Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a766949d-9eb2-361f-961b-60c938ba5094.roa
File: a766949d-9eb2-361f-961b-60c938ba5094.roa (raw, json)
Hash identifier: 9cL979GBUNRK1hVRFvnG2iyYGCjJCl2wcIwAYacS6dU=
Subject key identifier: A0:83:67:CB:73:15:0C:7E:9C:AC:41:A5:BF:8E:5D:54:8E:97:5D:5C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858493C09437294C873120F448B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a766949d-9eb2-361f-961b-60c938ba5094.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 6762
IP address blocks: 23.41.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:43:72:94:c8:73:12:0f:44:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=eb7487df-26db-47b9-b8eb-3358192cb373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:91:20:de:14:b4:61:53:b7:18:2d:2c:70:8f:
76:23:e9:8f:5d:09:ac:c4:80:0d:49:f5:bf:6e:9d:
ae:6a:7d:c3:0f:d2:ad:6d:ae:68:f3:56:f8:c6:83:
b7:fc:67:91:f9:a5:68:c1:81:b8:3b:60:7e:5b:7b:
b2:4b:7b:4e:8f:5f:94:b6:44:3d:10:06:62:d7:33:
b8:ce:d8:93:e7:b6:f3:94:ab:9d:48:08:91:23:f8:
07:55:dd:82:8c:98:b4:79:b8:86:67:ee:69:56:ed:
54:e4:e2:95:70:96:c2:49:5b:b0:6f:65:a0:4a:32:
4b:fc:7c:e7:93:ba:b2:d4:fc:a3:63:4d:e4:38:16:
5d:ad:f9:16:f9:76:1d:3b:78:b5:a0:cd:6b:98:b6:
7d:de:fb:c2:10:24:b8:07:72:15:07:db:e6:2d:13:
59:7b:88:8f:e1:56:46:5a:0a:d3:c0:c8:8e:e2:29:
23:63:fa:a8:31:0e:a3:da:7f:1e:65:d5:0b:c7:7a:
bc:3e:38:76:27:80:cb:c2:88:3c:21:59:c5:f0:d9:
8d:2f:c1:3f:a3:7f:6f:b0:27:e7:40:8c:0b:1d:26:
97:69:ab:98:5b:84:a0:bb:40:24:19:01:86:73:87:
71:4b:b2:0f:31:bf:e4:d8:7f:07:c9:31:d8:0a:e2:
f6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:83:67:CB:73:15:0C:7E:9C:AC:41:A5:BF:8E:5D:54:8E:97:5D:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a766949d-9eb2-361f-961b-60c938ba5094.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.41.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:6a:95:20:63:a1:00:9c:62:e3:7b:51:76:e3:b9:da:ef:0a:
84:e2:17:e1:da:26:d1:82:66:2d:49:e3:be:77:4d:d5:8e:23:
8a:99:95:87:98:82:8e:0f:6e:36:5a:9c:68:81:77:38:42:6f:
df:60:2d:59:8a:1a:af:b8:bc:b7:d1:d7:6f:06:e9:a3:91:05:
a0:b5:14:1d:ab:cc:94:ad:f8:4d:d4:71:59:62:75:d6:9b:59:
f3:f1:b5:3c:09:cc:45:65:c2:89:d3:c5:63:e3:19:7e:03:7e:
8b:0a:ae:73:16:11:ad:48:3d:91:8d:ec:32:45:14:4d:19:21:
5b:07:96:66:70:24:fb:3f:6e:9c:cd:01:4d:d3:f6:fc:45:7e:
a5:03:9b:03:a5:38:ed:f1:2d:68:5e:d4:38:d1:aa:6e:0b:60:
f5:f6:4d:6e:24:6d:15:cb:04:ae:90:7a:34:3f:9c:cd:ab:c2:
5c:3a:a9:97:36:39:76:40:a7:97:18:21:49:a6:00:38:c4:aa:
2e:58:d9:be:70:27:eb:13:ef:49:5b:07:cd:f4:d0:e6:eb:f1:
51:90:a7:67:c3:e0:6d:39:f1:54:17:97:9e:97:12:e8:33:d6:
ee:1d:62:89:d9:98:85:85:72:69:2c:b0:70:28:c7:07:54:e6:
b4:d4:30:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CUNylMhzEg9EiwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk
ZWI3NDg3ZGYtMjZkYi00N2I5LWI4ZWItMzM1ODE5MmNiMzczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpEg3hS0YVO3GC0scI92I+mPXQmsxIANSfW/
bp2uan3DD9Ktba5o81b4xoO3/GeR+aVowYG4O2B+W3uyS3tOj1+UtkQ9EAZi1zO4
ztiT57bzlKudSAiRI/gHVd2CjJi0ebiGZ+5pVu1U5OKVcJbCSVuwb2WgSjJL/Hzn
k7qy1PyjY03kOBZdrfkW+XYdO3i1oM1rmLZ93vvCECS4B3IVB9vmLRNZe4iP4VZG
WgrTwMiO4ikjY/qoMQ6j2n8eZdULx3q8Pjh2J4DLwog8IVnF8NmNL8E/o39vsCfn
QIwLHSaXaauYW4Sgu0AkGQGGc4dxS7IPMb/k2H8HyTHYCuL2mQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKCDZ8tzFQx+nKxBpb+OXVSOl11cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTc2Njk0OWQtOWViMi0z
NjFmLTk2MWItNjBjOTM4YmE1MDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyloMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIRqlSBjoQCcYuN7UXbjudrvCoTiF+HaJtGCZi1J4753TdWOI4qZlYeY
go4PbjZanGiBdzhCb99gLVmKGq+4vLfR128G6aORBaC1FB2rzJSt+E3UcVliddab
WfPxtTwJzEVlwonTxWPjGX4DfosKrnMWEa1IPZGN7DJFFE0ZIVsHlmZwJPs/bpzN
AU3T9vxFfqUDmwOlOO3xLWhe1DjRqm4LYPX2TW4kbRXLBK6QejQ/nM2rwlw6qZc2
OXZAp5cYIUmmADjEqi5Y2b5wJ+sT70lbB8300Obr8VGQp2fD4G058VQXl56XEugz
1u4dYonZmIWFcmkssHAoxwdU5rTUMLs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:26:40 2025 by rpki-client