Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7141b91-c60d-3388-bd39-756e0a01b6bd.roa
File: b7141b91-c60d-3388-bd39-756e0a01b6bd.roa (raw, json)
Hash identifier: mMgnMD6FHedfybJueEWOFq6rOpmU8+TieJLvf9hu3Ao=
Subject key identifier: EC:A3:2D:57:19:63:95:15:2C:BA:4D:B0:98:E1:B5:83:A7:FC:96:8D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A400C699E1A2495E380D0E40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7141b91-c60d-3388-bd39-756e0a01b6bd.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.194.204.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:c6:99:e1:a2:49:5e:38:0d:0e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=04551683-0629-4b0a-b100-d6eb1f7249fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:42:7f:39:43:26:2a:03:c2:14:a2:25:4a:f8:
6e:9f:2a:05:fd:a2:b7:19:74:a3:dd:6e:c4:e7:06:
e7:56:98:2c:c1:22:9a:0b:74:d4:24:ea:87:b6:78:
c7:a7:19:70:fb:b0:51:89:03:ab:3d:9b:ba:71:4d:
0e:35:01:7b:38:9f:96:9c:09:b0:91:70:79:5e:d1:
b0:c7:ee:a4:6d:c1:d0:5d:fe:27:9e:6e:8f:b0:22:
d7:f9:1a:2d:b9:13:b6:56:0c:2d:ce:6b:0e:ad:1a:
24:e9:26:6d:9d:9e:12:9e:a5:14:6e:8e:b4:01:36:
d7:4a:77:77:d0:f9:af:5c:cd:bc:27:79:94:a6:bb:
0a:ab:7b:e2:88:7f:66:61:b6:0d:95:5d:d9:bc:34:
fa:50:ef:68:c5:ee:83:47:60:05:36:14:4e:05:37:
96:e9:a1:8e:04:78:1e:1c:72:19:da:1a:48:a9:8a:
b0:aa:75:de:c2:57:89:af:76:a8:51:f6:03:cf:44:
23:48:f8:45:65:82:01:d9:21:64:89:50:dd:bc:da:
6e:ba:44:40:f0:81:de:05:45:35:73:8f:1b:d1:bb:
6a:49:3e:d3:85:3f:d0:36:b5:e6:33:9f:c8:60:29:
dd:49:cd:d6:67:de:37:37:62:bc:f8:38:ca:91:b5:
c5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A3:2D:57:19:63:95:15:2C:BA:4D:B0:98:E1:B5:83:A7:FC:96:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7141b91-c60d-3388-bd39-756e0a01b6bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.194.204.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:36:70:a5:66:72:c1:cd:d8:c3:40:63:37:bc:23:e0:5d:1d:
66:ef:52:4a:6c:db:84:65:1e:68:d2:46:5a:b6:1e:a5:58:f0:
bc:e9:94:bb:c7:6e:cc:9c:a3:64:1b:c4:73:41:b6:08:4f:ee:
6f:74:dc:26:86:0f:be:19:5c:a5:f4:3f:1e:76:98:19:cd:6c:
24:2e:a7:7c:63:43:10:f8:ae:90:39:c4:c8:7d:58:61:da:90:
dc:a7:29:d7:c1:7e:d2:60:82:90:ef:10:99:b3:09:e0:ae:d5:
14:31:65:cc:d3:fe:6e:6d:58:b4:a7:85:f0:19:a8:3b:dc:34:
e0:5c:d1:2b:6b:b8:3f:d9:aa:c6:b3:ef:af:5d:3c:1a:4b:bd:
53:cd:8d:4c:97:f8:53:02:e9:7f:2d:03:e8:95:c9:8e:17:77:
50:4a:92:40:4b:95:01:a2:65:b6:47:2a:20:ba:19:c5:53:57:
26:7c:08:df:d5:c7:15:f8:93:18:dc:27:48:58:88:53:37:d1:
1f:7b:0d:43:cf:65:a1:b3:0f:e3:2d:7a:f6:e0:cf:3e:d5:3e:
45:d8:01:9f:7c:d5:97:fb:f5:d4:0a:8a:39:90:63:32:68:86:
16:5f:16:97:96:6c:70:fd:e8:60:bb:ef:d8:3e:9d:13:80:6b:
a1:65:76:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAMaZ4aJJXjgNDkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk
MDQ1NTE2ODMtMDYyOS00YjBhLWIxMDAtZDZlYjFmNzI0OWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEJ/OUMmKgPCFKIlSvhunyoF/aK3GXSj3W7E
5wbnVpgswSKaC3TUJOqHtnjHpxlw+7BRiQOrPZu6cU0ONQF7OJ+WnAmwkXB5XtGw
x+6kbcHQXf4nnm6PsCLX+RotuRO2VgwtzmsOrRok6SZtnZ4SnqUUbo60ATbXSnd3
0PmvXM28J3mUprsKq3viiH9mYbYNlV3ZvDT6UO9oxe6DR2AFNhROBTeW6aGOBHge
HHIZ2hpIqYqwqnXewleJr3aoUfYDz0QjSPhFZYIB2SFkiVDdvNpuukRA8IHeBUU1
c48b0btqST7ThT/QNrXmM5/IYCndSc3WZ943N2K8+DjKkbXF2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOyjLVcZY5UVLLpNsJjhtYOn/JaNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjcxNDFiOTEtYzYwZC0z
Mzg4LWJkMzktNzU2ZTBhMDFiNmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8LMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJA2cKVmcsHN2MNAYze8I+BdHWbvUkps24RlHmjSRlq2HqVY8LzplLvH
bsyco2QbxHNBtghP7m903CaGD74ZXKX0Px52mBnNbCQup3xjQxD4rpA5xMh9WGHa
kNynKdfBftJggpDvEJmzCeCu1RQxZczT/m5tWLSnhfAZqDvcNOBc0StruD/Zqsaz
769dPBpLvVPNjUyX+FMC6X8tA+iVyY4Xd1BKkkBLlQGiZbZHKiC6GcVTVyZ8CN/V
xxX4kxjcJ0hYiFM30R97DUPPZaGzD+Mtevbgzz7VPkXYAZ981Zf79dQKijmQYzJo
hhZfFpeWbHD96GC779g+nROAa6Fldso=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:11:58 2025 by rpki-client