Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9df76e3a-48d9-35f2-a4db-04a2c0708191.roa
File: 9df76e3a-48d9-35f2-a4db-04a2c0708191.roa (raw, json)
Hash identifier: ml31QJXrm/RLWKL4mlxCjsHrKJ+nHcklc/0OtrZs5a4=
Subject key identifier: 4A:40:CA:0B:D3:3A:22:49:65:6A:11:F5:59:1E:F5:26:A0:E5:88:E6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A209A5E462E4C025C249DC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9df76e3a-48d9-35f2-a4db-04a2c0708191.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.37.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:9a:5e:46:2e:4c:02:5c:24:9d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=9bdc4a8b-580c-4efd-ae28-630b8c765746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b5:e8:e2:ce:1f:e4:54:c7:07:b2:3d:83:b8:
df:12:10:f9:43:4e:72:4f:d4:30:75:d4:91:d8:ff:
1c:74:1f:ab:9b:2c:14:d0:8f:a9:b2:01:14:da:ee:
4a:02:d3:25:c7:f9:c8:e5:4c:d6:8b:b5:2a:01:e6:
b0:d7:1a:05:d2:9e:61:59:56:cb:36:29:a0:ea:d5:
83:ab:31:72:cc:42:db:25:a0:ce:2d:0f:0b:87:dd:
a7:99:52:93:08:09:b0:cd:68:a9:e2:c5:0d:3d:e8:
a9:2a:aa:74:dc:1f:63:1e:ad:93:b5:b9:2b:2b:6d:
10:9d:7b:86:3f:a1:48:4a:fb:a6:da:34:90:84:f7:
e0:e9:0f:5c:bd:da:6a:99:ad:90:c2:61:87:f3:62:
6e:f5:3e:3a:76:5b:12:c9:68:42:df:65:af:61:9c:
27:7b:32:ef:cf:df:f9:2d:cb:a3:8f:24:c2:d9:35:
9b:c5:3b:a7:f6:ef:9c:6e:e3:9f:d3:18:1f:14:f4:
5f:d3:86:b1:0c:0a:6c:42:a1:12:04:5c:f2:9c:ba:
3f:a3:c1:17:cd:a3:29:90:04:f5:4c:8d:59:11:20:
03:98:d2:f3:11:e7:d9:e5:d2:b3:21:36:f2:f7:ff:
44:a3:81:c7:54:e5:c1:f5:e5:69:19:91:bf:15:9a:
d5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:40:CA:0B:D3:3A:22:49:65:6A:11:F5:59:1E:F5:26:A0:E5:88:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9df76e3a-48d9-35f2-a4db-04a2c0708191.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.37.230.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:76:70:84:a0:0c:f0:f4:34:53:69:34:9c:c6:1b:21:1a:1a:
2a:72:31:b9:3e:a5:14:93:34:9d:88:86:b4:4d:a4:3c:f2:21:
96:27:d9:85:15:95:d6:26:0c:6f:66:a2:0b:2d:56:b4:c7:c0:
ab:c7:fb:31:a1:10:1b:00:b8:29:fb:0b:a6:05:6c:3e:6d:26:
12:42:c8:09:3a:9a:56:32:17:e6:dc:b9:41:6f:36:67:f6:ed:
a0:f5:59:8a:46:e8:f0:37:64:89:6e:3e:77:87:71:26:35:a9:
8b:d6:ee:95:3c:a3:43:be:25:41:ef:a8:ec:8c:46:2b:e3:d0:
37:4f:ee:60:6a:1c:a1:c4:77:6d:e0:88:a6:47:b3:08:0a:d3:
4f:3e:cd:c4:9b:38:2f:a7:ab:21:e6:69:92:40:c1:c7:d4:3b:
c6:78:cd:43:8f:bd:cf:e7:12:5b:6c:50:f9:79:c4:6f:96:7b:
b0:01:42:c6:fa:f7:4a:ff:90:87:44:a3:02:32:4e:c7:57:af:
b8:ac:ef:5c:10:12:df:2d:95:fa:75:35:89:13:7c:00:a8:0a:
d9:a4:ba:c4:1e:ca:4f:2a:ca:66:d9:c6:0c:2f:f1:c5:ee:63:
21:de:9c:2a:1a:97:16:41:a6:9e:8e:75:d8:f4:1b:36:70:ef:
85:e6:b9:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6IJpeRi5MAlwkncAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk
OWJkYzRhOGItNTgwYy00ZWZkLWFlMjgtNjMwYjhjNzY1NzQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLXo4s4f5FTHB7I9g7jfEhD5Q05yT9QwddSR
2P8cdB+rmywU0I+psgEU2u5KAtMlx/nI5UzWi7UqAeaw1xoF0p5hWVbLNimg6tWD
qzFyzELbJaDOLQ8Lh92nmVKTCAmwzWip4sUNPeipKqp03B9jHq2TtbkrK20QnXuG
P6FISvum2jSQhPfg6Q9cvdpqma2QwmGH82Ju9T46dlsSyWhC32WvYZwnezLvz9/5
LcujjyTC2TWbxTun9u+cbuOf0xgfFPRf04axDApsQqESBFzynLo/o8EXzaMpkAT1
TI1ZESADmNLzEefZ5dKzITby9/9Eo4HHVOXB9eVpGZG/FZrVUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEpAygvTOiJJZWoR9Vke9Sag5YjmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWRmNzZlM2EtNDhkOS0z
NWYyLWE0ZGItMDRhMmMwNzA4MTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyXmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABR2cISgDPD0NFNpNJzGGyEaGipyMbk+pRSTNJ2IhrRNpDzyIZYn2YUV
ldYmDG9mogstVrTHwKvH+zGhEBsAuCn7C6YFbD5tJhJCyAk6mlYyF+bcuUFvNmf2
7aD1WYpG6PA3ZIluPneHcSY1qYvW7pU8o0O+JUHvqOyMRivj0DdP7mBqHKHEd23g
iKZHswgK008+zcSbOC+nqyHmaZJAwcfUO8Z4zUOPvc/nEltsUPl5xG+We7ABQsb6
90r/kIdEowIyTsdXr7is71wQEt8tlfp1NYkTfACoCtmkusQeyk8qymbZxgwv8cXu
YyHenCoalxZBpp6Oddj0GzZw74XmuUg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:11:33 2025 by rpki-client