Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8fb44570-1347-3dc8-9fd9-d36db510b450.roa
File: 8fb44570-1347-3dc8-9fd9-d36db510b450.roa (raw, json)
Hash identifier: HgOZMrq8dZLHjEHjrCxPp5bp7G1pNY56zNePQiRZHSU=
Subject key identifier: C0:87:6C:7E:8C:A9:A6:7B:61:73:6F:D5:CB:5F:9B:A5:54:59:03:89
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A400DF5FE9A26057BB9A9200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8fb44570-1347-3dc8-9fd9-d36db510b450.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.196.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:df:5f:e9:a2:60:57:bb:9a:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=a501153a-99ec-418d-ba66-bba00c872aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2f:a2:ea:4c:7f:00:3f:aa:26:e4:20:a7:8d:
84:8b:59:3a:7d:ae:a9:37:37:38:f8:5c:5f:05:0b:
f4:28:04:1f:95:0d:f1:bf:97:f7:55:23:eb:7c:ef:
ba:2c:26:17:e4:21:a1:50:5e:94:c1:a4:8c:9a:6c:
2e:dc:80:9d:3d:52:4c:4a:4d:82:ea:fd:c3:58:67:
d6:26:e6:8d:9f:70:2f:de:03:4d:4a:e1:d9:c3:c2:
22:de:c4:70:08:7f:53:e1:0b:3d:9a:a9:6c:15:44:
96:6c:3a:db:05:cf:c6:f0:df:31:51:0c:29:91:11:
3e:21:36:2c:36:a7:e4:31:f0:e9:e6:91:ad:38:3d:
a7:cd:dc:fd:dd:7a:4c:d5:cc:5b:dc:01:fe:e2:e1:
37:fb:88:ea:64:80:63:68:10:5f:f1:a1:80:4b:2c:
79:b2:08:90:ee:1f:28:d7:1f:a0:b5:f1:42:84:6e:
d5:0f:27:b1:c1:77:93:04:0d:82:d7:a5:33:84:13:
23:41:66:8b:9a:58:0b:49:47:97:f2:c2:44:f6:66:
24:a4:ef:da:e4:97:2c:af:b8:cd:c2:29:3a:ac:c4:
45:84:f6:87:53:8d:a2:0d:05:4f:b3:6d:1d:3c:32:
6b:00:6d:95:e0:ff:39:ee:57:9a:d2:41:b8:7a:8d:
f4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:87:6C:7E:8C:A9:A6:7B:61:73:6F:D5:CB:5F:9B:A5:54:59:03:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8fb44570-1347-3dc8-9fd9-d36db510b450.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.196.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:52:a5:97:a8:a1:c8:ae:e7:7e:9b:97:47:0a:ef:13:c3:84:
87:ac:e6:3a:40:ab:67:88:a6:a3:69:b4:70:56:d1:b5:28:83:
e7:96:0f:81:b1:fa:c3:14:af:88:02:f1:d1:c3:6a:73:b6:f5:
fa:96:f1:1e:0d:45:45:36:05:fd:f9:fa:21:50:d8:1a:62:b4:
23:4d:f7:51:23:92:e6:de:fc:0d:6f:16:11:97:72:bf:b6:d5:
9b:2f:06:2b:4f:3f:b8:91:d0:5c:98:02:72:68:15:73:0b:f2:
82:c4:4e:70:dd:80:db:ef:91:f9:5d:80:aa:42:1e:5b:c4:35:
87:da:60:e5:83:e2:65:df:26:f4:a7:5a:f2:c5:b7:26:27:c2:
8d:43:d4:6a:07:f6:0a:2f:17:b2:2f:5e:95:a7:f5:1c:b8:59:
c9:ad:0c:37:87:6e:50:9c:26:78:10:f8:14:f6:ad:4d:b1:02:
69:ec:86:11:3f:6c:29:d4:c1:e2:0d:5b:30:4c:b4:37:58:ef:
5c:b2:13:11:f2:a0:00:33:aa:d3:1b:b7:c1:c3:b4:ac:7a:a8:
02:e1:c4:ab:bd:fb:c2:54:40:47:90:d9:df:6c:9e:ff:b5:f0:
09:33:97:90:5b:7c:1d:d7:21:74:fb:47:fd:4f:63:ad:ca:d5:
66:da:fa:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAN9f6aJgV7uakgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk
YTUwMTE1M2EtOTllYy00MThkLWJhNjYtYmJhMDBjODcyYWVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS+i6kx/AD+qJuQgp42Ei1k6fa6pNzc4+Fxf
BQv0KAQflQ3xv5f3VSPrfO+6LCYX5CGhUF6UwaSMmmwu3ICdPVJMSk2C6v3DWGfW
JuaNn3Av3gNNSuHZw8Ii3sRwCH9T4Qs9mqlsFUSWbDrbBc/G8N8xUQwpkRE+ITYs
NqfkMfDp5pGtOD2nzdz93XpM1cxb3AH+4uE3+4jqZIBjaBBf8aGASyx5sgiQ7h8o
1x+gtfFChG7VDyexwXeTBA2C16UzhBMjQWaLmlgLSUeX8sJE9mYkpO/a5Jcsr7jN
wik6rMRFhPaHU42iDQVPs20dPDJrAG2V4P857lea0kG4eo30kQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMCHbH6MqaZ7YXNv1ctfm6VUWQOJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGZiNDQ1NzAtMTM0Ny0z
ZGM4LTlmZDktZDM2ZGI1MTBiNDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF8RgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEZSpZeoociu536bl0cK7xPDhIes5jpAq2eIpqNptHBW0bUog+eWD4Gx
+sMUr4gC8dHDanO29fqW8R4NRUU2Bf35+iFQ2BpitCNN91Ejkube/A1vFhGXcr+2
1ZsvBitPP7iR0FyYAnJoFXML8oLETnDdgNvvkfldgKpCHlvENYfaYOWD4mXfJvSn
WvLFtyYnwo1D1GoH9govF7IvXpWn9Ry4WcmtDDeHblCcJngQ+BT2rU2xAmnshhE/
bCnUweINWzBMtDdY71yyExHyoAAzqtMbt8HDtKx6qALhxKu9+8JUQEeQ2d9snv+1
8Akzl5BbfB3XIXT7R/1PY63K1Wba+pg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:02:31 2025 by rpki-client