Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/245759b4-b8c7-3e7d-95c3-f43ca2f939aa.roa
File: 245759b4-b8c7-3e7d-95c3-f43ca2f939aa.roa (raw, json)
Hash identifier: wBYcUvy1Thdsygpva1DmiorCnDhUg3+7HHeHyctV6sU=
Subject key identifier: A9:B4:9B:60:C2:9D:A9:C7:84:60:7B:CD:C4:A1:35:C4:0F:AA:B9:08
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848BBBB939CF2210B002718F3C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/245759b4-b8c7-3e7d-95c3-f43ca2f939aa.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 35994
IP address blocks: 23.210.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:93:9c:f2:21:0b:00:27:18:f3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=9b81b63b-84a8-46f2-990a-d5ec8e3f3877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:57:3b:01:41:14:ad:72:f4:7e:6d:c2:55:73:
bf:f3:91:6e:99:6a:fd:c4:17:c7:12:fc:1b:73:8c:
dd:b1:d5:39:3f:a7:09:48:dd:a6:42:6a:dc:b5:18:
53:99:d6:50:46:13:b9:10:07:34:f9:21:8d:1b:ca:
64:1b:18:dd:49:93:52:fd:1e:d1:f0:2c:61:8c:0b:
3d:f6:d1:f9:fa:33:f8:0f:0d:6f:b5:3a:0c:f7:0e:
a6:fa:09:d4:e7:dd:9b:09:c0:d7:a3:5e:e2:ad:6c:
95:ca:de:b4:93:bd:19:c4:2a:5b:4e:04:54:a0:ce:
6e:92:1b:dd:4d:6c:fc:8b:04:1c:91:be:f5:c3:2e:
6e:34:c6:1b:46:5d:83:99:22:38:c0:aa:b4:12:63:
60:de:00:96:d5:a2:6e:ee:af:6c:cc:a3:bb:b3:95:
b8:63:b4:04:9a:6b:af:ea:77:cc:59:fe:c4:40:70:
be:6d:b5:96:2d:e4:a1:6f:66:c5:13:55:41:f6:c4:
1e:b9:ad:0e:d3:d8:fa:71:f7:fe:b6:90:32:5f:16:
6f:42:13:52:b8:1a:62:87:40:00:55:5d:56:64:a8:
c3:6f:96:a3:87:44:0e:f0:00:9b:64:fa:c2:9d:d8:
a8:fe:43:02:f2:cf:ef:f2:a7:b7:1d:90:48:88:01:
65:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B4:9B:60:C2:9D:A9:C7:84:60:7B:CD:C4:A1:35:C4:0F:AA:B9:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/245759b4-b8c7-3e7d-95c3-f43ca2f939aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.210.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:88:92:70:4b:e6:b8:d1:65:28:df:e0:58:df:23:c2:6e:04:
68:34:b9:b6:08:fb:9d:1d:c6:49:bf:c0:51:02:7b:bc:70:c2:
5d:84:c0:1e:50:a4:18:27:e6:14:e4:3a:8c:ca:0c:13:c3:08:
76:49:0c:51:1e:f9:af:05:60:23:8b:0b:c7:01:28:bf:92:8c:
62:47:18:41:f4:ae:8c:63:bc:ee:da:9f:e4:82:c0:54:09:90:
95:05:95:1b:ba:d1:b8:1e:6f:ad:10:47:e1:22:fc:da:59:ad:
d3:45:41:23:89:5b:76:dc:9b:e8:f1:a5:2e:da:f8:42:6c:65:
f3:8d:2c:a7:3b:24:94:80:ac:40:f0:dd:cb:3b:c2:88:0f:43:
64:fe:28:56:ae:a9:7a:71:c8:bc:65:41:c3:9c:cb:5c:28:3d:
2d:ba:32:ab:3c:0b:72:52:51:6a:1c:39:fc:3f:c0:23:f9:1d:
cf:7b:8e:3c:6e:52:57:10:97:01:8b:b8:49:9c:a5:bc:92:6b:
a5:7a:1f:eb:98:de:81:99:51:45:a2:9e:0f:a8:5f:0a:60:de:
1f:0d:65:32:7a:55:b8:c0:c4:6a:82:ed:f8:b1:01:d2:0b:62:
c7:d3:e1:67:af:40:6b:35:75:ae:18:06:a4:98:4c:cf:27:6b:
d1:ea:99:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u5Oc8iELACcY88AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk
OWI4MWI2M2ItODRhOC00NmYyLTk5MGEtZDVlYzhlM2YzODc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFc7AUEUrXL0fm3CVXO/85FumWr9xBfHEvwb
c4zdsdU5P6cJSN2mQmrctRhTmdZQRhO5EAc0+SGNG8pkGxjdSZNS/R7R8CxhjAs9
9tH5+jP4Dw1vtToM9w6m+gnU592bCcDXo17irWyVyt60k70ZxCpbTgRUoM5ukhvd
TWz8iwQckb71wy5uNMYbRl2DmSI4wKq0EmNg3gCW1aJu7q9szKO7s5W4Y7QEmmuv
6nfMWf7EQHC+bbWWLeShb2bFE1VB9sQeua0O09j6cff+tpAyXxZvQhNSuBpih0AA
VV1WZKjDb5ajh0QO8ACbZPrCndio/kMC8s/v8qe3HZBIiAFlXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKm0m2DCnanHhGB7zcShNcQPqrkIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjQ1NzU5YjQtYjhjNy0z
ZTdkLTk1YzMtZjQzY2EyZjkzOWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9IiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEGIknBL5rjRZSjf4FjfI8JuBGg0ubYI+50dxkm/wFECe7xwwl2EwB5Q
pBgn5hTkOozKDBPDCHZJDFEe+a8FYCOLC8cBKL+SjGJHGEH0roxjvO7an+SCwFQJ
kJUFlRu60bgeb60QR+Ei/NpZrdNFQSOJW3bcm+jxpS7a+EJsZfONLKc7JJSArEDw
3cs7wogPQ2T+KFauqXpxyLxlQcOcy1woPS26Mqs8C3JSUWocOfw/wCP5Hc97jjxu
UlcQlwGLuEmcpbySa6V6H+uY3oGZUUWing+oXwpg3h8NZTJ6VbjAxGqC7fixAdIL
YsfT4WevQGs1da4YBqSYTM8na9HqmdM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:27:49 2025 by rpki-client