Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/acb41e33-9d7e-3278-862c-5d0eb0821efb.roa
File: acb41e33-9d7e-3278-862c-5d0eb0821efb.roa (raw, json)
Hash identifier: qpHtf3m7s6eP1taUwUb+hBwhNzKxAccGAMm9bimo1EI=
Subject key identifier: F6:C2:06:53:F8:00:B4:4D:BE:29:D8:F7:A5:90:83:6F:17:38:72:EB
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A209B1B73BDDF9B835E4A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/acb41e33-9d7e-3278-862c-5d0eb0821efb.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.38.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:9b:1b:73:bd:df:9b:83:5e:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=c09b2725-068f-49db-8fcf-b775e8ffbdae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4f:a1:a5:79:d9:e4:90:78:4b:49:38:5b:c8:
3e:f2:41:f0:36:ea:32:0a:50:58:d0:ad:b7:89:5a:
2a:4c:1e:2d:3d:64:84:0e:f9:f4:c0:6a:e8:d1:c3:
8c:4f:19:76:8e:df:27:a4:fb:0d:31:6d:03:0b:60:
d3:72:f5:10:92:96:e2:ee:68:50:43:b4:be:bc:a8:
16:dc:b6:47:66:28:fd:74:5c:cc:8e:b4:da:a8:65:
39:ca:ba:67:e5:c2:2d:64:9b:2d:ba:64:b6:8c:f2:
2e:b9:cd:96:17:80:ec:1a:a7:15:ba:3d:ad:67:c0:
8a:3e:13:e6:ec:76:a4:df:30:76:34:62:fc:0c:69:
49:a0:e7:ab:54:c1:af:fb:10:23:19:dd:cd:5f:de:
7e:39:3d:7c:45:8f:76:cf:12:11:5c:a6:b2:fe:9e:
cd:79:c9:d7:15:f3:ef:13:a0:79:e0:b4:ff:57:be:
99:af:a4:23:87:8a:58:45:87:e2:58:d9:a6:cf:a4:
77:fc:cc:1c:62:5e:e7:36:72:67:68:a8:40:da:e4:
07:d5:27:ee:88:1c:41:c1:65:98:de:fa:49:a0:c7:
ec:bd:30:a3:2b:31:4a:11:b3:83:7c:bb:b9:99:e0:
06:a3:8c:2f:f0:05:3c:fa:69:d1:bc:2d:6a:76:15:
eb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C2:06:53:F8:00:B4:4D:BE:29:D8:F7:A5:90:83:6F:17:38:72:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/acb41e33-9d7e-3278-862c-5d0eb0821efb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.38.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:90:2c:e4:84:ef:be:8a:2f:31:a1:32:21:b4:c2:2b:bc:76:
1e:a7:81:3b:f3:73:51:d6:8e:8d:d2:92:71:9c:46:ef:22:c1:
96:ff:8a:ee:fc:80:a0:9f:c1:b6:e7:c1:02:62:52:77:13:8d:
32:d7:7e:4c:b2:7d:1a:b1:ff:5e:fc:65:b2:44:fe:8c:76:70:
08:26:d3:b0:d0:49:04:99:f3:2f:d6:21:f0:c7:bd:39:45:d7:
4f:a7:3d:07:17:47:9e:2c:39:5f:b6:28:92:ba:90:08:3b:99:
44:95:e0:b8:95:a5:a2:6d:2a:4d:0e:73:02:b6:90:62:90:94:
d9:0d:ac:72:58:1b:7e:8f:2f:2a:8f:3d:6f:3a:05:1a:65:a8:
39:85:3f:f2:b0:20:75:cc:bd:b1:00:31:62:6c:a9:94:85:07:
7d:44:1d:25:0a:74:b8:b2:49:34:21:77:c4:e1:c3:75:10:32:
76:f5:dc:64:e7:d3:50:6e:95:8b:5a:a2:31:a7:91:9c:1f:dd:
df:5e:88:bf:8e:bd:0a:89:ea:6f:89:cb:de:e9:89:41:04:ce:
01:35:77:a3:ba:80:d7:f7:0b:4a:f7:27:eb:65:cb:c0:1d:5e:
f4:51:82:3c:f8:45:e4:c8:6a:a2:12:ba:ca:14:c2:35:dd:1a:
94:f2:e9:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6IJsbc73fm4NeSgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk
YzA5YjI3MjUtMDY4Zi00OWRiLThmY2YtYjc3NWU4ZmZiZGFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiU+hpXnZ5JB4S0k4W8g+8kHwNuoyClBY0K23
iVoqTB4tPWSEDvn0wGro0cOMTxl2jt8npPsNMW0DC2DTcvUQkpbi7mhQQ7S+vKgW
3LZHZij9dFzMjrTaqGU5yrpn5cItZJstumS2jPIuuc2WF4DsGqcVuj2tZ8CKPhPm
7Hak3zB2NGL8DGlJoOerVMGv+xAjGd3NX95+OT18RY92zxIRXKay/p7NecnXFfPv
E6B54LT/V76Zr6Qjh4pYRYfiWNmmz6R3/MwcYl7nNnJnaKhA2uQH1SfuiBxBwWWY
3vpJoMfsvTCjKzFKEbODfLu5meAGo4wv8AU8+mnRvC1qdhXr+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPbCBlP4ALRNvinY96WQg28XOHLrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWNiNDFlMzMtOWQ3ZS0z
Mjc4LTg2MmMtNWQwZWIwODIxZWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyZ/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJKQLOSE776KLzGhMiG0wiu8dh6ngTvzc1HWjo3SknGcRu8iwZb/iu78
gKCfwbbnwQJiUncTjTLXfkyyfRqx/178ZbJE/ox2cAgm07DQSQSZ8y/WIfDHvTlF
10+nPQcXR54sOV+2KJK6kAg7mUSV4LiVpaJtKk0OcwK2kGKQlNkNrHJYG36PLyqP
PW86BRplqDmFP/KwIHXMvbEAMWJsqZSFB31EHSUKdLiySTQhd8Thw3UQMnb13GTn
01BulYtaojGnkZwf3d9eiL+OvQqJ6m+Jy97piUEEzgE1d6O6gNf3C0r3J+tly8Ad
XvRRgjz4ReTIaqISusoUwjXdGpTy6W8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:14:12 2025 by rpki-client