Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74dda23f-8439-3dd3-92b7-41b61af685d8.roa
File: 74dda23f-8439-3dd3-92b7-41b61af685d8.roa (raw, json)
Hash identifier: 6LtmNpX7gkRhcvTqdgAIwL0e1pLYARJj0A71YF3RxXk=
Subject key identifier: 9D:DD:10:5F:4E:2A:A0:9D:19:3A:5E:F8:5F:78:F5:0D:69:68:09:7D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848BBBB8949A960B6A2A604B780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74dda23f-8439-3dd3-92b7-41b61af685d8.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.209.118.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:89:49:a9:60:b6:a2:a6:04:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=05c7bd62-a82c-4ff1-85a2-25fe6650fcdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f1:c0:4a:4e:1c:71:53:cb:8f:51:dc:6d:cc:
8f:03:f4:bb:4f:46:4c:c9:5f:4f:c0:d5:6b:34:7c:
47:91:14:0b:c4:e5:68:01:bb:07:a8:3f:ff:90:6a:
b6:45:26:49:db:d9:c9:e9:84:b7:db:f5:5b:2f:38:
89:33:8b:2b:0d:08:83:b0:6c:d2:e2:ac:69:95:ce:
29:b2:77:75:be:40:1b:b0:d0:55:7c:48:bf:01:de:
92:65:3f:64:e5:d6:2a:69:15:ec:1b:ce:88:b1:85:
5c:40:f7:56:02:3a:2f:1e:59:2c:47:b4:15:a4:84:
68:18:18:27:de:4d:6a:51:26:93:6e:d9:75:f6:7b:
14:f3:e1:e8:e4:37:23:f9:81:ff:f8:04:c3:95:40:
ca:5c:72:75:b1:39:4c:2e:2d:cb:13:8f:93:f0:6c:
fc:a7:f0:04:3c:ff:38:95:8d:7d:c7:28:2d:fa:87:
ed:c2:e6:70:34:47:e4:69:68:65:1f:68:08:01:dc:
e6:e0:1f:73:1d:4b:f4:d8:e2:66:16:2d:6a:9f:70:
bc:f2:e7:b7:a0:70:3e:3b:56:75:2e:49:fc:dc:80:
d6:6b:f3:81:11:59:f3:37:a2:05:95:72:b5:a1:11:
cd:75:e8:3c:8e:ee:b3:10:a7:a2:47:a1:38:13:a5:
a4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DD:10:5F:4E:2A:A0:9D:19:3A:5E:F8:5F:78:F5:0D:69:68:09:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74dda23f-8439-3dd3-92b7-41b61af685d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.209.118.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:74:ba:28:1e:54:d3:ca:3e:eb:b8:84:5f:13:7f:ff:ca:2c:
4c:e4:6d:16:a8:ba:05:19:c1:91:28:4b:75:39:82:13:36:39:
ce:50:05:37:0a:b9:a4:af:3d:f1:f4:8a:00:41:1b:cf:05:66:
85:78:90:49:d9:70:dd:db:24:36:16:74:05:bc:c6:9a:07:cf:
e2:43:4c:c6:ec:ee:fb:18:d1:60:b1:e7:a1:16:d8:ff:dd:03:
d6:16:38:6e:65:da:bc:7c:19:9a:80:8c:79:9f:51:e5:68:b8:
54:42:66:c4:b8:f2:e8:f9:e2:bf:77:e5:f4:d3:50:08:69:99:
d0:9e:fc:ba:da:ba:f6:9c:f8:34:1b:76:3f:3f:19:8b:c7:bc:
6c:c8:26:5f:70:0d:ba:39:d3:29:6f:ae:69:bd:23:18:ea:ec:
ec:9f:da:d7:91:51:ae:30:be:ad:aa:c1:9d:e7:26:23:24:b6:
79:7e:04:cb:99:c9:65:b5:85:25:59:d2:03:08:aa:f6:d4:20:
f1:53:d7:b9:96:4b:41:8d:c7:9b:e3:de:17:af:42:e1:16:ef:
fc:8b:6b:6e:f2:41:aa:b5:c3:7a:2d:7c:e6:cf:0b:05:05:3c:
fa:e4:32:f1:bb:c6:96:82:05:5b:dc:ba:1a:eb:dc:6f:1b:1e:
b2:4e:ff:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u4lJqWC2oqYEt4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk
MDVjN2JkNjItYTgyYy00ZmYxLTg1YTItMjVmZTY2NTBmY2RkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/HASk4ccVPLj1HcbcyPA/S7T0ZMyV9PwNVr
NHxHkRQLxOVoAbsHqD//kGq2RSZJ29nJ6YS32/VbLziJM4srDQiDsGzS4qxplc4p
snd1vkAbsNBVfEi/Ad6SZT9k5dYqaRXsG86IsYVcQPdWAjovHlksR7QVpIRoGBgn
3k1qUSaTbtl19nsU8+Ho5Dcj+YH/+ATDlUDKXHJ1sTlMLi3LE4+T8Gz8p/AEPP84
lY19xygt+oftwuZwNEfkaWhlH2gIAdzm4B9zHUv02OJmFi1qn3C88ue3oHA+O1Z1
Lkn83IDWa/OBEVnzN6IFlXK1oRHNdeg8ju6zEKeiR6E4E6WkiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ3dEF9OKqCdGTpe+F949Q1paAl9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzRkZGEyM2YtODQzOS0z
ZGQzLTkyYjctNDFiNjFhZjY4NWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9F2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAl0uigeVNPKPuu4hF8Tf//KLEzkbRaougUZwZEoS3U5ghM2Oc5QBTcK
uaSvPfH0igBBG88FZoV4kEnZcN3bJDYWdAW8xpoHz+JDTMbs7vsY0WCx56EW2P/d
A9YWOG5l2rx8GZqAjHmfUeVouFRCZsS48uj54r935fTTUAhpmdCe/Lrauvac+DQb
dj8/GYvHvGzIJl9wDbo50ylvrmm9Ixjq7Oyf2teRUa4wvq2qwZ3nJiMktnl+BMuZ
yWW1hSVZ0gMIqvbUIPFT17mWS0GNx5vj3hevQuEW7/yLa27yQaq1w3otfObPCwUF
PPrkMvG7xpaCBVvcuhrr3G8bHrJO/zc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:06 2025 by rpki-client