Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/353dd376-a983-3029-a9a9-3c4d4849db8a.roa
File: 353dd376-a983-3029-a9a9-3c4d4849db8a.roa (raw, json)
Hash identifier: NK7cb39j7WBfqCf2rboOoZtuRsvHmhJnMaaDQiCKgNQ=
Subject key identifier: 2D:5A:AF:16:79:62:27:FA:1D:81:F0:04:16:3B:12:B3:85:82:90:10
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A209444774AA6D41366E4D8
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/353dd376-a983-3029-a9a9-3c4d4849db8a.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.39.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:94:44:77:4a:a6:d4:13:66:e4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=91efc765-b1ed-4c4f-a304-1030643f7807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:71:9e:33:45:f7:33:04:01:b5:75:f4:61:e1:
08:ea:66:b4:02:ba:fe:30:e0:c3:e4:e1:04:d9:24:
fa:e0:9a:1f:c6:ad:12:e8:85:8d:43:9f:97:2c:6b:
83:0c:74:60:51:75:a1:b6:5f:92:0c:cb:8b:17:06:
73:45:f8:1c:f3:f9:ad:b8:97:2f:26:24:ad:5d:3e:
af:50:aa:cd:13:f1:fd:37:58:d5:c0:77:f7:24:9f:
48:80:3a:fe:e5:f9:23:af:54:a0:0e:b0:d4:9a:f2:
f5:6e:73:50:99:68:a9:43:b9:73:f5:cf:b6:9f:52:
5d:56:15:38:01:4b:64:67:ae:d6:36:dd:42:55:8d:
13:f3:58:3e:74:2c:e2:58:c5:90:12:24:64:8a:9e:
79:3e:7b:70:5c:2d:27:ee:ea:03:74:30:8a:6e:4d:
d2:94:c0:2b:3e:31:38:f8:63:04:d1:61:9e:de:5a:
2e:c1:cb:e7:6f:05:3d:b9:5d:05:57:49:29:1d:d8:
c9:1e:99:dd:d5:85:47:5b:ed:02:77:89:4c:7e:95:
3b:b2:31:ec:d9:d9:5a:54:93:a8:33:77:68:25:43:
25:c7:c4:c2:96:b3:56:b3:d1:81:20:81:c2:a8:d9:
fc:27:66:26:e9:50:2f:7d:42:80:0a:aa:86:b6:b6:
a9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5A:AF:16:79:62:27:FA:1D:81:F0:04:16:3B:12:B3:85:82:90:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/353dd376-a983-3029-a9a9-3c4d4849db8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.39.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:cb:72:8f:2b:80:5b:fe:9f:93:e1:74:ab:32:73:65:58:0d:
5e:6c:08:f9:86:c9:11:e6:4d:a6:9f:b1:48:9a:c7:f3:29:55:
ff:43:98:d1:eb:98:6f:e7:05:75:c7:83:1f:ba:47:bd:b4:71:
2f:91:97:ed:66:83:6e:b0:08:3a:47:f9:a1:e5:f3:98:ca:d9:
2e:b0:7a:6d:94:e0:be:2f:34:a9:7c:c8:3c:24:32:56:a1:50:
96:cd:99:ca:fd:ce:74:a5:7f:4f:b5:68:dc:b9:d9:6e:27:89:
a9:63:d3:c0:07:f3:4f:4a:6a:bb:5d:7e:5a:b0:61:f9:ee:87:
80:b5:0e:6c:78:37:b1:66:fe:3a:00:55:00:0d:df:2a:86:7e:
bc:00:2c:36:90:90:03:68:72:84:72:2f:23:29:90:ad:75:33:
82:9a:2c:17:2e:46:f0:8f:67:03:b3:01:3b:80:1a:04:fa:4c:
d9:d0:97:28:d0:07:aa:2b:af:52:23:0f:df:b5:ce:1d:44:b1:
a9:b5:27:82:e8:89:b1:e6:7f:4b:4e:80:03:27:22:b4:da:35:
0c:b1:52:e3:f9:48:f0:6e:35:7b:ef:63:c0:8c:68:f2:4a:bf:
a9:dd:de:09:dc:cc:d4:7e:bf:fd:59:9e:57:c0:a3:f6:bc:6a:
63:f1:7b:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6IJREd0qm1BNm5NgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk
OTFlZmM3NjUtYjFlZC00YzRmLWEzMDQtMTAzMDY0M2Y3ODA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3GeM0X3MwQBtXX0YeEI6ma0Arr+MODD5OEE
2ST64Jofxq0S6IWNQ5+XLGuDDHRgUXWhtl+SDMuLFwZzRfgc8/mtuJcvJiStXT6v
UKrNE/H9N1jVwHf3JJ9IgDr+5fkjr1SgDrDUmvL1bnNQmWipQ7lz9c+2n1JdVhU4
AUtkZ67WNt1CVY0T81g+dCziWMWQEiRkip55PntwXC0n7uoDdDCKbk3SlMArPjE4
+GME0WGe3louwcvnbwU9uV0FV0kpHdjJHpnd1YVHW+0Cd4lMfpU7sjHs2dlaVJOo
M3doJUMlx8TClrNWs9GBIIHCqNn8J2Ym6VAvfUKACqqGtrapOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC1arxZ5Yif6HYHwBBY7ErOFgpAQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzUzZGQzNzYtYTk4My0z
MDI5LWE5YTktM2M0ZDQ4NDlkYjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyecMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHnLco8rgFv+n5PhdKsyc2VYDV5sCPmGyRHmTaafsUiax/MpVf9DmNHr
mG/nBXXHgx+6R720cS+Rl+1mg26wCDpH+aHl85jK2S6wem2U4L4vNKl8yDwkMlah
UJbNmcr9znSlf0+1aNy52W4nialj08AH809KartdflqwYfnuh4C1Dmx4N7Fm/joA
VQAN3yqGfrwALDaQkANocoRyLyMpkK11M4KaLBcuRvCPZwOzATuAGgT6TNnQlyjQ
B6orr1IjD9+1zh1Esam1J4LoibHmf0tOgAMnIrTaNQyxUuP5SPBuNXvvY8CMaPJK
v6nd3gnczNR+v/1ZnlfAo/a8amPxeyQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:27:49 2025 by rpki-client