Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/976d46e9-2aa4-38ef-98b1-a5986e3fa725.roa
File: 976d46e9-2aa4-38ef-98b1-a5986e3fa725.roa (raw, json)
Hash identifier: CnYTFOjNZxrlgJZ4mb0Ey2nu75kzdQl5TAoSBMKKjIA=
Subject key identifier: DB:1B:47:F7:12:A1:D2:76:09:E3:05:77:7E:C3:EB:73:F4:DB:1F:6B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584890760EC83ADB5BFB12870AA0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/976d46e9-2aa4-38ef-98b1-a5986e3fa725.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 3786
IP address blocks: 23.201.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:76:0e:c8:3a:db:5b:fb:12:87:0a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=691706ea-7fbf-4a5c-8bcf-a261d480fbf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:05:12:4f:f7:44:bf:c2:d1:17:12:03:be:71:
9d:e8:2f:e1:ed:b4:f2:d4:ed:06:63:ec:97:f4:df:
87:f2:ef:e9:84:32:9e:bc:f1:06:c6:82:a4:72:14:
3e:0d:59:47:66:4c:04:d4:6d:16:44:e2:74:ad:e2:
02:d8:a4:4e:52:75:58:92:6a:e4:92:7c:c2:8f:59:
a4:e2:df:28:34:fb:b0:70:58:f7:de:5c:a7:48:3b:
36:11:e7:be:9c:06:8c:d8:ab:26:e1:e5:2b:c4:f6:
fe:13:94:f9:90:15:32:da:42:b0:9e:d1:62:3c:05:
46:83:ef:18:27:58:cf:b0:a7:b7:9b:1a:74:35:50:
91:fa:fd:49:03:84:1d:58:a8:c6:07:57:21:d0:0c:
71:37:d7:f2:99:a8:51:9c:0f:84:05:fb:25:24:41:
2c:3b:49:c0:1f:8a:fa:05:53:c6:5e:f2:45:d3:9b:
eb:71:fb:13:9b:d8:41:0b:dc:2b:2e:61:21:a1:a6:
0a:be:0c:5c:7e:d6:46:9a:df:ef:c7:24:df:17:9c:
25:0e:5e:89:71:98:41:ca:a4:7a:f2:55:58:c1:88:
e8:1c:40:01:05:b1:27:80:c5:18:30:07:5f:c5:45:
79:1b:e7:63:84:0a:4b:b4:5e:ed:3f:37:3e:21:af:
e2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1B:47:F7:12:A1:D2:76:09:E3:05:77:7E:C3:EB:73:F4:DB:1F:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/976d46e9-2aa4-38ef-98b1-a5986e3fa725.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.201.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:5b:43:b6:0f:9c:8b:4c:6f:e1:5a:b3:8c:b4:67:0b:be:1e:
b0:45:5e:31:16:ac:f3:15:36:9c:57:fd:c3:3c:12:7a:03:cf:
09:02:a7:a0:51:f6:96:c7:70:93:08:ee:eb:31:8e:14:f3:68:
c3:73:ed:71:9c:43:85:f7:ff:81:2d:59:da:ab:f4:fa:ca:51:
80:82:bb:3e:a8:09:70:79:8d:17:c4:bb:4b:04:40:15:db:f1:
0a:2b:59:1f:38:ea:99:f2:ed:03:29:96:1e:27:61:2e:f9:8e:
92:d7:e3:6f:a2:d9:47:9f:fa:b7:c2:a8:15:63:8f:39:e7:03:
0f:44:71:3c:d2:87:58:1d:bd:8e:19:6e:ae:d8:e5:25:1f:a6:
85:b1:f2:1c:c4:12:a3:25:34:a1:cb:a5:bc:c8:6e:74:b2:8b:
df:e4:83:f2:6b:d4:ec:42:ba:c5:e9:b9:23:6a:fb:3a:27:a5:
23:fc:f1:c8:8f:0a:76:5e:61:1e:36:54:8c:96:f0:61:1a:f4:
fa:45:4e:30:78:69:81:a1:a1:96:e2:a4:54:96:90:4b:22:28:
6f:c2:fb:93:ab:e4:c9:15:2b:f9:b4:73:72:ed:c1:2f:d5:b8:
c6:22:9b:c8:e0:c4:e5:1c:b7:d9:cc:28:9f:4f:e4:0f:48:a6:
8b:0e:3f:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdg7IOttb+xKHCqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk
NjkxNzA2ZWEtN2ZiZi00YTVjLThiY2YtYTI2MWQ0ODBmYmY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQUST/dEv8LRFxIDvnGd6C/h7bTy1O0GY+yX
9N+H8u/phDKevPEGxoKkchQ+DVlHZkwE1G0WROJ0reIC2KROUnVYkmrkknzCj1mk
4t8oNPuwcFj33lynSDs2Eee+nAaM2Ksm4eUrxPb+E5T5kBUy2kKwntFiPAVGg+8Y
J1jPsKe3mxp0NVCR+v1JA4QdWKjGB1ch0AxxN9fymahRnA+EBfslJEEsO0nAH4r6
BVPGXvJF05vrcfsTm9hBC9wrLmEhoaYKvgxcftZGmt/vxyTfF5wlDl6JcZhByqR6
8lVYwYjoHEABBbEngMUYMAdfxUV5G+djhApLtF7tPzc+Ia/iYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNsbR/cSodJ2CeMFd37D63P02x9rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTc2ZDQ2ZTktMmFhNC0z
OGVmLTk4YjEtYTU5ODZlM2ZhNzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8k6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAdbQ7YPnItMb+Fas4y0Zwu+HrBFXjEWrPMVNpxX/cM8EnoDzwkCp6BR
9pbHcJMI7usxjhTzaMNz7XGcQ4X3/4EtWdqr9PrKUYCCuz6oCXB5jRfEu0sEQBXb
8QorWR846pny7QMplh4nYS75jpLX42+i2Uef+rfCqBVjjznnAw9EcTzSh1gdvY4Z
bq7Y5SUfpoWx8hzEEqMlNKHLpbzIbnSyi9/kg/Jr1OxCusXpuSNq+zonpSP88ciP
CnZeYR42VIyW8GEa9PpFTjB4aYGhoZbipFSWkEsiKG/C+5Or5MkVK/m0c3LtwS/V
uMYim8jgxOUct9nMKJ9P5A9IposOP8I=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:32 2025 by rpki-client