Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46124596-ba5c-3611-aa15-aac804954558.roa
File: 46124596-ba5c-3611-aa15-aac804954558.roa (raw, json)
Hash identifier: p9PGVCpR/ECmdXdzNSOqBBwDR+RFaIqOIubNQPZ3E6U=
Subject key identifier: 3E:8E:69:C2:FA:9F:2D:91:CB:46:A6:7E:F9:2A:E4:F8:12:87:C1:F1
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848BE863D2D6F1812FED8583F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46124596-ba5c-3611-aa15-aac804954558.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.214.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:3d:2d:6f:18:12:fe:d8:58:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=dbbe12c2-a2f6-4154-b961-169099538fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9b:dd:5a:ae:6d:21:fe:ac:2d:43:9e:b8:9f:
e1:3d:ee:60:97:48:95:72:63:b7:3a:a6:38:25:06:
bd:0e:1f:de:ff:dd:94:87:7e:05:06:57:da:62:76:
bd:dc:aa:cc:6d:ef:89:1d:0a:06:44:3c:bd:a9:ae:
ea:c1:d8:2c:4f:0d:f0:4e:ce:d9:38:6d:6f:b2:18:
0b:dc:95:7f:e4:23:7f:cd:a6:38:fa:85:0f:b9:63:
2b:e5:8d:47:61:be:26:c3:e8:eb:3a:b2:b2:eb:4f:
c9:7b:cd:50:69:b1:0c:63:52:cb:fd:63:c7:a3:10:
f7:f5:41:b9:09:02:c3:75:d4:5a:3f:72:aa:4f:7b:
cc:29:0f:da:41:30:ca:4d:33:be:54:49:43:7d:06:
45:08:22:af:d7:f6:b1:42:c4:28:b5:56:3a:40:e8:
66:11:9f:6e:c4:6a:ff:cd:3a:3b:73:d1:56:da:45:
96:0e:c7:67:53:e8:f2:40:2e:e4:b8:87:60:21:9a:
8e:2e:0d:73:52:b6:98:d6:7c:1f:d7:28:72:e7:5e:
3d:5e:6a:1e:a8:20:70:61:59:1c:31:97:ae:a0:40:
fa:c7:25:aa:4a:b4:15:e2:01:6c:0b:f3:9c:8b:0d:
bd:ba:27:32:b4:73:3e:89:a0:58:60:1c:ed:3a:74:
79:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8E:69:C2:FA:9F:2D:91:CB:46:A6:7E:F9:2A:E4:F8:12:87:C1:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46124596-ba5c-3611-aa15-aac804954558.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.214.87.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:e5:cd:6e:07:27:81:97:f2:ec:92:06:6c:26:64:9a:64:fd:
32:83:23:0a:ed:29:96:81:21:74:90:af:61:d9:05:a4:5c:c7:
d5:45:ea:a9:28:bd:c0:f6:7d:1b:68:b7:e5:c8:40:6b:76:e6:
77:62:6d:e4:87:ee:ee:63:91:38:e2:11:90:64:76:37:69:f1:
bb:1b:57:ec:2e:40:5d:ea:2a:a9:f4:57:15:96:5c:1e:08:f9:
fd:ad:57:7b:fb:90:63:f3:a3:0d:04:81:1f:ec:49:ce:19:9c:
81:e8:8b:ff:be:32:54:2f:c3:a2:72:c7:ea:43:e5:a8:e5:68:
0b:20:07:e8:a7:35:0b:fc:02:0b:20:9e:e2:37:06:0f:55:a0:
3d:ba:61:90:40:9d:fe:ec:da:bb:7a:5e:cc:d9:b6:f2:b4:ac:
8b:52:dc:59:42:8c:0d:70:97:95:13:45:d2:42:b5:0f:b5:c3:
97:1a:49:66:ce:e1:a8:e4:a6:50:25:45:0c:c8:d9:ae:ca:17:
c4:5a:88:fe:94:47:b8:59:3d:e6:a6:5c:39:a0:42:68:35:f9:
20:02:8f:d2:39:2c:44:a1:11:d0:ef:04:a3:c5:f9:73:2b:e5:
66:c1:57:12:c7:11:0f:7b:c9:e7:d8:21:e3:17:57:aa:a3:6a:
0a:31:ad:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hj0tbxgS/thYP4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk
ZGJiZTEyYzItYTJmNi00MTU0LWI5NjEtMTY5MDk5NTM4ZmFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJvdWq5tIf6sLUOeuJ/hPe5gl0iVcmO3OqY4
JQa9Dh/e/92Uh34FBlfaYna93KrMbe+JHQoGRDy9qa7qwdgsTw3wTs7ZOG1vshgL
3JV/5CN/zaY4+oUPuWMr5Y1HYb4mw+jrOrKy60/Je81QabEMY1LL/WPHoxD39UG5
CQLDddRaP3KqT3vMKQ/aQTDKTTO+VElDfQZFCCKv1/axQsQotVY6QOhmEZ9uxGr/
zTo7c9FW2kWWDsdnU+jyQC7kuIdgIZqOLg1zUraY1nwf1yhy5149XmoeqCBwYVkc
MZeuoED6xyWqSrQV4gFsC/Ociw29uicytHM+iaBYYBztOnR5BQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD6OacL6ny2Ry0amfvkq5PgSh8HxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDYxMjQ1OTYtYmE1Yy0z
NjExLWFhMTUtYWFjODA0OTU0NTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ZXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABHlzW4HJ4GX8uySBmwmZJpk/TKDIwrtKZaBIXSQr2HZBaRcx9VF6qko
vcD2fRtot+XIQGt25ndibeSH7u5jkTjiEZBkdjdp8bsbV+wuQF3qKqn0VxWWXB4I
+f2tV3v7kGPzow0EgR/sSc4ZnIHoi/++MlQvw6Jyx+pD5ajlaAsgB+inNQv8Agsg
nuI3Bg9VoD26YZBAnf7s2rt6XszZtvK0rItS3FlCjA1wl5UTRdJCtQ+1w5caSWbO
4ajkplAlRQzI2a7KF8RaiP6UR7hZPeamXDmgQmg1+SACj9I5LEShEdDvBKPF+XMr
5WbBVxLHEQ97yefYIeMXV6qjagoxrQ0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:11:02 2025 by rpki-client