Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b8e17af-d372-3d58-b7c3-a42bf96bbf79.roa
File: 9b8e17af-d372-3d58-b7c3-a42bf96bbf79.roa (raw, json)
Hash identifier: 4QKKfkcMjhxe5Jvjf/IXU4ClURgy7DKTzBHUnKloWyk=
Subject key identifier: 4B:00:95:11:1E:7D:FE:6A:B9:98:41:CC:21:90:D4:84:D8:F5:30:B8
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848BBBB911D454DEF597F130A40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b8e17af-d372-3d58-b7c3-a42bf96bbf79.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.213.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:91:1d:45:4d:ef:59:7f:13:0a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=6a96958a-cec8-4e36-9866-0dd5487734d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8c:7b:c7:64:8c:9e:ba:32:1b:ff:fa:74:de:
bd:69:69:ef:ec:33:b7:2a:39:cb:92:9d:c3:8f:d5:
f8:be:a5:ec:27:8a:49:d3:b8:f7:bc:94:67:fb:f4:
55:89:d8:39:89:f9:97:44:e4:41:ea:b8:86:f3:30:
31:b7:9d:ce:54:be:09:66:66:c4:e9:6e:81:b1:63:
68:e9:c7:3d:be:22:bd:b0:c2:c8:44:3d:99:d7:d8:
dc:a9:f9:a8:44:d9:ca:91:74:e6:68:35:67:44:60:
12:39:e1:25:1e:a9:e4:73:50:88:65:72:1e:34:ed:
6c:2e:ae:da:3e:de:45:e5:0c:7d:68:06:6b:83:d8:
37:8d:3f:2f:0a:fa:a2:53:34:2c:14:03:28:fd:b7:
39:e0:a4:43:89:b6:e3:29:41:da:63:7d:00:11:40:
c7:b5:21:f7:33:7c:b3:10:07:04:43:73:42:a3:68:
87:9e:ee:53:23:17:50:0f:be:22:76:92:dd:5c:1c:
32:5f:85:f5:2a:1a:c1:35:e3:a3:43:e4:07:a0:37:
53:9e:03:e2:83:d5:a1:16:4f:e6:a5:f6:aa:92:56:
95:66:88:c2:59:1f:56:cb:6c:30:a9:dd:96:cf:c7:
3b:05:37:80:45:c6:21:b9:ed:2b:88:e3:6b:a3:77:
ce:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:00:95:11:1E:7D:FE:6A:B9:98:41:CC:21:90:D4:84:D8:F5:30:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b8e17af-d372-3d58-b7c3-a42bf96bbf79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.213.175.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:e2:b0:d4:92:a5:3b:9f:cf:f0:28:c6:90:83:f8:f7:02:3c:
29:35:94:27:51:fd:6b:64:db:05:77:25:f9:9c:d1:9a:e6:91:
07:07:5f:d9:1f:f9:45:df:fe:36:6b:9d:a6:2b:ce:77:b7:36:
57:8e:33:e7:a8:93:97:f4:0d:1a:79:d9:6c:c9:5d:19:d4:b9:
73:13:ee:7b:b4:73:3c:a3:57:af:cd:e1:87:d9:87:dd:67:d6:
a9:5b:fb:70:1d:d2:c6:b6:fa:1c:aa:44:05:a3:dd:6d:72:30:
0d:fe:a1:55:73:92:77:ce:af:c7:04:95:71:84:e8:e5:53:fb:
9a:cb:e2:63:e4:6a:e4:91:53:83:15:0b:81:80:c7:3d:6d:37:
7d:1f:22:8b:d5:9c:a8:2b:a4:4a:26:50:08:0c:b4:e2:2f:a5:
17:06:62:91:13:87:9a:f7:b0:74:94:1e:39:c7:27:1b:11:9c:
6c:f2:b1:90:c1:ae:69:2a:98:ae:c3:34:cb:60:c5:1c:2b:f3:
1f:5b:06:ad:3e:67:90:75:a8:90:b7:dd:27:52:32:92:82:d5:
fe:41:75:51:5a:32:ca:2f:9f:98:b2:6a:38:d5:ac:b6:82:5b:
fd:c9:8e:40:53:be:be:9b:b9:1c:9e:76:c7:40:36:9f:9d:32:
b9:23:af:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u5EdRU3vWX8TCkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk
NmE5Njk1OGEtY2VjOC00ZTM2LTk4NjYtMGRkNTQ4NzczNGQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIx7x2SMnroyG//6dN69aWnv7DO3KjnLkp3D
j9X4vqXsJ4pJ07j3vJRn+/RVidg5ifmXRORB6riG8zAxt53OVL4JZmbE6W6BsWNo
6cc9viK9sMLIRD2Z19jcqfmoRNnKkXTmaDVnRGASOeElHqnkc1CIZXIeNO1sLq7a
Pt5F5Qx9aAZrg9g3jT8vCvqiUzQsFAMo/bc54KRDibbjKUHaY30AEUDHtSH3M3yz
EAcEQ3NCo2iHnu5TIxdQD74idpLdXBwyX4X1KhrBNeOjQ+QHoDdTngPig9WhFk/m
pfaqklaVZojCWR9Wy2wwqd2Wz8c7BTeARcYhue0riONro3fOnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEsAlREeff5quZhBzCGQ1ITY9TC4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWI4ZTE3YWYtZDM3Mi0z
ZDU4LWI3YzMtYTQyYmY5NmJiZjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9WvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAzisNSSpTufz/AoxpCD+PcCPCk1lCdR/Wtk2wV3Jfmc0ZrmkQcHX9kf
+UXf/jZrnaYrzne3NleOM+eok5f0DRp52WzJXRnUuXMT7nu0czyjV6/N4YfZh91n
1qlb+3Ad0sa2+hyqRAWj3W1yMA3+oVVzknfOr8cElXGE6OVT+5rL4mPkauSRU4MV
C4GAxz1tN30fIovVnKgrpEomUAgMtOIvpRcGYpETh5r3sHSUHjnHJxsRnGzysZDB
rmkqmK7DNMtgxRwr8x9bBq0+Z5B1qJC33SdSMpKC1f5BdVFaMsovn5iyajjVrLaC
W/3JjkBTvr6buRyedsdANp+dMrkjr78=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:55:33 2025 by rpki-client