Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9561cbb5-46d4-351e-95d3-273fb0129542.roa
File: 9561cbb5-46d4-351e-95d3-273fb0129542.roa (raw, json)
Hash identifier: e+PaXcyhfsusjA5KvMxpmo5nIAzNBCkUqMpyxzCmZ74=
Subject key identifier: 9C:51:05:69:ED:3E:F8:F2:D6:3A:3C:AB:28:B7:AF:36:31:1E:91:71
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A400C837896E1E4530B35680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9561cbb5-46d4-351e-95d3-273fb0129542.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.195.128.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:c8:37:89:6e:1e:45:30:b3:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=bc6fdfa4-52cc-4ce0-92eb-c811cfe868be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:09:97:88:2e:c3:ca:11:a6:46:95:e0:c6:31:
75:29:9b:b6:5f:e1:1d:d7:e9:b1:60:b6:c9:ad:56:
bf:48:67:f6:26:0e:2a:15:c5:1f:30:bb:cf:fa:11:
4a:ac:c3:95:08:e0:c6:b4:8a:d0:73:92:1c:45:a6:
7f:f6:b0:46:4e:bd:66:7a:e1:eb:e2:87:8d:dd:5a:
b6:66:74:63:4a:d4:ee:d1:5b:a6:f9:e9:d4:a6:39:
59:98:3c:74:04:8e:29:bb:76:0c:b1:f9:b9:97:ca:
20:dc:5b:5f:7a:40:43:8e:c9:a0:87:69:36:75:37:
14:bf:eb:5c:b4:74:f4:f2:a8:6f:97:db:ec:2a:d0:
3f:97:13:a7:85:c3:72:2b:49:a5:7c:37:10:cc:f5:
1d:9f:a1:d8:70:ca:01:8a:29:d8:83:59:e3:8b:1c:
6c:20:26:a6:c1:4f:e8:48:65:9a:db:e4:cd:12:20:
ef:c1:75:b2:ad:d3:88:3a:ca:2a:c8:72:7a:8e:a0:
e5:bf:c7:7d:a0:30:3b:04:b8:f8:b9:3e:39:fd:fb:
89:b2:13:04:38:3c:3b:3b:18:6c:9f:70:ed:7d:1b:
d9:30:4d:61:e3:61:26:70:7a:25:28:44:df:c5:04:
26:8e:1d:57:32:6d:79:20:49:80:da:71:e9:99:fd:
db:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:51:05:69:ED:3E:F8:F2:D6:3A:3C:AB:28:B7:AF:36:31:1E:91:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9561cbb5-46d4-351e-95d3-273fb0129542.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.195.128.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:4c:4c:2e:1a:27:e4:e1:71:aa:d5:0f:4e:c2:ec:1c:74:19:
87:10:62:96:a7:26:c4:19:85:e2:27:fa:68:cb:54:54:6a:c9:
16:6c:d9:22:ce:42:58:c1:46:49:7c:f6:c6:6e:ef:df:09:54:
4d:bb:22:8e:99:df:d1:fb:f9:dd:00:dc:2c:35:78:37:66:98:
25:5f:3d:1e:c2:ff:c7:4f:32:aa:ad:64:cd:60:c3:62:da:31:
54:2a:97:c8:9d:73:08:6a:1d:b9:6e:af:6d:18:13:17:49:9f:
1f:90:d8:4f:c3:16:bf:d2:2e:88:e8:ac:44:3d:9a:93:fe:79:
96:a7:08:e7:fc:ce:84:42:74:ea:28:59:5c:e2:15:20:88:3b:
78:4c:7b:1a:cf:d0:87:f9:c1:b3:d5:47:63:e1:08:4e:a4:d8:
8b:d0:f6:f9:f5:21:e1:39:72:4e:22:c0:60:c0:25:49:db:d3:
ba:78:22:44:d4:fc:32:2a:ce:e9:9c:c7:4f:81:b8:e6:7f:f2:
78:9f:b2:07:20:d0:3b:15:ab:1b:57:0d:7a:b9:ed:a4:ac:e7:
0c:88:9b:3e:fd:7f:76:69:38:16:a7:a2:27:2c:dd:b5:7a:fb:
f9:5e:13:9d:db:de:82:ab:45:51:e8:ea:a7:ec:f5:28:b9:e6:
1c:8c:5f:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAMg3iW4eRTCzVoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk
YmM2ZmRmYTQtNTJjYy00Y2UwLTkyZWItYzgxMWNmZTg2OGJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQmXiC7DyhGmRpXgxjF1KZu2X+Ed1+mxYLbJ
rVa/SGf2Jg4qFcUfMLvP+hFKrMOVCODGtIrQc5IcRaZ/9rBGTr1meuHr4oeN3Vq2
ZnRjStTu0Vum+enUpjlZmDx0BI4pu3YMsfm5l8og3FtfekBDjsmgh2k2dTcUv+tc
tHT08qhvl9vsKtA/lxOnhcNyK0mlfDcQzPUdn6HYcMoBiinYg1njixxsICamwU/o
SGWa2+TNEiDvwXWyrdOIOsoqyHJ6jqDlv8d9oDA7BLj4uT45/fuJshMEODw7Oxhs
n3DtfRvZME1h42EmcHolKETfxQQmjh1XMm15IEmA2nHpmf3bmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJxRBWntPvjy1jo8qyi3rzYxHpFxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTU2MWNiYjUtNDZkNC0z
NTFlLTk1ZDMtMjczZmIwMTI5NTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8OAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIJMTC4aJ+ThcarVD07C7Bx0GYcQYpanJsQZheIn+mjLVFRqyRZs2SLO
QljBRkl89sZu798JVE27Io6Z39H7+d0A3Cw1eDdmmCVfPR7C/8dPMqqtZM1gw2La
MVQql8idcwhqHblur20YExdJnx+Q2E/DFr/SLojorEQ9mpP+eZanCOf8zoRCdOoo
WVziFSCIO3hMexrP0If5wbPVR2PhCE6k2IvQ9vn1IeE5ck4iwGDAJUnb07p4IkTU
/DIqzumcx0+BuOZ/8nifsgcg0DsVqxtXDXq57aSs5wyImz79f3ZpOBanoics3bV6
+/leE53b3oKrRVHo6qfs9Si55hyMXzo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:52 2025 by rpki-client