Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3b16e226-4cef-3f17-aa6d-2a0bf40a3ac8.roa
File: 3b16e226-4cef-3f17-aa6d-2a0bf40a3ac8.roa (raw, json)
Hash identifier: lrc4Jx/kuhSbOxxLS0YMjGJTJA/yQ8HeiVBJ3mnjEEU=
Subject key identifier: 40:55:DD:81:AD:54:02:26:8D:13:A3:D9:42:4A:A0:AD:4B:E4:80:0C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584890760D1EB71E890F4FDECE80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3b16e226-4cef-3f17-aa6d-2a0bf40a3ac8.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 16625
IP address blocks: 23.195.160.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:76:0d:1e:b7:1e:89:0f:4f:de:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=cff1f96d-0e69-4d29-a4e8-c5bdb2f7a954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1d:24:c2:5b:c4:4a:03:06:d0:67:f8:c0:ae:
b9:fe:49:5e:b5:26:b0:26:17:e4:0a:f8:a6:e9:70:
af:63:1a:8a:3b:a7:7b:64:70:ff:b3:61:08:54:2e:
79:ac:bf:b6:60:17:c9:57:ba:76:a5:97:17:c1:71:
97:04:57:f4:d6:c7:ed:fa:7a:18:a3:7e:df:32:8a:
0a:5e:23:9e:af:c2:52:c8:a4:1c:fa:3a:12:f9:99:
e9:fd:ff:14:ee:5b:ac:fe:ab:ce:b2:26:a0:d5:d7:
19:41:d6:ca:e8:70:0b:17:0d:50:02:ae:1e:77:df:
7a:48:32:ec:a7:9a:8f:63:a2:e5:49:49:71:49:c8:
ce:e3:bd:6f:3b:39:57:70:3d:52:c8:a6:dd:6d:c8:
2f:27:ce:90:4b:a0:f3:da:0f:4f:80:cc:66:5b:e1:
d5:30:69:76:c1:9b:e1:61:fb:e7:f9:68:31:d8:17:
b8:66:1e:19:72:91:62:3e:68:98:40:77:b3:2e:ae:
fe:80:0b:ef:1b:ce:72:30:4d:d3:02:f5:b2:42:78:
e5:b8:81:a1:f0:96:4a:a0:c9:2f:21:31:c1:1f:5a:
50:06:12:68:2a:cf:f3:d4:aa:d8:1c:84:ef:bc:73:
69:69:b5:0e:2a:db:e7:b3:a9:0f:1b:a4:28:8d:5f:
9c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:55:DD:81:AD:54:02:26:8D:13:A3:D9:42:4A:A0:AD:4B:E4:80:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3b16e226-4cef-3f17-aa6d-2a0bf40a3ac8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.195.160.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:21:6c:ee:e4:09:67:d7:98:80:f8:b3:18:72:80:e2:03:3b:
78:d0:37:64:9c:48:b0:e9:a3:16:2b:76:d4:33:cc:84:b4:f4:
32:d2:be:59:18:c2:6b:d9:2a:ac:2d:ba:6d:ed:0e:55:9a:65:
68:3d:6e:1c:3c:b0:20:1e:6d:df:ad:13:db:91:2b:19:a3:e7:
3e:b4:90:5c:1f:a7:e9:5c:93:da:02:3e:a7:9b:82:74:21:eb:
1e:24:ad:a8:1f:a6:68:35:3c:f4:ed:f2:6a:fc:c4:26:11:7e:
d7:43:1d:c0:e5:2d:71:c7:94:92:be:49:6b:0f:d3:80:cb:52:
09:a3:26:28:8c:ed:34:b6:3c:ae:35:9e:aa:28:94:ad:17:67:
68:d5:ba:5c:47:b0:75:c7:f0:12:e3:d3:5d:03:6b:98:ca:2e:
90:57:86:46:e5:a8:e7:47:d3:e9:32:fe:6e:72:9e:42:7f:4d:
1a:d8:c3:5d:6b:5a:85:d3:42:23:52:cb:99:d2:75:3e:ab:cc:
9d:75:b1:11:5e:db:de:fd:66:b1:9e:68:e1:2d:fb:22:d2:91:
2c:8e:d8:d5:b5:09:77:d3:bc:6b:5f:12:7d:f5:4a:73:21:9b:
3a:f5:75:b5:85:35:2a:ff:1a:f9:8e:fd:2e:1e:27:9a:10:1c:
ef:b7:b7:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdg0etx6JD0/ezoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk
Y2ZmMWY5NmQtMGU2OS00ZDI5LWE0ZTgtYzViZGIyZjdhOTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx0kwlvESgMG0Gf4wK65/kletSawJhfkCvim
6XCvYxqKO6d7ZHD/s2EIVC55rL+2YBfJV7p2pZcXwXGXBFf01sft+noYo37fMooK
XiOer8JSyKQc+joS+Znp/f8U7lus/qvOsiag1dcZQdbK6HALFw1QAq4ed996SDLs
p5qPY6LlSUlxScjO471vOzlXcD1SyKbdbcgvJ86QS6Dz2g9PgMxmW+HVMGl2wZvh
Yfvn+Wgx2Be4Zh4ZcpFiPmiYQHezLq7+gAvvG85yME3TAvWyQnjluIGh8JZKoMkv
ITHBH1pQBhJoKs/z1KrYHITvvHNpabUOKtvns6kPG6QojV+cOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEBV3YGtVAImjROj2UJKoK1L5IAMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2IxNmUyMjYtNGNlZi0z
ZjE3LWFhNmQtMmEwYmY0MGEzYWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF8OgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACMhbO7kCWfXmID4sxhygOIDO3jQN2ScSLDpoxYrdtQzzIS09DLSvlkY
wmvZKqwtum3tDlWaZWg9bhw8sCAebd+tE9uRKxmj5z60kFwfp+lck9oCPqebgnQh
6x4kragfpmg1PPTt8mr8xCYRftdDHcDlLXHHlJK+SWsP04DLUgmjJiiM7TS2PK41
nqoolK0XZ2jVulxHsHXH8BLj010Da5jKLpBXhkblqOdH0+ky/m5ynkJ/TRrYw11r
WoXTQiNSy5nSdT6rzJ11sRFe2979ZrGeaOEt+yLSkSyO2NW1CXfTvGtfEn31SnMh
mzr1dbWFNSr/GvmO/S4eJ5oQHO+3t3g=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:16 2025 by rpki-client