Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c44c399-9a74-370d-a4b5-815352ee8956.roa
File: 9c44c399-9a74-370d-a4b5-815352ee8956.roa (raw, json)
Hash identifier: heBKZ9Jot97CiVCFSi2ANjHqTsV/BAgQ+L4lwgE9rdQ=
Subject key identifier: 5F:B2:C6:E6:D5:D8:66:C0:DD:73:FA:6F:DF:F7:7F:95:3B:C6:4A:1F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858489340BB39FCB6DADEDF19FD00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c44c399-9a74-370d-a4b5-815352ee8956.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 20940
IP address blocks: 23.207.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:bb:39:fc:b6:da:de:df:19:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=99d17364-a887-496c-9f29-35cc5ae886f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:02:ca:93:75:84:8a:c6:f3:76:39:00:93:cb:
65:33:a9:4d:6a:f0:5a:4b:b0:4e:60:04:52:a3:e3:
08:c2:5f:89:41:b2:6a:31:cb:6f:b4:db:7d:d8:01:
ab:b3:00:8c:80:aa:21:a6:e1:41:8d:c1:06:52:5b:
03:34:f8:09:18:49:34:78:98:5b:95:4b:06:c0:ca:
3e:69:77:53:9e:0c:33:75:34:0c:3d:0a:17:b1:2a:
e5:6d:ca:06:35:47:25:ad:5b:c1:d4:82:79:32:1a:
85:08:5c:c5:32:11:e2:95:83:d1:df:97:1e:a0:83:
c9:38:1a:02:2f:fc:d9:50:bc:73:fa:ee:0a:8c:7a:
ef:c8:5b:3b:2b:e1:26:f5:9d:c3:bd:57:06:f0:4d:
43:62:53:45:38:f3:67:e7:41:fc:06:46:9b:87:fd:
60:db:5f:88:50:36:73:ac:8f:88:3a:b1:63:08:f7:
80:87:3e:36:41:3a:e9:e9:4c:88:f5:15:40:6e:7b:
b7:a6:3f:0e:c7:b9:5e:72:8b:d5:0e:5c:cc:fe:37:
4f:85:53:87:64:57:6c:3a:8e:86:00:5d:9d:b8:40:
47:56:b1:be:20:67:8f:c5:6f:51:14:b4:72:8f:a6:
20:83:e0:e9:73:13:47:f1:5d:db:cb:4a:f4:64:c3:
0e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B2:C6:E6:D5:D8:66:C0:DD:73:FA:6F:DF:F7:7F:95:3B:C6:4A:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c44c399-9a74-370d-a4b5-815352ee8956.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.207.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:86:6e:db:48:f8:52:99:11:0c:7c:6d:4d:9c:87:3c:e1:26:
fb:3f:a4:11:20:73:40:39:04:1d:80:6d:23:00:0a:e3:50:f9:
a0:32:a5:9c:15:00:d3:6d:d4:b7:c2:d5:db:3e:56:d8:cf:6a:
31:a3:d7:e1:93:8d:65:f1:6f:12:c2:0b:04:49:44:e7:34:67:
77:a5:f3:59:38:3e:e2:6c:e8:87:e8:b8:1f:e2:c2:af:fa:74:
39:7b:e3:43:cb:95:ad:07:31:89:16:97:6d:00:1b:7a:35:d3:
83:ee:23:3a:49:a7:da:d9:a9:32:af:1f:63:0f:00:2e:ad:d3:
c8:82:ca:05:a2:94:e7:c7:2f:c7:65:d4:1f:2f:27:dc:60:5d:
cc:eb:e0:20:99:eb:6b:da:fe:93:4c:c0:5d:cb:3a:74:6c:f8:
c7:ec:09:9d:ca:c9:53:b1:69:2f:44:9a:7e:73:6e:cd:c2:31:
3a:aa:49:fb:52:9d:28:9a:95:b3:42:9d:2c:15:d8:3d:c6:fa:
3a:27:b1:1f:61:11:a8:14:ff:50:9f:c0:da:5e:08:8e:89:d3:
0b:7d:20:61:4d:15:b4:8b:9a:b5:c8:8c:db:24:f1:5a:99:f7:
04:60:b4:ab:a1:02:ec:1a:52:8a:51:50:35:51:67:01:de:b2:
72:44:f6:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQLs5/Lba3t8Z/QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk
OTlkMTczNjQtYTg4Ny00OTZjLTlmMjktMzVjYzVhZTg4NmY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQLKk3WEisbzdjkAk8tlM6lNavBaS7BOYARS
o+MIwl+JQbJqMctvtNt92AGrswCMgKohpuFBjcEGUlsDNPgJGEk0eJhblUsGwMo+
aXdTngwzdTQMPQoXsSrlbcoGNUclrVvB1IJ5MhqFCFzFMhHilYPR35ceoIPJOBoC
L/zZULxz+u4KjHrvyFs7K+Em9Z3DvVcG8E1DYlNFOPNn50H8Bkabh/1g21+IUDZz
rI+IOrFjCPeAhz42QTrp6UyI9RVAbnu3pj8Ox7lecovVDlzM/jdPhVOHZFdsOo6G
AF2duEBHVrG+IGePxW9RFLRyj6Ygg+DpcxNH8V3by0r0ZMMOMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF+yxubV2GbA3XP6b9/3f5U7xkofMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWM0NGMzOTktOWE3NC0z
NzBkLWE0YjUtODE1MzUyZWU4OTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8/gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADqGbttI+FKZEQx8bU2chzzhJvs/pBEgc0A5BB2AbSMACuNQ+aAypZwV
ANNt1LfC1ds+VtjPajGj1+GTjWXxbxLCCwRJROc0Z3el81k4PuJs6IfouB/iwq/6
dDl740PLla0HMYkWl20AG3o104PuIzpJp9rZqTKvH2MPAC6t08iCygWilOfHL8dl
1B8vJ9xgXczr4CCZ62va/pNMwF3LOnRs+MfsCZ3KyVOxaS9Emn5zbs3CMTqqSftS
nSialbNCnSwV2D3G+jonsR9hEagU/1CfwNpeCI6J0wt9IGFNFbSLmrXIjNsk8VqZ
9wRgtKuhAuwaUopRUDVRZwHesnJE9sg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:14 2025 by rpki-client