Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/920723b9-ee51-36b1-88d7-598f7619f37d.roa
File: 920723b9-ee51-36b1-88d7-598f7619f37d.roa (raw, json)
Hash identifier: llsy7gknstBVfKS8Hzh/P6Vdg11OpbPAFKfDZv3GUQE=
Subject key identifier: D5:45:49:55:78:C8:18:F4:3E:92:83:6B:7E:EB:A8:1A:77:B0:87:20
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848854B6D630DF780F1E4A3C840
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/920723b9-ee51-36b1-88d7-598f7619f37d.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 20940
IP address blocks: 23.53.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:6d:63:0d:f7:80:f1:e4:a3:c8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=927c4490-1137-4977-8a50-572aa536bba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:78:1b:b6:36:ac:57:aa:8c:f4:e7:c8:38:01:
06:4a:1b:fe:cf:ff:d7:d4:ce:aa:f0:b9:96:d8:71:
b7:9d:64:35:e9:d8:86:78:96:32:79:46:0a:7a:4e:
bd:df:27:62:6a:4c:be:ee:ff:79:9c:97:cf:95:17:
b9:18:d8:6e:22:fc:25:0f:47:26:91:b3:2c:36:de:
33:df:9f:eb:02:72:0b:24:86:a5:2a:82:65:b8:51:
17:1d:a9:70:49:7c:7a:8c:51:71:f9:dc:99:4d:a5:
4f:07:19:a7:84:79:f7:59:45:ab:67:0b:45:a7:a8:
d5:cf:ec:f0:36:5d:0b:fa:04:60:ca:bf:16:30:e6:
65:5e:1f:32:38:ae:ff:8a:9d:a9:15:00:47:1c:f9:
4e:1b:d9:06:5d:00:de:c9:df:b2:ae:5f:38:cf:6d:
67:6f:d9:52:bf:b8:bc:be:e6:9e:18:47:a1:99:1e:
fd:fb:bc:30:91:e3:78:3a:81:81:e2:98:1f:4a:ee:
c4:76:e7:4c:5b:38:53:98:26:68:7f:13:72:37:60:
06:cc:6e:d1:5f:02:26:bb:d1:d1:e3:f0:7b:df:55:
0b:da:54:fe:ab:de:2c:21:5c:43:0b:6c:e3:6b:69:
a7:4c:02:da:7b:13:fd:73:7e:a1:a3:6f:31:a9:86:
b3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:45:49:55:78:C8:18:F4:3E:92:83:6B:7E:EB:A8:1A:77:B0:87:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/920723b9-ee51-36b1-88d7-598f7619f37d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.53.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:d2:04:40:b4:84:43:91:48:c0:f6:f3:25:c1:8a:78:47:07:
6b:e4:db:3e:45:86:2e:69:28:cd:8a:79:eb:80:d1:30:b9:3a:
13:9d:35:c1:cf:ca:f7:4b:63:20:39:da:5c:22:cd:5c:cb:02:
52:39:9d:70:1b:18:d4:08:00:2b:c1:d5:2c:dc:a5:a5:3d:58:
52:7f:21:29:ac:ef:a8:fa:f7:fb:2d:be:eb:72:3e:7d:2a:10:
e7:7e:b8:84:04:62:2b:29:a9:a9:4a:28:ab:76:86:3c:54:f1:
75:5f:23:69:79:34:b4:4e:6d:2a:08:12:31:c1:0d:18:d9:1f:
f8:8b:5e:33:c4:60:35:4f:71:e1:73:6d:9f:77:44:0b:dc:8b:
cc:5f:a2:e8:d2:b9:f4:b4:a2:fd:a7:ca:a2:b7:c6:c9:be:35:
32:a3:67:cd:8d:18:20:45:22:40:44:5c:3b:4c:13:f3:5b:f3:
30:47:c0:d0:ec:21:00:44:40:33:f8:a4:b3:88:2b:9f:f1:24:
e2:f3:95:68:ad:67:8c:da:6b:a8:49:d3:71:c1:9a:52:43:6e:
a0:a7:5f:ba:8c:ae:96:b8:ee:f2:f7:a6:48:2d:b3:64:b2:e6:
25:d4:37:12:d7:a7:70:c8:0a:92:b3:3d:a1:e4:7c:d1:fc:ad:
ca:a8:c2:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiFS21jDfeA8eSjyEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk
OTI3YzQ0OTAtMTEzNy00OTc3LThhNTAtNTcyYWE1MzZiYmE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3gbtjasV6qM9OfIOAEGShv+z//X1M6q8LmW
2HG3nWQ16diGeJYyeUYKek693ydiaky+7v95nJfPlRe5GNhuIvwlD0cmkbMsNt4z
35/rAnILJIalKoJluFEXHalwSXx6jFFx+dyZTaVPBxmnhHn3WUWrZwtFp6jVz+zw
Nl0L+gRgyr8WMOZlXh8yOK7/ip2pFQBHHPlOG9kGXQDeyd+yrl84z21nb9lSv7i8
vuaeGEehmR79+7wwkeN4OoGB4pgfSu7EdudMWzhTmCZofxNyN2AGzG7RXwImu9HR
4/B731UL2lT+q94sIVxDC2zja2mnTALaexP9c36ho28xqYazdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNVFSVV4yBj0PpKDa37rqBp3sIcgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTIwNzIzYjktZWU1MS0z
NmIxLTg4ZDctNTk4Zjc2MTlmMzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzUMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFDSBEC0hEORSMD28yXBinhHB2vk2z5Fhi5pKM2KeeuA0TC5OhOdNcHP
yvdLYyA52lwizVzLAlI5nXAbGNQIACvB1SzcpaU9WFJ/ISms76j69/stvutyPn0q
EOd+uIQEYispqalKKKt2hjxU8XVfI2l5NLRObSoIEjHBDRjZH/iLXjPEYDVPceFz
bZ93RAvci8xfoujSufS0ov2nyqK3xsm+NTKjZ82NGCBFIkBEXDtME/Nb8zBHwNDs
IQBEQDP4pLOIK5/xJOLzlWitZ4zaa6hJ03HBmlJDbqCnX7qMrpa47vL3pkgts2Sy
5iXUNxLXp3DICpKzPaHkfNH8rcqowrU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:04:40 2025 by rpki-client