Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e3974e3-3a1d-3832-ab03-cd3c9d55bbee.roa
File: 3e3974e3-3a1d-3832-ab03-cd3c9d55bbee.roa (raw, json)
Hash identifier: Vp+6fXkftCy1XbLxjkntl9mxiby+h29A31EwCVDJaO8=
Subject key identifier: 4D:6C:7F:A7:24:42:BA:36:35:2B:47:DE:55:64:24:05:54:55:FB:4B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A209C6C1B4887D868421400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e3974e3-3a1d-3832-ab03-cd3c9d55bbee.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.39.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:9c:6c:1b:48:87:d8:68:42:14:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=901d30eb-23bf-41f9-b8d5-98b960115e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9f:be:85:ee:b3:ad:6a:8c:0b:3c:66:09:22:
c5:40:e9:18:32:cd:ce:c5:27:92:d7:5e:18:ab:87:
96:14:e1:13:8b:e7:9c:e7:38:25:aa:d1:d1:b2:25:
f3:88:70:83:28:5e:2a:a7:a0:e9:ad:23:49:c5:87:
e2:e3:56:ab:e4:d5:f6:ab:ae:e0:f5:46:0a:9c:d5:
ea:da:80:e9:2d:50:12:4c:63:97:54:b3:8c:a0:dc:
49:9f:b8:ad:c4:06:9e:ee:e1:29:b0:e1:77:cf:f2:
43:83:6e:6f:cc:07:28:d8:c6:41:c8:79:b3:9b:89:
3b:49:60:31:03:d8:39:f3:f6:4d:6c:91:f9:41:f9:
90:31:be:9f:4b:eb:dc:22:8b:e7:d2:bd:8c:c9:2f:
f2:dd:8a:f4:79:bb:d9:95:9b:64:df:e5:ea:f6:4f:
8c:e4:a5:03:14:81:79:4a:c7:fb:0c:e1:28:3d:4f:
e9:61:7e:c4:be:f4:ab:47:0f:bc:a9:e7:fa:2b:03:
10:1b:37:0c:7d:dd:a4:c0:d3:2a:57:46:5a:c0:03:
97:1a:cf:57:69:0c:6a:46:93:80:8a:f8:71:44:46:
8a:6c:38:c0:93:f5:7b:cd:b4:51:79:bb:a1:42:46:
5a:a7:0d:c9:e5:4f:30:07:e2:62:7e:8a:87:ae:31:
a5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6C:7F:A7:24:42:BA:36:35:2B:47:DE:55:64:24:05:54:55:FB:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e3974e3-3a1d-3832-ab03-cd3c9d55bbee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.39.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:7e:f9:d6:d7:b9:7f:9c:88:66:84:2b:87:04:7b:1c:a7:c9:
65:46:83:2f:05:94:42:5e:b0:c4:68:60:c2:e0:c7:9c:94:f8:
fc:20:f0:42:d4:56:19:a9:e5:f4:a3:a5:5a:66:59:98:d2:a2:
21:f6:b9:a0:d9:ea:48:b2:ca:a8:f2:b5:ca:40:7e:f3:00:ca:
ce:a0:13:26:5f:42:87:a9:6e:e0:c5:4f:69:aa:9d:cd:29:d0:
6a:df:03:4b:8a:e7:0e:4e:85:d5:08:83:3f:03:49:df:0a:6e:
5c:a8:cd:76:50:2c:43:1f:b5:2c:4e:bb:eb:c1:60:3e:7c:ac:
5a:08:ae:b2:08:a1:2b:c5:cd:be:85:70:51:66:20:de:34:81:
3f:c7:54:fc:be:e1:9f:a6:dc:60:fb:a7:f8:47:29:1d:36:19:
8f:02:84:20:6b:53:b6:55:2e:bf:11:83:45:f9:12:b6:21:c9:
2e:5d:5d:2b:26:2c:c8:e2:26:0f:7d:37:95:05:f2:96:e7:8e:
9b:3d:0d:c4:d1:12:aa:cd:96:e7:c0:27:cd:84:22:18:21:80:
bb:86:4b:f0:2f:72:9d:9f:fb:3d:dc:77:70:7e:ee:ec:3c:0e:
c4:b4:7d:56:f6:68:c6:66:20:55:af:15:05:21:1f:76:28:ad:
9b:c7:8a:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6IJxsG0iH2GhCFAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk
OTAxZDMwZWItMjNiZi00MWY5LWI4ZDUtOThiOTYwMTE1ZTE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ++he6zrWqMCzxmCSLFQOkYMs3OxSeS114Y
q4eWFOETi+ec5zglqtHRsiXziHCDKF4qp6DprSNJxYfi41ar5NX2q67g9UYKnNXq
2oDpLVASTGOXVLOMoNxJn7itxAae7uEpsOF3z/JDg25vzAco2MZByHmzm4k7SWAx
A9g58/ZNbJH5QfmQMb6fS+vcIovn0r2MyS/y3Yr0ebvZlZtk3+Xq9k+M5KUDFIF5
Ssf7DOEoPU/pYX7EvvSrRw+8qef6KwMQGzcMfd2kwNMqV0ZawAOXGs9XaQxqRpOA
ivhxREaKbDjAk/V7zbRRebuhQkZapw3J5U8wB+JifoqHrjGlowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE1sf6ckQro2NStH3lVkJAVUVftLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2UzOTc0ZTMtM2ExZC0z
ODMyLWFiMDMtY2QzYzlkNTViYmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyeqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFl++dbXuX+ciGaEK4cEexynyWVGgy8FlEJesMRoYMLgx5yU+Pwg8ELU
Vhmp5fSjpVpmWZjSoiH2uaDZ6kiyyqjytcpAfvMAys6gEyZfQoepbuDFT2mqnc0p
0GrfA0uK5w5OhdUIgz8DSd8KblyozXZQLEMftSxOu+vBYD58rFoIrrIIoSvFzb6F
cFFmIN40gT/HVPy+4Z+m3GD7p/hHKR02GY8ChCBrU7ZVLr8Rg0X5ErYhyS5dXSsm
LMjiJg99N5UF8pbnjps9DcTREqrNlufAJ82EIhghgLuGS/Avcp2f+z3cd3B+7uw8
DsS0fVb2aMZmIFWvFQUhH3YorZvHigY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:20 2025 by rpki-client