Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e71e0ff-55a5-3dea-98d6-1233c4540ad9.roa
File: 8e71e0ff-55a5-3dea-98d6-1233c4540ad9.roa (raw, json)
Hash identifier: BMIBas9Lbbhl/7DKKpij0Q+iXDGVpdGytrYPAP/coJY=
Subject key identifier: AC:9D:C5:EF:96:4A:10:3B:70:31:60:2F:A7:0D:D1:DA:3F:7F:CF:03
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858494CC953A93890E830748FDC80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e71e0ff-55a5-3dea-98d6-1233c4540ad9.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 20940
IP address blocks: 23.35.146.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:53:a9:38:90:e8:30:74:8f:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=b51a3366-40d3-49aa-a4ea-f50555e7a860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0d:22:ba:03:75:15:96:68:a1:d2:ad:41:e2:
1d:9a:53:33:cc:c1:b7:ab:5d:10:0e:60:a2:76:34:
62:a1:54:f5:58:a8:ab:3d:6f:6b:d5:09:4c:9b:68:
24:3d:c6:08:2d:1c:f4:67:a2:29:aa:43:88:b1:31:
94:f4:df:6f:cd:34:67:4f:f8:f9:67:a4:ca:24:52:
1e:aa:02:36:9d:d2:19:c6:02:17:17:54:16:ee:7a:
f9:b2:2e:bb:53:ce:01:bd:96:d7:d5:d5:05:00:ce:
54:5f:7c:e5:67:64:d3:07:5e:84:c2:cb:64:10:d5:
05:00:e6:ac:ea:6f:03:3e:3b:18:1b:5e:9c:7f:91:
7a:f4:32:6f:90:1e:74:25:20:07:1e:e0:ff:e5:f3:
3a:d9:ba:ee:a4:27:3b:d7:76:d3:72:49:58:49:65:
57:b1:fe:2c:68:4a:b8:db:62:06:8d:f3:b5:00:c5:
00:86:66:6c:c7:9e:68:d7:65:00:6f:5f:f0:5c:fc:
dc:7e:f6:ac:f1:f2:cc:60:86:b2:a3:1a:a8:2e:08:
92:85:2b:0c:5e:cc:ca:d3:97:61:e2:87:43:09:33:
00:4a:cd:59:17:8d:d8:7b:04:8d:dc:b2:1d:7f:61:
ac:fb:fa:fe:ec:30:b7:85:0b:02:01:1b:d6:3d:98:
4e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9D:C5:EF:96:4A:10:3B:70:31:60:2F:A7:0D:D1:DA:3F:7F:CF:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e71e0ff-55a5-3dea-98d6-1233c4540ad9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.35.146.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:50:7a:0b:55:cc:b4:85:58:ba:32:c3:2f:26:f9:3c:95:9b:
06:d3:8c:2c:a1:16:cc:c4:fd:07:49:e4:61:bf:e3:84:25:c9:
17:44:a6:c0:ea:cc:ce:a2:c4:5f:99:4d:55:87:a5:8e:0a:4b:
51:74:c8:75:95:cd:39:47:c2:c8:5a:d7:93:a7:7f:5c:41:61:
0f:e2:72:a1:95:74:9f:ba:65:bb:92:a5:a8:ee:4e:3d:57:8c:
78:3c:34:f4:4d:38:8d:d2:c6:f4:ea:4a:7d:9b:fe:96:da:e8:
be:08:90:66:9b:6e:05:33:e8:f1:51:45:41:f1:f0:4d:59:81:
8e:77:44:4a:06:31:7e:15:3b:24:23:bb:99:3e:a4:e0:dc:94:
2f:b6:75:db:2d:d1:11:a2:82:c6:d0:88:bb:45:c8:40:ea:27:
4e:11:39:6f:12:cd:37:d6:36:fb:d3:28:80:e9:e4:69:43:3c:
c9:70:22:38:a4:04:09:7b:09:7e:c2:62:3d:cb:df:16:55:f1:
45:af:ce:63:ae:65:05:9d:26:a7:3d:1c:41:88:e6:6f:65:f9:
37:7b:61:bc:56:0b:85:9a:f7:d7:e9:86:4d:bf:95:6e:a6:0b:
a8:47:bf:47:f3:5c:88:83:50:bf:78:61:0a:2d:13:ae:d2:b5:
76:1a:4d:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyVOpOJDoMHSP3IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk
YjUxYTMzNjYtNDBkMy00OWFhLWE0ZWEtZjUwNTU1ZTdhODYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlA0iugN1FZZoodKtQeIdmlMzzMG3q10QDmCi
djRioVT1WKirPW9r1QlMm2gkPcYILRz0Z6IpqkOIsTGU9N9vzTRnT/j5Z6TKJFIe
qgI2ndIZxgIXF1QW7nr5si67U84BvZbX1dUFAM5UX3zlZ2TTB16EwstkENUFAOas
6m8DPjsYG16cf5F69DJvkB50JSAHHuD/5fM62brupCc713bTcklYSWVXsf4saEq4
22IGjfO1AMUAhmZsx55o12UAb1/wXPzcfvas8fLMYIayoxqoLgiShSsMXszK05dh
4odDCTMASs1ZF43YewSN3LIdf2Gs+/r+7DC3hQsCARvWPZhONwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKydxe+WShA7cDFgL6cN0do/f88DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGU3MWUwZmYtNTVhNS0z
ZGVhLTk4ZDYtMTIzM2M0NTQwYWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyOSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAANQegtVzLSFWLoywy8m+TyVmwbTjCyhFszE/QdJ5GG/44QlyRdEpsDq
zM6ixF+ZTVWHpY4KS1F0yHWVzTlHwsha15Onf1xBYQ/icqGVdJ+6ZbuSpajuTj1X
jHg8NPRNOI3SxvTqSn2b/pba6L4IkGabbgUz6PFRRUHx8E1ZgY53REoGMX4VOyQj
u5k+pODclC+2ddst0RGigsbQiLtFyEDqJ04ROW8SzTfWNvvTKIDp5GlDPMlwIjik
BAl7CX7CYj3L3xZV8UWvzmOuZQWdJqc9HEGI5m9l+Td7YbxWC4Wa99fphk2/lW6m
C6hHv0fzXIiDUL94YQotE67StXYaTfw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:05:27 2025 by rpki-client