Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/62e10976-1cb6-3d2f-b7cd-a53807898b0a.roa
File: 62e10976-1cb6-3d2f-b7cd-a53807898b0a.roa (raw, json)
Hash identifier: UyB4h+ECOdVTuGUjf4zJNAl+1s5XO8wLzglf2HmdFBs=
Subject key identifier: B5:9C:B6:CA:1D:72:85:A8:C3:17:4C:62:0F:E8:13:E7:B3:F9:35:9F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858494CC957F51E91DC291FD9EB00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/62e10976-1cb6-3d2f-b7cd-a53807898b0a.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 20940
IP address blocks: 23.32.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:57:f5:1e:91:dc:29:1f:d9:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=ab7cd34c-e1d4-4b86-9dba-af20a0e83c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b4:a4:13:1d:5f:af:2b:c3:6d:ce:fc:b8:5b:
47:15:73:cc:1e:ae:a6:20:0f:d6:9c:37:94:2f:4b:
b2:c8:db:a5:7a:f0:81:87:a5:0e:12:73:a0:fc:19:
b0:66:83:14:f2:31:d3:d3:7b:86:d7:9e:5d:aa:f0:
02:20:f6:28:d4:2d:4f:c1:12:8b:e0:4c:dd:d3:47:
9d:d3:95:d6:5a:74:0e:4e:8c:5e:53:ea:14:9e:fd:
7b:4d:bb:ed:4f:1d:e2:a9:bc:4a:74:d2:19:8a:a4:
57:78:6a:da:f3:27:a6:55:79:c6:9c:12:c5:a9:d7:
44:bc:cf:23:16:3d:6a:d9:0a:c1:00:55:cc:0b:39:
74:66:f3:3d:76:e3:42:67:fa:4a:b5:49:ef:d1:2a:
14:2c:cc:36:18:c0:a5:7e:bf:cd:a5:91:c0:03:70:
cd:9f:84:d5:8e:98:79:1f:3e:fd:9d:4f:29:92:3c:
0a:14:ea:58:75:8c:fb:f8:03:77:ce:28:f0:83:92:
de:12:e0:71:cb:c9:c1:e9:9a:e2:5b:02:98:cf:cf:
27:60:17:e5:72:72:9c:44:65:6d:dc:84:2c:0f:26:
7f:13:1e:ef:64:dc:46:0e:3a:4d:4f:2e:a2:c8:77:
6c:79:ad:ea:ba:9d:ef:dc:f5:21:10:b5:11:fb:82:
05:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9C:B6:CA:1D:72:85:A8:C3:17:4C:62:0F:E8:13:E7:B3:F9:35:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/62e10976-1cb6-3d2f-b7cd-a53807898b0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.32.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:4a:c8:c6:bc:00:52:01:31:b9:b4:20:21:ef:c5:e9:18:a9:
43:5c:50:5b:6c:fd:39:44:04:1f:44:a5:66:53:a6:2a:48:91:
3a:d0:5d:6f:92:62:2c:ca:ff:48:d1:3f:fb:e2:46:eb:af:38:
7f:f3:0f:7d:e2:ad:40:2e:d6:27:de:19:60:d2:51:f9:c8:ed:
83:aa:38:30:3a:b0:29:88:a4:3b:e7:eb:b9:65:06:04:26:8b:
73:3e:55:4d:c9:a0:35:17:ab:4b:ce:ad:24:93:b8:cb:10:a2:
87:b7:08:49:70:ae:8f:fc:1b:c2:df:39:62:7e:2c:58:c6:42:
54:70:8d:90:f4:c3:79:5d:76:a7:28:63:fa:ac:24:7b:dc:f0:
47:86:8e:12:ba:66:09:7e:56:42:ee:55:84:07:fa:3a:9f:41:
b0:70:44:1d:b1:9f:19:cb:c6:97:7e:2a:2b:95:50:d0:f1:e5:
4e:5e:91:91:7a:c3:a4:09:25:03:c2:57:ae:7e:25:97:9a:c9:
5a:32:e7:77:e5:78:79:7b:67:15:3f:93:02:4f:f2:09:82:84:
0a:98:c9:42:97:1c:c2:7d:9e:e7:a5:dc:a5:03:3f:42:22:d0:
8d:cb:7e:b0:d9:56:ba:11:f1:8c:c6:92:7a:d1:21:83:90:95:
a0:ee:c3:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyVf1HpHcKR/Z6wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk
YWI3Y2QzNGMtZTFkNC00Yjg2LTlkYmEtYWYyMGEwZTgzYzBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8bSkEx1fryvDbc78uFtHFXPMHq6mIA/WnDeU
L0uyyNulevCBh6UOEnOg/BmwZoMU8jHT03uG155dqvACIPYo1C1PwRKL4Ezd00ed
05XWWnQOToxeU+oUnv17TbvtTx3iqbxKdNIZiqRXeGra8yemVXnGnBLFqddEvM8j
Fj1q2QrBAFXMCzl0ZvM9duNCZ/pKtUnv0SoULMw2GMClfr/NpZHAA3DNn4TVjph5
Hz79nU8pkjwKFOpYdYz7+AN3zijwg5LeEuBxy8nB6ZriWwKYz88nYBflcnKcRGVt
3IQsDyZ/Ex7vZNxGDjpNTy6iyHdsea3qup3v3PUhELUR+4IFOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLWctsodcoWowxdMYg/oE+ez+TWfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjJlMTA5NzYtMWNiNi0z
ZDJmLWI3Y2QtYTUzODA3ODk4YjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyCXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE5KyMa8AFIBMbm0ICHvxekYqUNcUFts/TlEBB9EpWZTpipIkTrQXW+S
YizK/0jRP/viRuuvOH/zD33irUAu1ifeGWDSUfnI7YOqODA6sCmIpDvn67llBgQm
i3M+VU3JoDUXq0vOrSSTuMsQooe3CElwro/8G8LfOWJ+LFjGQlRwjZD0w3lddqco
Y/qsJHvc8EeGjhK6Zgl+VkLuVYQH+jqfQbBwRB2xnxnLxpd+KiuVUNDx5U5ekZF6
w6QJJQPCV65+JZeayVoy53fleHl7ZxU/kwJP8gmChAqYyUKXHMJ9nuel3KUDP0Ii
0I3LfrDZVroR8YzGknrRIYOQlaDuw6k=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:54:52 2025 by rpki-client