Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2262e7b-53de-3dda-a5c1-f212a2c71d13.roa
File: b2262e7b-53de-3dda-a5c1-f212a2c71d13.roa (raw, json)
Hash identifier: yEoUiLiLk0XhHbefgRL/JD97WpobsyRcYP16aPn+opo=
Subject key identifier: 67:C6:85:21:7E:74:5B:3E:29:42:84:8F:E4:0F:63:D1:2A:98:6E:70
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858489340B9B17DDF1F65D34C3B40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2262e7b-53de-3dda-a5c1-f212a2c71d13.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 16625
IP address blocks: 23.213.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:b9:b1:7d:df:1f:65:d3:4c:3b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=149ee776-f2de-45f9-b6c9-0a217019bc58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0b:b2:31:3f:1a:cb:80:29:36:9c:33:6f:b3:
5d:d7:4a:c2:ea:b4:3f:c8:47:eb:47:71:b2:34:83:
71:94:ff:99:03:89:81:36:f0:f0:96:af:37:98:59:
69:08:8e:e7:d8:5b:d0:3c:9e:08:64:73:11:c5:80:
81:b9:fa:93:94:97:ff:58:9f:bf:16:2a:c5:00:a8:
99:21:48:8f:76:be:91:1f:ae:69:98:94:3b:49:29:
bd:b4:2e:80:59:f3:ec:1c:30:26:f9:f0:fc:06:ea:
58:42:f3:9e:f1:97:ca:40:af:16:1d:a4:9d:e3:f3:
e3:0e:2e:2a:2e:76:e5:21:9d:e6:f5:c7:16:69:59:
b0:3e:c5:42:6b:62:42:bb:26:08:7e:e6:a4:66:d7:
e8:d3:90:6e:f3:99:69:15:8d:bd:92:c8:04:aa:d1:
be:92:48:70:5c:bc:4a:dd:f8:55:2a:88:05:67:0f:
01:ab:b6:59:31:c6:7e:98:65:11:a2:50:29:c3:b2:
3f:b8:5f:96:70:de:05:a6:e5:09:6e:5c:f7:e4:d0:
f0:a6:45:fc:c3:3d:3b:48:9f:fd:9c:36:53:24:9a:
ac:7e:48:b9:08:d4:44:d9:98:f3:de:3f:61:89:da:
50:23:21:13:9d:7c:a6:b7:c6:d8:36:6c:66:e2:15:
de:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C6:85:21:7E:74:5B:3E:29:42:84:8F:E4:0F:63:D1:2A:98:6E:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2262e7b-53de-3dda-a5c1-f212a2c71d13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.213.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:45:c3:bd:77:fd:c4:14:ae:00:2b:b4:2d:6b:eb:00:71:ef:
73:4b:18:6b:49:4b:e7:6b:6d:a0:92:a3:42:1e:9a:a5:c3:f2:
1c:f0:ae:a3:7d:6a:8a:9d:f3:dd:43:d6:0d:93:da:fa:7a:e7:
e2:99:14:e9:96:07:7e:55:f6:a2:4b:f8:9b:7c:2c:8c:8e:ea:
3c:02:78:c7:28:de:96:e8:9c:30:c3:b4:83:c0:63:a7:a7:57:
15:88:89:72:99:20:98:be:c1:f4:a0:05:76:69:09:47:7c:61:
74:a1:4d:21:9a:32:1c:b5:23:d7:32:c9:ef:58:d9:43:51:9a:
ef:72:61:b1:3b:8a:d9:55:08:74:69:a9:42:a3:0b:ec:ce:4d:
a8:65:85:08:c2:cb:2b:94:c8:e3:fe:c1:61:d5:0e:e3:64:e2:
34:96:b0:eb:a2:55:86:71:2a:63:fb:f3:22:05:6c:6d:ec:28:
4e:b5:b1:19:ba:e7:ec:61:b6:79:96:73:79:bd:a3:14:06:52:
24:9c:d0:57:98:00:40:cd:da:61:e7:53:c3:73:38:a1:07:a2:
d1:3a:72:67:6b:a1:bb:ca:fc:53:94:0d:85:5d:ba:7f:23:8f:
f6:58:d3:7b:ce:68:0a:22:94:77:a9:92:51:68:38:25:0b:83:
98:6f:ec:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQLmxfd8fZdNMO0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk
MTQ5ZWU3NzYtZjJkZS00NWY5LWI2YzktMGEyMTcwMTliYzU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwuyMT8ay4ApNpwzb7Nd10rC6rQ/yEfrR3Gy
NINxlP+ZA4mBNvDwlq83mFlpCI7n2FvQPJ4IZHMRxYCBufqTlJf/WJ+/FirFAKiZ
IUiPdr6RH65pmJQ7SSm9tC6AWfPsHDAm+fD8BupYQvOe8ZfKQK8WHaSd4/PjDi4q
LnblIZ3m9ccWaVmwPsVCa2JCuyYIfuakZtfo05Bu85lpFY29ksgEqtG+kkhwXLxK
3fhVKogFZw8Bq7ZZMcZ+mGURolApw7I/uF+WcN4FpuUJblz35NDwpkX8wz07SJ/9
nDZTJJqsfki5CNRE2Zjz3j9hidpQIyETnXymt8bYNmxm4hXeYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGfGhSF+dFs+KUKEj+QPY9EqmG5wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjIyNjJlN2ItNTNkZS0z
ZGRhLWE1YzEtZjIxMmEyYzcxZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9UUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFpFw713/cQUrgArtC1r6wBx73NLGGtJS+drbaCSo0IemqXD8hzwrqN9
aoqd891D1g2T2vp65+KZFOmWB35V9qJL+Jt8LIyO6jwCeMco3pbonDDDtIPAY6en
VxWIiXKZIJi+wfSgBXZpCUd8YXShTSGaMhy1I9cyye9Y2UNRmu9yYbE7itlVCHRp
qUKjC+zOTahlhQjCyyuUyOP+wWHVDuNk4jSWsOuiVYZxKmP78yIFbG3sKE61sRm6
5+xhtnmWc3m9oxQGUiSc0FeYAEDN2mHnU8NzOKEHotE6cmdrobvK/FOUDYVdun8j
j/ZY03vOaAoilHepklFoOCULg5hv7MM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:18:54 2025 by rpki-client