Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2e25444-cf43-3f9f-bb63-b073551cb5d3.roa
File: b2e25444-cf43-3f9f-bb63-b073551cb5d3.roa (raw, json)
Hash identifier: ldoMFCA4QdIRJDuLjrg5nrvtyTl5uDTTv0vRL2tbudw=
Subject key identifier: 92:34:B7:C5:D9:97:0F:1F:81:20:F6:2D:4C:23:C1:7E:19:30:49:67
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858494CC956A8CB8BF135BF588300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2e25444-cf43-3f9f-bb63-b073551cb5d3.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 20940
IP address blocks: 23.32.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:56:a8:cb:8b:f1:35:bf:58:83:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=c1c5dc0e-9591-4142-8f4c-c324c923ac9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2b:e5:02:2d:39:ae:2c:6c:01:29:b4:c5:5f:
b7:5f:49:64:e4:2d:60:c1:a7:45:01:51:11:7e:65:
5c:63:1a:37:2f:65:fb:3b:6f:b7:b1:fa:b8:cd:77:
27:8b:a6:e8:8c:06:6c:52:e2:e9:1b:b5:8f:12:95:
ac:8b:76:3a:fa:cb:69:71:c0:08:33:56:48:4b:30:
6b:45:9f:67:3d:5a:92:29:34:95:c0:de:d7:48:04:
52:c3:4d:dd:01:78:7c:b6:20:0c:52:34:ec:e2:3e:
7e:88:14:c1:20:29:06:ad:5f:b5:6d:39:ae:7f:42:
09:d5:65:08:4f:f7:60:53:5d:d1:a0:2f:d4:18:ee:
8a:79:c5:f6:58:a4:72:0a:0d:78:01:6a:75:f7:97:
bb:d6:77:30:33:eb:19:1a:49:8f:c4:5b:0e:64:9b:
42:82:2c:eb:29:a7:ff:fd:d8:c6:21:6a:64:87:2d:
da:c2:86:60:c3:46:6f:e6:29:69:a1:07:55:52:b7:
4c:70:c3:6f:49:66:5c:6c:26:5f:d1:a4:e7:3c:5c:
dd:1a:c3:8e:30:8a:c6:61:f0:17:03:97:f6:cd:cc:
63:a9:50:a0:ba:1e:be:eb:93:11:e2:ff:77:27:b9:
87:ec:62:97:49:ef:cd:6e:fb:d2:26:10:d4:95:46:
31:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:34:B7:C5:D9:97:0F:1F:81:20:F6:2D:4C:23:C1:7E:19:30:49:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2e25444-cf43-3f9f-bb63-b073551cb5d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.32.61.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:9b:10:c2:f3:fd:11:80:51:d1:e7:27:c4:9d:da:20:c7:74:
92:1a:bc:d4:f4:9d:03:70:7f:79:f7:26:7d:75:d9:58:fc:07:
21:75:c8:94:89:c0:b7:59:ac:41:21:af:12:a1:b8:ed:14:b3:
88:bd:56:83:b8:68:ec:9c:d0:5d:c6:f4:78:45:da:92:ec:56:
d7:55:14:af:b9:b8:73:12:d0:83:95:69:69:cc:f3:cf:f7:0c:
b8:1c:c2:6a:c1:89:6e:da:79:c9:fe:af:d1:ae:5d:61:f6:37:
46:58:2c:b6:ec:fd:61:88:9d:fc:9f:0e:38:98:36:36:36:d3:
74:f2:5e:1c:dc:b3:88:fa:68:c8:4e:d6:1c:36:9c:77:13:d2:
67:9b:f6:3d:b6:3e:6b:e9:a1:87:b6:24:5a:d2:18:9e:45:30:
a2:21:a1:92:03:d6:f6:16:02:b7:50:b0:0a:b3:06:30:cc:81:
36:61:2f:01:ab:93:be:d5:b8:a9:2c:01:f9:26:57:ca:cd:0c:
b6:e3:ad:9b:d8:2d:d0:18:d4:11:d0:e4:c6:cd:c2:d2:44:22:
9b:d7:96:1b:f7:db:2a:57:d3:b0:ab:af:e9:77:86:02:ba:33:
3d:cd:75:62:5b:e2:26:ec:9d:84:f9:37:06:ca:18:ea:ba:d4:
99:9c:c1:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyVaoy4vxNb9YgwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk
YzFjNWRjMGUtOTU5MS00MTQyLThmNGMtYzMyNGM5MjNhYzljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArivlAi05rixsASm0xV+3X0lk5C1gwadFAVER
fmVcYxo3L2X7O2+3sfq4zXcni6bojAZsUuLpG7WPEpWsi3Y6+stpccAIM1ZISzBr
RZ9nPVqSKTSVwN7XSARSw03dAXh8tiAMUjTs4j5+iBTBICkGrV+1bTmuf0IJ1WUI
T/dgU13RoC/UGO6KecX2WKRyCg14AWp195e71ncwM+sZGkmPxFsOZJtCgizrKaf/
/djGIWpkhy3awoZgw0Zv5ilpoQdVUrdMcMNvSWZcbCZf0aTnPFzdGsOOMIrGYfAX
A5f2zcxjqVCguh6+65MR4v93J7mH7GKXSe/NbvvSJhDUlUYxrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJI0t8XZlw8fgSD2LUwjwX4ZMElnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjJlMjU0NDQtY2Y0My0z
ZjlmLWJiNjMtYjA3MzU1MWNiNWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyA9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADGbEMLz/RGAUdHnJ8Sd2iDHdJIavNT0nQNwf3n3Jn112Vj8ByF1yJSJ
wLdZrEEhrxKhuO0Us4i9VoO4aOyc0F3G9HhF2pLsVtdVFK+5uHMS0IOVaWnM88/3
DLgcwmrBiW7aecn+r9GuXWH2N0ZYLLbs/WGInfyfDjiYNjY203TyXhzcs4j6aMhO
1hw2nHcT0meb9j22PmvpoYe2JFrSGJ5FMKIhoZID1vYWArdQsAqzBjDMgTZhLwGr
k77VuKksAfkmV8rNDLbjrZvYLdAY1BHQ5MbNwtJEIpvXlhv32ypX07Crr+l3hgK6
Mz3NdWJb4ibsnYT5NwbKGOq61JmcwVc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:42 2025 by rpki-client