Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/820725a0-e453-3e48-b4e6-e46f38ba8f3d.roa
File: 820725a0-e453-3e48-b4e6-e46f38ba8f3d.roa (raw, json)
Hash identifier: rf8oS82UB3i+KGFWgcltVpAQvmP1sxU3FsYpS5GOiak=
Subject key identifier: AC:B0:A5:5A:45:22:3F:0C:F8:A7:1E:7C:F0:42:D6:44:88:BB:16:8B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849244E8F8E77AAA6E01A5E0A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/820725a0-e453-3e48-b4e6-e46f38ba8f3d.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.12.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:8f:8e:77:aa:a6:e0:1a:5e:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=ab4565ee-202d-4f79-a61a-6d663dda0356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bb:d8:86:b8:95:07:cd:2e:f8:a7:5d:a8:9d:
37:5f:ad:a1:43:cd:54:6e:cb:f8:bf:97:f1:2c:85:
95:44:a6:af:23:8e:01:02:94:8a:78:4f:dc:5e:c2:
ad:b0:91:bb:05:8a:cf:4d:26:cd:50:82:53:17:7e:
9a:70:68:f8:3e:8e:22:06:e0:74:3a:d3:f4:98:37:
23:d6:5b:da:12:28:47:44:37:a2:ce:72:4b:90:19:
31:53:76:06:67:93:e1:1a:cf:00:09:9d:a5:29:77:
99:3e:06:53:6b:fd:bf:89:b4:a8:50:da:5e:39:78:
62:f3:df:02:e8:a0:19:bb:ba:81:12:eb:4a:67:57:
c3:c4:7d:c5:b1:d0:fc:de:99:bd:98:f2:a6:e0:f3:
1e:f7:4d:85:16:bf:44:4a:3f:47:72:7a:8b:90:28:
53:1e:ab:9a:55:01:4c:e2:85:f3:81:82:61:8f:e2:
6e:48:7d:7a:c2:e8:7e:93:4e:ca:10:74:e7:bf:19:
9a:a7:c2:ed:5b:ac:de:9e:b2:40:f0:cb:49:21:5c:
d8:79:a2:d9:1c:f2:aa:b9:fe:91:1c:40:6e:7a:7d:
51:cc:67:32:53:f7:cc:ff:3e:57:25:b1:8d:8e:21:
2e:d0:e1:5d:7c:ee:57:96:a1:d3:d5:1c:5b:00:9e:
a5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B0:A5:5A:45:22:3F:0C:F8:A7:1E:7C:F0:42:D6:44:88:BB:16:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/820725a0-e453-3e48-b4e6-e46f38ba8f3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.12.146.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:75:c3:be:1c:53:58:26:82:60:c4:5e:ff:d2:ad:ea:f1:89:
87:3d:1b:4c:59:2f:f2:39:cc:8c:58:fc:7f:c5:58:81:22:82:
d2:3f:84:c9:8a:ea:74:8d:3d:7e:0c:e6:7a:85:5d:b1:68:7d:
d8:25:df:bc:97:bb:c3:5a:84:79:d7:c0:4e:86:a2:82:8e:6e:
b4:ab:30:37:a4:d1:e7:65:72:0f:0c:07:ed:2d:e6:bf:3d:45:
1a:48:19:41:fb:72:27:0d:5a:c3:15:ca:b8:86:2e:1c:2d:33:
3c:af:01:e8:1a:95:ed:29:00:c2:8c:2a:13:6a:c6:26:99:a1:
65:55:b3:58:3c:cb:ed:ab:79:88:79:78:5d:f4:11:15:ac:90:
4c:ec:3a:e1:34:22:1e:ff:db:a7:72:f8:ea:07:1d:7e:40:7a:
49:26:3c:e2:c7:d2:05:cf:c7:d9:1f:56:45:71:3c:19:ec:27:
f7:c1:1d:9d:32:07:1b:4c:e9:28:de:5b:eb:20:21:47:58:84:
4f:98:65:c4:fd:24:f6:bf:b9:4b:1a:da:bc:07:01:cb:c7:a9:
e0:0a:64:ea:c8:2e:5a:e9:6b:57:36:2f:0a:7e:0a:ad:b2:3a:
06:e3:7f:10:f4:15:af:f0:7c:ac:1a:93:3e:f3:63:10:66:af:
44:b6:6f:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTo+Od6qm4BpeCgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk
YWI0NTY1ZWUtMjAyZC00Zjc5LWE2MWEtNmQ2NjNkZGEwMzU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7vYhriVB80u+KddqJ03X62hQ81Ubsv4v5fx
LIWVRKavI44BApSKeE/cXsKtsJG7BYrPTSbNUIJTF36acGj4Po4iBuB0OtP0mDcj
1lvaEihHRDeiznJLkBkxU3YGZ5PhGs8ACZ2lKXeZPgZTa/2/ibSoUNpeOXhi898C
6KAZu7qBEutKZ1fDxH3FsdD83pm9mPKm4PMe902FFr9ESj9HcnqLkChTHquaVQFM
4oXzgYJhj+JuSH16wuh+k07KEHTnvxmap8LtW6zenrJA8MtJIVzYeaLZHPKquf6R
HEBuen1RzGcyU/fM/z5XJbGNjiEu0OFdfO5XlqHT1RxbAJ6ljwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKywpVpFIj8M+KcefPBC1kSIuxaLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODIwNzI1YTAtZTQ1My0z
ZTQ4LWI0ZTYtZTQ2ZjM4YmE4ZjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwySMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD91w74cU1gmgmDEXv/SrerxiYc9G0xZL/I5zIxY/H/FWIEigtI/hMmK
6nSNPX4M5nqFXbFofdgl37yXu8NahHnXwE6GooKObrSrMDek0edlcg8MB+0t5r89
RRpIGUH7cicNWsMVyriGLhwtMzyvAegale0pAMKMKhNqxiaZoWVVs1g8y+2reYh5
eF30ERWskEzsOuE0Ih7/26dy+OoHHX5AekkmPOLH0gXPx9kfVkVxPBnsJ/fBHZ0y
BxtM6SjeW+sgIUdYhE+YZcT9JPa/uUsa2rwHAcvHqeAKZOrILlrpa1c2Lwp+Cq2y
OgbjfxD0Fa/wfKwakz7zYxBmr0S2b9c=
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:41:36 2025 by rpki-client