Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35acf899-2ec0-3d47-b0b2-5384aa4c04d3.roa
File: 35acf899-2ec0-3d47-b0b2-5384aa4c04d3.roa (raw, json)
Hash identifier: IcLSSO3bMuh9ADu8goK/4PElTXFjtwnT0T/3WIg75tg=
Subject key identifier: E7:22:B6:B3:85:30:1F:2E:A8:66:77:A4:8B:B3:9E:60:DF:61:9D:06
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848D211466CFD8D430FFF4E5D82
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35acf899-2ec0-3d47-b0b2-5384aa4c04d3.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 16625
IP address blocks: 23.35.136.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:46:6c:fd:8d:43:0f:ff:4e:5d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=db7a7165-db16-459c-9829-23fceb64b1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7f:d7:79:e7:14:b8:f9:bc:1e:a5:17:19:fe:
d9:ec:4e:6b:1c:1b:56:cf:31:96:20:fa:e2:16:4a:
68:5c:39:0b:3a:eb:0d:1c:ed:ec:db:9b:9f:9d:43:
23:64:3e:f7:4c:17:ef:75:6e:e7:4d:d2:dd:8b:57:
82:c2:4d:08:d5:08:1f:f6:cf:20:c5:a1:0c:6b:68:
4d:f2:86:0d:60:f3:ea:dd:db:27:12:26:5a:88:2c:
e4:07:1e:bd:6b:0f:62:9d:c0:3b:42:1e:9b:76:46:
cb:39:13:4b:ff:54:af:87:a3:ec:66:05:73:cb:d2:
37:80:50:1f:d1:84:e9:db:d5:39:1d:db:ec:98:df:
af:4a:ef:d1:31:e4:9d:bc:e6:76:cc:c6:c3:62:e9:
b7:7f:4c:23:d3:00:84:e3:13:a7:08:ba:bc:e7:7b:
fc:fe:41:49:94:81:81:e3:67:c8:70:3b:f5:a4:1d:
88:89:3f:80:a5:26:ea:09:05:50:6a:97:f8:40:78:
6b:94:e5:c4:1d:a2:c8:48:9d:47:ac:1d:48:da:69:
38:e9:3a:9c:ac:52:e0:08:f5:2e:05:5a:b7:1c:6a:
b0:46:01:ef:04:2b:b2:20:c7:b2:bd:65:a0:41:25:
8b:8b:5d:b7:b5:f6:0f:cd:1d:78:6b:fd:61:ee:44:
11:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:22:B6:B3:85:30:1F:2E:A8:66:77:A4:8B:B3:9E:60:DF:61:9D:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35acf899-2ec0-3d47-b0b2-5384aa4c04d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.35.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:1e:16:64:30:55:bd:a9:46:b3:72:db:b3:58:b0:d1:26:ff:
fb:c7:e9:7d:81:09:6c:bd:34:0b:16:89:11:1f:ed:05:66:b8:
5b:a8:3e:7f:d5:ad:40:20:b2:fb:f8:28:e5:10:a5:f0:8b:ce:
04:eb:ad:61:db:85:99:cd:01:2e:3f:ee:9c:fe:4a:13:68:9f:
9c:f7:b4:f4:74:06:bc:3f:b8:5b:2f:dd:8b:fc:f6:b4:06:d0:
d8:e8:8f:17:16:21:ee:aa:38:e4:4c:d4:44:80:e6:22:6c:0e:
ac:ba:35:d3:a9:3f:5f:06:e2:0f:2e:30:6d:b6:46:06:ee:57:
7b:aa:06:3c:90:8c:dc:f0:a7:8c:e9:08:32:21:92:8b:8f:bc:
4e:5a:60:a4:21:c2:fc:17:61:29:3f:8c:4e:62:de:3b:f6:4f:
10:2b:e2:53:e2:3c:fa:19:d3:38:2c:60:35:3a:b2:ca:48:e5:
30:0b:7c:2b:cc:36:a3:7d:eb:70:aa:61:9a:d3:a9:af:90:f2:
26:c0:d3:7d:15:71:e5:80:0e:16:c5:29:19:81:13:c0:c7:bc:
18:3b:22:61:99:90:44:60:89:9f:10:1d:76:62:6a:36:c4:ac:
aa:c5:76:b1:d0:22:a7:c1:45:09:6a:de:6f:44:be:2b:a0:a7:
1d:30:b7:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEUZs/Y1DD/9OXYIwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk
ZGI3YTcxNjUtZGIxNi00NTljLTk4MjktMjNmY2ViNjRiMWY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH/XeecUuPm8HqUXGf7Z7E5rHBtWzzGWIPri
FkpoXDkLOusNHO3s25ufnUMjZD73TBfvdW7nTdLdi1eCwk0I1Qgf9s8gxaEMa2hN
8oYNYPPq3dsnEiZaiCzkBx69aw9incA7Qh6bdkbLORNL/1Svh6PsZgVzy9I3gFAf
0YTp29U5HdvsmN+vSu/RMeSdvOZ2zMbDYum3f0wj0wCE4xOnCLq853v8/kFJlIGB
42fIcDv1pB2IiT+ApSbqCQVQapf4QHhrlOXEHaLISJ1HrB1I2mk46TqcrFLgCPUu
BVq3HGqwRgHvBCuyIMeyvWWgQSWLi123tfYPzR14a/1h7kQRcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOcitrOFMB8uqGZ3pIuznmDfYZ0GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzVhY2Y4OTktMmVjMC0z
ZDQ3LWIwYjItNTM4NGFhNGMwNGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFyOIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI0eFmQwVb2pRrNy27NYsNEm//vH6X2BCWy9NAsWiREf7QVmuFuoPn/V
rUAgsvv4KOUQpfCLzgTrrWHbhZnNAS4/7pz+ShNon5z3tPR0Brw/uFsv3Yv89rQG
0NjojxcWIe6qOORM1ESA5iJsDqy6NdOpP18G4g8uMG22RgbuV3uqBjyQjNzwp4zp
CDIhkouPvE5aYKQhwvwXYSk/jE5i3jv2TxAr4lPiPPoZ0zgsYDU6sspI5TALfCvM
NqN963CqYZrTqa+Q8ibA030VceWADhbFKRmBE8DHvBg7ImGZkERgiZ8QHXZiajbE
rKrFdrHQIqfBRQlq3m9Eviugpx0wt2Y=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:02:44 2025 by rpki-client