Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/789d62f2-2b56-350c-b7cb-7b7690dc009a.roa
File: 789d62f2-2b56-350c-b7cb-7b7690dc009a.roa (raw, json)
Hash identifier: vMD9zHA7KFXjXlrgTdQrvZoJv0mn5DcGuBblWRebDAA=
Subject key identifier: A2:C0:D9:61:7A:FA:D2:03:A9:E0:C1:FB:27:E5:A9:2A:E5:1D:CD:A2
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858494E2EBCAFEEB651C7CFB32E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/789d62f2-2b56-350c-b7cb-7b7690dc009a.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.33.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:bc:af:ee:b6:51:c7:cf:b3:2e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=3ae925d7-c93c-48f7-9c54-596af46d340d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:66:2f:bc:29:b9:45:93:39:e6:fe:dd:8a:6c:
39:af:12:6d:b8:41:b7:ae:62:5d:78:cc:1a:66:aa:
67:a0:66:02:bb:3a:a6:f0:3f:ec:07:e8:97:76:64:
4e:ed:c8:24:68:35:48:0c:c8:4f:52:6e:44:7e:94:
60:50:eb:53:28:e8:80:ce:db:4b:a6:99:d9:2a:49:
92:65:d1:4b:72:30:a4:01:af:ce:dc:a5:cd:71:bd:
cb:04:42:bc:a6:fc:76:fd:39:40:7e:15:d2:f2:ad:
55:aa:b1:87:07:cb:8e:fe:86:09:48:70:d9:5a:eb:
8f:90:44:be:43:fd:5c:0b:b2:2e:a6:10:5b:cb:8e:
a0:aa:36:52:05:55:5e:6e:bd:02:0b:89:fc:ef:91:
7a:5d:cd:e2:6e:a9:ee:18:95:2d:c3:70:64:93:55:
8c:c3:02:23:3f:79:e9:7d:c8:10:3b:94:84:31:2b:
3e:2a:9e:73:b0:2c:8e:6e:98:29:4c:5a:15:0c:ce:
f1:a0:90:28:bf:bb:61:33:79:ea:49:e8:12:88:8d:
4a:42:ee:6d:7e:16:e3:4f:a6:45:97:c9:cf:36:39:
88:63:c1:c4:98:8d:e7:3f:51:67:b4:be:70:39:23:
bd:dd:50:e1:cd:13:8f:a9:ee:a5:7f:0a:89:d1:61:
29:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C0:D9:61:7A:FA:D2:03:A9:E0:C1:FB:27:E5:A9:2A:E5:1D:CD:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/789d62f2-2b56-350c-b7cb-7b7690dc009a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.33.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:a2:66:f2:4e:b7:a9:c1:01:09:56:69:de:f3:60:78:9c:72:
75:e0:56:36:6a:dc:ce:b4:bd:70:0f:77:84:4c:cd:d1:7f:61:
57:9c:bf:62:29:03:41:83:9b:03:7c:cc:ab:78:0a:da:3a:9c:
54:ac:57:ea:8b:ac:ee:6d:a0:84:5f:13:c8:4b:1a:ef:90:a0:
36:0b:59:fc:24:da:14:08:9f:6a:89:3e:29:7e:16:dd:db:12:
5f:8e:2d:2e:31:50:02:03:0a:b3:60:ad:80:0c:c1:32:02:0a:
4d:73:2a:de:18:76:2e:30:45:07:45:ec:98:1b:d5:8b:ec:1d:
9f:07:4a:53:46:0b:f8:4c:2a:6b:41:85:f5:eb:f6:78:94:26:
c5:c6:d1:7b:eb:46:01:ef:18:38:0a:cf:ed:13:97:e4:d8:90:
d7:fe:9f:aa:26:68:1d:9e:70:33:c0:ce:07:c4:25:a6:79:89:
60:ba:f0:9f:83:f9:e3:35:a2:0e:b5:5a:a2:09:11:e4:ab:41:
4e:40:a4:38:8c:6e:05:04:2d:06:3f:97:bb:c7:bd:43:c3:28:
e8:92:9d:49:97:f6:28:e9:23:cd:6f:1c:74:e3:fc:f1:dd:11:
58:f6:9d:63:00:39:30:3e:c1:d0:6f:b4:56:1a:98:5c:45:fb:
da:43:62:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLryv7rZRx8+zLoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk
M2FlOTI1ZDctYzkzYy00OGY3LTljNTQtNTk2YWY0NmQzNDBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2YvvCm5RZM55v7dimw5rxJtuEG3rmJdeMwa
ZqpnoGYCuzqm8D/sB+iXdmRO7cgkaDVIDMhPUm5EfpRgUOtTKOiAzttLppnZKkmS
ZdFLcjCkAa/O3KXNcb3LBEK8pvx2/TlAfhXS8q1VqrGHB8uO/oYJSHDZWuuPkES+
Q/1cC7IuphBby46gqjZSBVVebr0CC4n875F6Xc3ibqnuGJUtw3Bkk1WMwwIjP3np
fcgQO5SEMSs+Kp5zsCyObpgpTFoVDM7xoJAov7thM3nqSegSiI1KQu5tfhbjT6ZF
l8nPNjmIY8HEmI3nP1FntL5wOSO93VDhzROPqe6lfwqJ0WEp5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKLA2WF6+tIDqeDB+yflqSrlHc2iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzg5ZDYyZjItMmI1Ni0z
NTBjLWI3Y2ItN2I3NjkwZGMwMDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyGIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJKiZvJOt6nBAQlWad7zYHiccnXgVjZq3M60vXAPd4RMzdF/YVecv2Ip
A0GDmwN8zKt4Cto6nFSsV+qLrO5toIRfE8hLGu+QoDYLWfwk2hQIn2qJPil+Ft3b
El+OLS4xUAIDCrNgrYAMwTICCk1zKt4Ydi4wRQdF7Jgb1YvsHZ8HSlNGC/hMKmtB
hfXr9niUJsXG0XvrRgHvGDgKz+0Tl+TYkNf+n6omaB2ecDPAzgfEJaZ5iWC68J+D
+eM1og61WqIJEeSrQU5ApDiMbgUELQY/l7vHvUPDKOiSnUmX9ijpI81vHHTj/PHd
EVj2nWMAOTA+wdBvtFYamFxF+9pDYvE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:39 2025 by rpki-client