 2025 13:00:53 +0000
asID: 16625
IP address blocks: 23.219.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:db:d6:74:d4:e3:d0:4f:77:c9:a9:bd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 12 14:00:53 2025 GMT
Not After : May 13 13:00:53 2025 GMT
Subject: CN=040851ad-ad5e-40ef-8f23-bc6053512202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8b:ee:00:6e:97:e1:cb:92:a2:f2:64:6e:34:
73:83:b9:6c:cf:4f:8e:29:a8:1b:95:5d:72:ff:da:
ae:53:fc:5e:bd:3f:aa:e1:66:6a:b3:86:c2:31:66:
ab:2b:b8:19:b2:94:a3:79:40:60:0d:cc:fe:79:36:
1e:89:ac:91:8c:4a:15:48:7b:5c:f6:8c:17:1c:81:
27:3c:0e:56:e3:9c:fe:56:a2:53:83:d0:ea:e3:39:
02:dc:72:4d:13:5a:3a:bc:f6:55:f9:9d:49:7c:a4:
2f:bb:5b:40:57:ba:14:31:7d:e3:34:bd:c8:64:6f:
c7:d0:92:d2:2c:34:4e:15:bd:1e:e4:87:c1:fd:46:
0b:fe:eb:72:7f:51:f0:7d:f4:9d:eb:bb:63:f3:a8:
23:10:eb:f1:d0:6a:15:fc:25:54:9a:01:3d:94:60:
48:cd:b0:fe:43:ae:b1:6f:33:b4:13:84:9f:32:19:
26:25:6b:b6:01:5c:4f:2e:f0:03:5e:40:7f:8d:22:
f2:96:4a:81:94:1d:a1:42:3e:1c:be:38:2c:1d:bd:
0a:b6:9c:9a:ea:d1:9e:f1:d2:a8:f2:f5:a8:39:b3:
0b:db:a8:33:ff:bf:da:eb:0c:ea:71:d7:4e:3b:48:
3b:c7:15:41:94:00:67:b9:41:06:b5:6a:24:61:bb:
90:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:90:88:0F:F4:0F:94:65:C0:C8:51:0A:54:D3:6A:9B:A2:0C:33:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/191a2206-7e30-3ad8-872b-b70a1a50fea1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.219.140.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:07:71:ed:eb:67:2d:1b:d6:77:29:5d:3e:85:e0:67:1e:b8:
ed:bb:a6:9a:e8:b5:40:2e:08:e9:f2:79:23:3a:fd:cc:4c:d5:
91:ab:90:b6:b2:7f:07:85:45:0e:46:3f:9b:de:9a:2a:74:aa:
19:eb:5c:74:15:c8:3d:c5:f5:b3:ae:fb:87:f1:72:43:f8:23:
53:af:8b:ef:93:58:0f:b2:f1:37:13:27:1b:4d:a9:30:7a:4c:
ce:69:21:77:b7:66:67:0c:9c:1b:24:74:77:71:df:94:ca:13:
b8:0f:7f:77:1d:5d:e1:54:23:ba:41:4b:9d:87:9c:69:1a:c2:
57:a0:79:9c:f5:56:91:cf:d9:1f:31:2c:10:87:28:ba:08:b2:
0c:89:9b:e3:86:ed:bc:c2:56:67:eb:23:21:3b:90:56:da:35:
d0:31:3a:30:ff:e8:3f:64:3b:31:cc:61:34:ed:8b:e6:83:10:
a6:66:d0:31:92:b5:ee:b7:6d:3b:05:72:2c:bd:39:69:e0:f3:
21:c2:9c:78:46:4a:80:27:6f:c7:bf:31:ff:bf:4e:a8:db:f3:
47:e4:79:33:ef:d6:76:b8:bc:87:47:c5:ed:19:6a:a7:18:3f:
89:86:ca:dd:f9:d4:a9:a3:7d:94:63:b0:01:fe:19:16:55:88:
44:8e:89:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjb1nTU49BPd8mpvUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIxMjE0MDA1M1oXDTI1MDUxMzEzMDA1M1owLzEtMCsGA1UEAxMk
MDQwODUxYWQtYWQ1ZS00MGVmLThmMjMtYmM2MDUzNTEyMjAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoovuAG6X4cuSovJkbjRzg7lsz0+OKagblV1y
/9quU/xevT+q4WZqs4bCMWarK7gZspSjeUBgDcz+eTYeiayRjEoVSHtc9owXHIEn
PA5W45z+VqJTg9Dq4zkC3HJNE1o6vPZV+Z1JfKQvu1tAV7oUMX3jNL3IZG/H0JLS
LDROFb0e5IfB/UYL/utyf1HwffSd67tj86gjEOvx0GoV/CVUmgE9lGBIzbD+Q66x
bzO0E4SfMhkmJWu2AVxPLvADXkB/jSLylkqBlB2hQj4cvjgsHb0Ktpya6tGe8dKo
8vWoObML26gz/7/a6wzqcddOO0g7xxVBlABnuUEGtWokYbuQiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMyQiA/0D5RlwMhRClTTapuiDDPMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTkxYTIyMDYtN2UzMC0z
YWQ4LTg3MmItYjcwYTFhNTBmZWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9uMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHsHce3rZy0b1ncpXT6F4GceuO27pprotUAuCOnyeSM6/cxM1ZGrkLay
fweFRQ5GP5vemip0qhnrXHQVyD3F9bOu+4fxckP4I1Ovi++TWA+y8TcTJxtNqTB6
TM5pIXe3ZmcMnBskdHdx35TKE7gPf3cdXeFUI7pBS52HnGkawlegeZz1VpHP2R8x
LBCHKLoIsgyJm+OG7bzCVmfrIyE7kFbaNdAxOjD/6D9kOzHMYTTti+aDEKZm0DGS
te63bTsFciy9OWng8yHCnHhGSoAnb8e/Mf+/Tqjb80fkeTPv1na4vIdHxe0ZaqcY
P4mGyt351KmjfZRjsAH+GRZViESOifY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:43 2025 by rpki-client