Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3a4254c-0c2e-31d6-8b92-f68caca61e13.roa
File: a3a4254c-0c2e-31d6-8b92-f68caca61e13.roa (raw, json)
Hash identifier: DAsem36A78wvWI50EDc4ZE+1DqaikzoER3Vc3cLQhTs=
Subject key identifier: 97:F3:77:36:5C:F8:26:DA:BC:A3:28:E0:4A:B3:EC:21:3E:0C:72:55
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A208F08F1A4FEC54F08B8C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3a4254c-0c2e-31d6-8b92-f68caca61e13.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 35994
IP address blocks: 23.36.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:8f:08:f1:a4:fe:c5:4f:08:b8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=5f793f2e-e529-4d8c-b7a6-ab1b84e64868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:f3:5c:b3:4f:20:44:90:79:2c:02:6e:c6:
10:e8:fe:00:c5:ad:6e:be:65:40:2c:3e:06:b6:ec:
fb:92:c2:a3:64:bd:44:a0:4a:f6:3c:ad:27:2d:b4:
32:87:db:8d:3b:74:23:22:ee:fa:e7:ae:50:70:71:
b7:b2:41:17:94:d7:ae:31:01:69:02:0d:29:60:55:
70:0d:cd:0d:6b:1d:a7:9e:cf:30:be:bc:ca:3f:2f:
93:b7:ea:15:3b:b2:80:cd:fe:44:eb:4a:e2:25:7c:
f5:ec:7c:72:e1:80:4f:32:df:48:b5:e0:99:82:28:
9a:0c:bd:63:d6:d8:20:54:44:5f:ac:a6:02:10:37:
00:2c:9f:10:1d:90:56:94:05:dd:c2:f1:53:e9:b6:
52:a9:ba:4b:d7:85:f2:aa:28:e6:73:19:88:a1:d4:
f2:5f:0c:3e:0c:7a:26:c2:81:17:eb:d7:71:0d:8c:
a2:39:9e:b6:62:c9:f8:2e:c9:97:be:2b:7d:84:06:
94:46:28:42:91:a0:d0:05:00:a5:48:1d:fa:65:19:
a7:e1:4c:18:4a:4b:39:b8:ca:39:4e:ab:42:2f:c9:
33:fc:91:46:98:54:4b:dd:3f:5d:50:bc:82:c2:a9:
a3:60:b0:51:cc:74:18:d8:f2:74:22:9b:4c:4b:14:
79:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F3:77:36:5C:F8:26:DA:BC:A3:28:E0:4A:B3:EC:21:3E:0C:72:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3a4254c-0c2e-31d6-8b92-f68caca61e13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.36.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:b1:37:f2:1e:48:4b:bf:f2:cb:29:1d:50:eb:ff:b7:16:43:
a9:5e:4c:25:d9:cb:aa:47:ed:90:40:04:8a:df:ba:4b:1f:d8:
ef:65:4b:19:0c:c1:72:9f:b3:15:da:10:22:3f:5d:27:8c:4e:
2c:6d:75:fa:cb:0a:bd:d9:0e:1a:94:fe:e6:6a:b1:a6:a6:25:
89:12:60:55:af:8e:26:d4:14:33:d3:cc:80:c6:00:b3:8e:9c:
36:b1:b0:f3:2a:9f:e1:fb:c3:6c:1c:55:37:8e:22:f4:b3:1b:
17:31:c8:22:74:c3:27:45:f5:76:91:16:a9:5f:3e:04:8f:82:
17:76:16:da:86:f0:95:f1:29:2c:6a:42:8f:01:c7:89:24:52:
24:6f:28:e8:c5:c3:43:87:1f:c3:58:10:10:b3:e1:eb:a8:0a:
8f:e6:32:8c:e1:b9:73:6f:17:c9:a4:83:cd:a5:c2:96:44:8e:
78:ae:3d:b8:2b:dc:db:ef:d8:a5:f7:c0:9d:db:17:69:28:14:
53:93:fb:1e:01:dc:bf:f1:7e:be:1a:e3:f2:2a:01:73:e4:b2:
b7:ea:4b:3e:6a:21:02:be:84:39:6f:c9:7b:f9:b0:c2:56:db:
c1:9f:f3:a9:45:05:40:16:85:f1:f6:e6:4b:af:19:d5:63:73:
b5:54:15:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6II8I8aT+xU8IuMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk
NWY3OTNmMmUtZTUyOS00ZDhjLWI3YTYtYWIxYjg0ZTY0ODY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYLzXLNPIESQeSwCbsYQ6P4Axa1uvmVALD4G
tuz7ksKjZL1EoEr2PK0nLbQyh9uNO3QjIu76565QcHG3skEXlNeuMQFpAg0pYFVw
Dc0Nax2nns8wvrzKPy+Tt+oVO7KAzf5E60riJXz17Hxy4YBPMt9IteCZgiiaDL1j
1tggVERfrKYCEDcALJ8QHZBWlAXdwvFT6bZSqbpL14XyqijmcxmIodTyXww+DHom
woEX69dxDYyiOZ62Ysn4LsmXvit9hAaURihCkaDQBQClSB36ZRmn4UwYSks5uMo5
TqtCL8kz/JFGmFRL3T9dULyCwqmjYLBRzHQY2PJ0IptMSxR5AwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJfzdzZc+CbavKMo4Eqz7CE+DHJVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTNhNDI1NGMtMGMyZS0z
MWQ2LThiOTItZjY4Y2FjYTYxZTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyQOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAqxN/IeSEu/8sspHVDr/7cWQ6leTCXZy6pH7ZBABIrfuksf2O9lSxkM
wXKfsxXaECI/XSeMTixtdfrLCr3ZDhqU/uZqsaamJYkSYFWvjibUFDPTzIDGALOO
nDaxsPMqn+H7w2wcVTeOIvSzGxcxyCJ0wydF9XaRFqlfPgSPghd2FtqG8JXxKSxq
Qo8Bx4kkUiRvKOjFw0OHH8NYEBCz4euoCo/mMozhuXNvF8mkg82lwpZEjniuPbgr
3Nvv2KX3wJ3bF2koFFOT+x4B3L/xfr4a4/IqAXPksrfqSz5qIQK+hDlvyXv5sMJW
28Gf86lFBUAWhfH25kuvGdVjc7VUFeA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:54:51 2025 by rpki-client