Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c9d696a-862d-3248-98b1-fd75dd7cdd37.roa
File: 8c9d696a-862d-3248-98b1-fd75dd7cdd37.roa (raw, json)
Hash identifier: FWX3NiKOgHvrTcYH+13/OuwjB85b4ZkJM4Gj0fE9Vqw=
Subject key identifier: 3D:91:38:CF:5A:26:86:0E:B6:EC:D1:09:90:B2:45:DB:89:8D:DD:3F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584913AC3BEB1D64C238817EB780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c9d696a-862d-3248-98b1-fd75dd7cdd37.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.64.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:3b:eb:1d:64:c2:38:81:7e:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=3330537d-1cde-480c-a9dd-1c124b4d9a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fa:b3:12:b2:cb:2e:04:d9:ab:d9:ad:0d:b7:
cc:68:e6:2b:2b:1c:f2:ef:f4:fd:d1:5b:c7:3d:03:
16:1b:c7:ff:13:72:80:a5:40:b8:28:e8:ea:c9:cb:
ee:89:16:f0:a3:38:04:7d:13:1f:c2:a6:6e:0d:43:
83:19:b4:d8:7d:b9:0a:5f:2b:64:ca:63:83:e8:b5:
47:25:3d:b1:75:e3:1e:98:21:4a:d3:6d:5b:ea:f8:
f6:fb:8a:34:68:94:15:44:db:6c:5e:d1:1b:8c:ee:
6c:70:77:27:81:0a:90:b2:0b:20:7d:3d:34:64:1d:
2d:30:ba:7b:f8:ab:a6:61:29:32:1c:9f:bc:87:40:
c2:ba:60:86:27:cb:c1:85:4d:5b:0a:c6:70:f3:e2:
60:8a:89:c0:55:ce:ee:76:4f:aa:94:d6:09:37:01:
3a:63:8a:c2:83:dc:98:0b:7a:d7:70:63:93:bf:f9:
97:84:00:e8:b0:67:35:09:e7:28:0a:c6:d5:93:2a:
fe:81:b2:7c:e4:4b:c5:5a:7a:e4:d6:d8:95:03:69:
fb:cc:ab:12:f5:0d:79:de:0c:b6:7b:86:d2:f5:d3:
50:4d:c8:47:bd:f9:2b:bc:58:96:70:11:82:5b:fe:
c9:e3:38:db:29:b9:3c:28:bc:3e:96:76:d7:fb:05:
ca:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:91:38:CF:5A:26:86:0E:B6:EC:D1:09:90:B2:45:DB:89:8D:DD:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c9d696a-862d-3248-98b1-fd75dd7cdd37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.64.118.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:51:d0:a1:82:9d:33:3c:9e:90:20:b8:23:0b:1b:cb:05:19:
ba:80:32:07:d6:dd:77:88:78:36:a8:cf:f1:78:04:e0:ae:b4:
1f:67:fe:ef:c7:0c:25:a1:59:03:7e:41:d0:55:81:d5:db:fb:
b9:1d:8d:1a:9b:64:87:8e:1a:f0:46:44:9a:a1:f0:76:af:35:
42:45:21:9f:a6:db:98:24:6a:81:70:70:24:68:19:33:23:e4:
65:9d:aa:d5:fb:2e:e5:9e:1e:bb:bb:1b:4f:85:45:2c:86:fe:
96:8d:e8:63:fb:fc:c2:21:8d:49:f1:f7:3f:a0:4f:46:b4:08:
cd:46:c0:1f:66:d8:b3:b7:3e:89:23:bf:bb:17:8d:3a:2d:92:
5a:e0:87:7d:60:af:15:f1:5c:10:d3:94:6d:86:ce:f4:c7:cb:
29:fa:85:a2:68:04:2a:6f:60:b9:24:e5:5f:68:c4:af:3e:a4:
db:89:93:32:4d:1c:3b:4e:5b:0b:4f:f2:c2:bf:e5:9d:91:9a:
30:ae:df:30:16:d8:84:d7:1f:f6:d1:03:f5:f8:eb:e8:e6:fd:
0e:3a:fa:0a:4f:a1:cd:fb:9e:1c:ed:70:bc:ad:58:d1:cf:91:
8a:64:d5:d6:b1:a3:7c:54:9f:38:2f:7d:a1:1a:da:d9:dd:df:
b8:79:73:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrDvrHWTCOIF+t4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk
MzMzMDUzN2QtMWNkZS00ODBjLWE5ZGQtMWMxMjRiNGQ5YTI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfqzErLLLgTZq9mtDbfMaOYrKxzy7/T90VvH
PQMWG8f/E3KApUC4KOjqycvuiRbwozgEfRMfwqZuDUODGbTYfbkKXytkymOD6LVH
JT2xdeMemCFK021b6vj2+4o0aJQVRNtsXtEbjO5scHcngQqQsgsgfT00ZB0tMLp7
+KumYSkyHJ+8h0DCumCGJ8vBhU1bCsZw8+JgionAVc7udk+qlNYJNwE6Y4rCg9yY
C3rXcGOTv/mXhADosGc1CecoCsbVkyr+gbJ85EvFWnrk1tiVA2n7zKsS9Q153gy2
e4bS9dNQTchHvfkrvFiWcBGCW/7J4zjbKbk8KLw+lnbX+wXKIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD2ROM9aJoYOtuzRCZCyRduJjd0/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGM5ZDY5NmEtODYyZC0z
MjQ4LTk4YjEtZmQ3NWRkN2NkZDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0B2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAABR0KGCnTM8npAguCMLG8sFGbqAMgfW3XeIeDaoz/F4BOCutB9n/u/H
DCWhWQN+QdBVgdXb+7kdjRqbZIeOGvBGRJqh8HavNUJFIZ+m25gkaoFwcCRoGTMj
5GWdqtX7LuWeHru7G0+FRSyG/paN6GP7/MIhjUnx9z+gT0a0CM1GwB9m2LO3Pokj
v7sXjTotklrgh31grxXxXBDTlG2GzvTHyyn6haJoBCpvYLkk5V9oxK8+pNuJkzJN
HDtOWwtP8sK/5Z2RmjCu3zAW2ITXH/bRA/X46+jm/Q46+gpPoc37nhztcLytWNHP
kYpk1daxo3xUnzgvfaEa2tnd37h5cwg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:01 2025 by rpki-client