Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f386ee5-cb9b-3b7d-9efb-2bb0bad963f8.roa
File: 8f386ee5-cb9b-3b7d-9efb-2bb0bad963f8.roa (raw, json)
Hash identifier: J2ETokrYKviDtkOJbZgUT5jeXtVZjbkq1h2YYCYPKWA=
Subject key identifier: 3A:17:85:C4:8F:CE:3C:9E:0C:83:6C:C3:68:22:10:E4:FB:7E:D6:3E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848BE86400EAE80961BDC26A100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f386ee5-cb9b-3b7d-9efb-2bb0bad963f8.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 16625
IP address blocks: 23.215.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:40:0e:ae:80:96:1b:dc:26:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=b0e21297-fc5f-4876-ad4f-d93cf16e0d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:90:70:e0:3d:44:84:37:51:69:f4:30:4b:f2:
97:23:25:f5:99:94:40:df:b7:a8:14:58:cb:a5:05:
62:a6:4e:dc:65:03:09:78:b1:1c:ad:33:10:b4:75:
2e:97:f2:d2:a5:76:34:e6:49:0f:44:4a:f7:64:55:
58:79:80:6b:66:0e:44:b3:78:4a:36:b9:b4:c1:0b:
78:bf:2e:2f:8b:95:45:5c:21:0c:6f:1d:62:f2:77:
14:7b:35:a9:06:e2:04:52:5c:4b:03:ec:7c:c4:d1:
ff:85:fe:39:a1:94:7b:d0:5a:eb:da:b3:12:a6:37:
46:49:f0:2c:05:78:70:75:4f:28:84:6b:e1:03:e3:
b3:48:51:4d:b6:bd:da:1c:7a:38:37:15:62:c8:64:
1c:f9:1d:fb:24:12:c7:bf:4a:88:44:1b:26:6c:74:
66:6d:3c:39:9b:cf:28:48:29:47:33:17:b7:17:4a:
db:cb:a3:f8:79:c4:21:30:f7:28:d5:00:64:d4:32:
35:08:81:e5:75:6c:d4:b3:c3:9f:c0:00:e4:2c:3b:
82:7a:07:b4:a4:e9:a4:60:d7:e1:a5:40:fc:0c:37:
54:c9:e1:ac:dc:dc:b1:a3:a9:7c:83:36:e9:53:c3:
7f:9b:79:17:e3:67:b0:59:36:d9:83:2c:58:93:3c:
cf:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:17:85:C4:8F:CE:3C:9E:0C:83:6C:C3:68:22:10:E4:FB:7E:D6:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f386ee5-cb9b-3b7d-9efb-2bb0bad963f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.215.160.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:78:4b:62:52:0f:d5:81:3d:1a:84:d3:9d:28:cd:fb:4a:94:
d7:38:79:e0:3a:38:10:5a:ed:51:fc:2c:34:84:ba:8f:ca:75:
8c:58:4b:24:1e:10:6f:52:be:ec:5c:17:52:41:91:44:84:36:
a8:b6:44:6b:bc:2d:a9:0b:ae:88:77:a3:da:fc:09:59:45:fa:
f0:37:01:86:6e:b5:3c:97:d7:55:c6:87:f3:db:17:3a:02:26:
04:89:3c:dc:c9:50:58:2d:b6:51:4a:5c:f4:18:59:fa:5a:2e:
9f:f0:ce:e6:bf:07:fe:1d:7b:de:83:ba:75:0f:2f:7a:19:94:
14:ef:44:45:f8:5d:48:b3:aa:c1:37:2a:da:fb:08:2d:72:c0:
b2:62:bc:a7:f3:75:cb:22:0a:42:19:89:a7:89:68:f1:53:cf:
42:55:2a:99:84:77:5b:21:f0:f9:2e:98:85:3f:d4:ea:5a:b5:
e3:c1:c1:d8:5b:09:95:a8:d0:a6:0d:b2:bb:67:e2:6a:b9:e7:
46:87:18:7b:95:79:cf:7a:3c:77:a2:c6:d9:fe:84:dc:54:6b:
69:d5:ac:45:10:4e:64:33:34:25:29:e9:3d:2e:5d:4a:3e:87:
b8:38:15:8d:0d:cf:f0:ea:aa:04:21:3e:5f:94:29:c5:4a:23:
91:7e:be:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hkAOroCWG9wmoQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk
YjBlMjEyOTctZmM1Zi00ODc2LWFkNGYtZDkzY2YxNmUwZDdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpBw4D1EhDdRafQwS/KXIyX1mZRA37eoFFjL
pQVipk7cZQMJeLEcrTMQtHUul/LSpXY05kkPREr3ZFVYeYBrZg5Es3hKNrm0wQt4
vy4vi5VFXCEMbx1i8ncUezWpBuIEUlxLA+x8xNH/hf45oZR70Frr2rMSpjdGSfAs
BXhwdU8ohGvhA+OzSFFNtr3aHHo4NxViyGQc+R37JBLHv0qIRBsmbHRmbTw5m88o
SClHMxe3F0rby6P4ecQhMPco1QBk1DI1CIHldWzUs8OfwADkLDuCege0pOmkYNfh
pUD8DDdUyeGs3Nyxo6l8gzbpU8N/m3kX42ewWTbZgyxYkzzPvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDoXhcSPzjyeDINsw2giEOT7ftY+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGYzODZlZTUtY2I5Yi0z
YjdkLTllZmItMmJiMGJhZDk2M2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9egMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAt4S2JSD9WBPRqE050ozftKlNc4eeA6OBBa7VH8LDSEuo/KdYxYSyQe
EG9SvuxcF1JBkUSENqi2RGu8LakLroh3o9r8CVlF+vA3AYZutTyX11XGh/PbFzoC
JgSJPNzJUFgttlFKXPQYWfpaLp/wzua/B/4de96DunUPL3oZlBTvREX4XUizqsE3
Ktr7CC1ywLJivKfzdcsiCkIZiaeJaPFTz0JVKpmEd1sh8PkumIU/1OpatePBwdhb
CZWo0KYNsrtn4mq550aHGHuVec96PHeixtn+hNxUa2nVrEUQTmQzNCUp6T0uXUo+
h7g4FY0Nz/DqqgQhPl+UKcVKI5F+vuU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:01:43 2025 by rpki-client