Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a83e000a-7256-37e5-967a-01ebd0f751e0.roa
File: a83e000a-7256-37e5-967a-01ebd0f751e0.roa (raw, json)
Hash identifier: LDcSAk++CFKaqyrTMp5d/VcElARuU5XnyVWkDtvPAAs=
Subject key identifier: A6:52:4A:04:27:47:3A:A5:BD:23:89:FD:99:D1:AE:E5:DE:E7:8D:F7
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848BE8638DC14C76678AAE60880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a83e000a-7256-37e5-967a-01ebd0f751e0.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 35994
IP address blocks: 23.215.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:38:dc:14:c7:66:78:aa:e6:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=a8bbe631-b28c-46dd-af7f-8afa6e3056c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ca:ff:9d:f6:90:0f:c7:fd:66:d4:fb:31:c5:
7f:7b:dc:76:c7:42:0a:43:61:0a:49:93:7a:7a:dc:
b4:7b:58:c2:8b:65:e7:d4:45:df:90:51:0a:f2:0f:
8c:be:81:28:38:79:7e:0e:3d:3b:80:fb:53:7b:64:
18:35:e4:44:ac:d1:4b:e7:a3:62:dc:e8:52:bf:ae:
d3:ce:b4:e2:48:ed:6b:8a:dd:55:db:d0:6e:fd:b8:
72:ea:e2:00:25:4c:7c:e9:6f:b6:69:85:ad:1f:f4:
29:dd:ab:e5:77:01:49:5c:39:f4:c7:80:13:23:60:
9d:93:c8:28:89:0f:d5:01:a3:1e:9c:c2:4d:d9:f2:
f5:b0:24:0e:e0:16:a3:7b:82:f2:94:62:83:20:78:
b6:8a:12:49:b7:27:8c:ce:08:f6:e5:18:e5:18:1d:
44:e0:41:77:6c:7d:15:e8:14:4d:bb:e9:7e:4f:3a:
83:61:5a:66:32:67:4e:b3:7f:ba:59:1c:1c:0c:01:
44:4b:48:cd:74:ed:f5:a7:15:32:b3:e0:ff:b6:68:
5e:59:30:be:93:61:66:f0:3a:5d:90:14:55:1f:a0:
04:2b:9f:03:fc:33:58:b2:ea:1d:b6:1e:e8:c8:30:
58:11:03:51:e9:27:d2:c3:83:66:a8:05:86:ce:a5:
9b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:52:4A:04:27:47:3A:A5:BD:23:89:FD:99:D1:AE:E5:DE:E7:8D:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a83e000a-7256-37e5-967a-01ebd0f751e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.215.179.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:63:b8:e8:be:51:38:cf:aa:9e:d8:7d:6b:58:28:e5:a2:e9:
e8:e2:7f:d0:29:91:42:f0:eb:83:fc:7f:d5:7f:dc:47:5b:27:
5a:0a:17:6f:c5:a1:70:cd:cb:e4:ce:bc:6b:5f:8e:e2:c6:3e:
e8:55:48:b7:25:c0:dc:84:ee:5c:65:c2:8e:97:98:2b:6f:81:
29:8a:3d:58:2d:ea:75:d5:ce:1c:f3:ec:a9:56:87:24:80:1b:
9e:da:03:55:5a:a4:ef:96:67:ea:f2:b5:9f:06:27:ba:0f:ac:
0b:b5:f5:cd:97:97:39:8c:70:b9:25:db:70:21:7b:56:56:96:
9e:61:c5:f6:ee:83:33:5a:1d:c4:32:1a:45:44:a6:0c:ea:92:
05:09:52:80:7f:bf:af:05:d1:46:9d:11:2d:c9:d7:25:93:28:
81:7c:61:e3:2a:1b:61:82:9e:7a:f2:36:1c:a7:50:98:28:5d:
35:dc:d8:1d:ef:b0:a5:5a:c2:36:11:b4:74:79:f8:32:f3:6c:
e3:0b:27:46:c6:77:94:fe:1f:10:69:a4:ab:21:8b:ce:55:26:
a5:65:bf:25:4a:d3:b7:7a:e6:07:8a:48:97:22:5d:26:df:b7:
f0:ac:ce:76:71:1a:d3:75:13:33:6d:64:c9:cf:9c:f3:5f:82:
eb:b8:df:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hjjcFMdmeKrmCIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk
YThiYmU2MzEtYjI4Yy00NmRkLWFmN2YtOGFmYTZlMzA1NmM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsr/nfaQD8f9ZtT7McV/e9x2x0IKQ2EKSZN6
ety0e1jCi2Xn1EXfkFEK8g+MvoEoOHl+Dj07gPtTe2QYNeRErNFL56Ni3OhSv67T
zrTiSO1rit1V29Bu/bhy6uIAJUx86W+2aYWtH/Qp3avldwFJXDn0x4ATI2Cdk8go
iQ/VAaMenMJN2fL1sCQO4Baje4LylGKDIHi2ihJJtyeMzgj25RjlGB1E4EF3bH0V
6BRNu+l+TzqDYVpmMmdOs3+6WRwcDAFES0jNdO31pxUys+D/tmheWTC+k2Fm8Dpd
kBRVH6AEK58D/DNYsuodth7oyDBYEQNR6SfSw4NmqAWGzqWbjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKZSSgQnRzqlvSOJ/ZnRruXe5433MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTgzZTAwMGEtNzI1Ni0z
N2U1LTk2N2EtMDFlYmQwZjc1MWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ezMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACxjuOi+UTjPqp7YfWtYKOWi6ejif9ApkULw64P8f9V/3EdbJ1oKF2/F
oXDNy+TOvGtfjuLGPuhVSLclwNyE7lxlwo6XmCtvgSmKPVgt6nXVzhzz7KlWhySA
G57aA1VapO+WZ+rytZ8GJ7oPrAu19c2XlzmMcLkl23Ahe1ZWlp5hxfbugzNaHcQy
GkVEpgzqkgUJUoB/v68F0UadES3J1yWTKIF8YeMqG2GCnnryNhynUJgoXTXc2B3v
sKVawjYRtHR5+DLzbOMLJ0bGd5T+HxBppKshi85VJqVlvyVK07d65geKSJciXSbf
t/CsznZxGtN1EzNtZMnPnPNfguu4368=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:24:39 2025 by rpki-client