Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7c12ac3-bb61-301d-a999-3412acd2d1b9.roa
File: d7c12ac3-bb61-301d-a999-3412acd2d1b9.roa (raw, json)
Hash identifier: kHQ/TyVbsIwXTf4WOUXe7c8LHNmRygerpiPQYAYC+9k=
Subject key identifier: 03:32:E3:08:F0:1E:DC:A7:CC:9E:B3:12:2B:55:4F:8C:67:E0:8B:CC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848F926A1F1CF4A1E9134339C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7c12ac3-bb61-301d-a999-3412acd2d1b9.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 33905
IP address blocks: 23.7.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:a1:f1:cf:4a:1e:91:34:33:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=d1602539-b70e-41d1-a0e5-6c22c7f74ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:84:b7:58:ae:81:4c:c1:f8:75:c7:a4:14:2a:
9f:cd:8d:72:ae:96:5c:9d:ae:39:90:35:ba:ba:c4:
63:54:f3:3e:c1:33:ec:61:c7:26:ee:2c:34:31:ba:
30:a1:f7:bc:13:7f:8b:49:b7:b9:f4:72:50:20:d6:
16:5e:5f:7b:ae:57:85:46:07:5e:17:44:a5:6d:3e:
83:32:9a:c1:18:49:08:15:76:ca:a0:4d:e7:01:69:
5b:87:55:95:12:ee:b9:66:a5:26:a5:76:2c:b3:6f:
82:28:bc:b5:d7:2c:8c:a6:62:23:10:a2:48:a9:ff:
1d:9e:51:f1:37:72:bc:da:fc:cb:80:c8:95:54:f9:
f5:44:1a:40:c7:26:9d:5b:76:3f:04:45:30:78:80:
6b:d4:ca:7a:52:12:58:85:6d:e3:bb:87:6d:fb:bf:
9a:2d:80:9e:3a:23:de:cb:39:28:4f:80:3d:2f:01:
37:89:40:dd:8b:f6:77:69:0b:ba:34:0c:41:30:c6:
69:12:10:2c:fc:b4:ec:45:cd:b8:78:5c:b6:f5:42:
7e:6f:c7:95:c5:5b:ca:c4:c1:f3:03:3f:f0:4c:05:
de:20:5d:39:d9:43:d1:bf:55:19:25:af:e3:06:a2:
cc:81:61:0c:e4:57:52:0d:b0:3a:63:a1:6d:b2:48:
11:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:32:E3:08:F0:1E:DC:A7:CC:9E:B3:12:2B:55:4F:8C:67:E0:8B:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7c12ac3-bb61-301d-a999-3412acd2d1b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.7.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:14:e3:64:26:95:4c:60:d1:b8:8c:79:fd:1b:04:a3:12:1a:
53:22:0f:9a:db:ab:04:ca:c8:6b:01:0e:fc:4e:1f:5b:0c:f0:
32:2d:9e:ba:7c:d0:48:b3:e4:e6:db:c6:a7:6b:ca:b4:09:b5:
12:11:26:62:ce:c1:c8:54:3e:d8:4f:b7:2c:8e:03:e2:ae:65:
92:c5:1b:8c:47:49:1d:96:53:e8:b1:a4:03:3d:02:9a:60:77:
4b:1c:ca:0c:fc:62:a4:26:f4:df:5c:eb:76:23:cf:b4:4c:61:
60:0f:99:02:97:7c:45:fd:ac:ef:2f:f9:1e:f0:45:37:a3:a9:
89:f6:aa:a0:c2:bd:81:e8:b0:19:7a:40:25:b2:ee:ee:70:99:
9f:23:c7:fd:82:c3:56:ff:d6:5c:e1:4c:fc:ed:7b:1e:ec:36:
9e:a0:da:31:18:27:69:a8:c8:8e:bf:e5:b0:5a:ea:1e:23:5e:
37:67:79:cf:cd:79:05:c8:31:38:4d:bd:cb:11:76:ba:96:9d:
a0:4b:68:d9:21:ad:99:a4:56:8f:61:51:29:e7:45:1b:34:f5:
89:c1:f5:c0:d1:71:bc:ac:0b:45:8b:bb:a5:8b:a2:0b:af:3c:
8a:dc:9d:09:ae:80:03:31:db:3d:50:e1:17:35:02:34:4e:1f:
b2:30:2c:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JqHxz0oekTQznAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
ZDE2MDI1MzktYjcwZS00MWQxLWEwZTUtNmMyMmM3Zjc0ZWY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9oS3WK6BTMH4dcekFCqfzY1yrpZcna45kDW6
usRjVPM+wTPsYccm7iw0Mbowofe8E3+LSbe59HJQINYWXl97rleFRgdeF0SlbT6D
MprBGEkIFXbKoE3nAWlbh1WVEu65ZqUmpXYss2+CKLy11yyMpmIjEKJIqf8dnlHx
N3K82vzLgMiVVPn1RBpAxyadW3Y/BEUweIBr1Mp6UhJYhW3ju4dt+7+aLYCeOiPe
yzkoT4A9LwE3iUDdi/Z3aQu6NAxBMMZpEhAs/LTsRc24eFy29UJ+b8eVxVvKxMHz
Az/wTAXeIF052UPRv1UZJa/jBqLMgWEM5FdSDbA6Y6FtskgRBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAMy4wjwHtynzJ6zEitVT4xn4IvMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDdjMTJhYzMtYmI2MS0z
MDFkLWE5OTktMzQxMmFjZDJkMWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwf0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAAU42QmlUxg0biMef0bBKMSGlMiD5rbqwTKyGsBDvxOH1sM8DItnrp8
0Eiz5ObbxqdryrQJtRIRJmLOwchUPthPtyyOA+KuZZLFG4xHSR2WU+ixpAM9Appg
d0scygz8YqQm9N9c63Yjz7RMYWAPmQKXfEX9rO8v+R7wRTejqYn2qqDCvYHosBl6
QCWy7u5wmZ8jx/2Cw1b/1lzhTPztex7sNp6g2jEYJ2moyI6/5bBa6h4jXjdnec/N
eQXIMThNvcsRdrqWnaBLaNkhrZmkVo9hUSnnRRs09YnB9cDRcbysC0WLu6WLoguv
PIrcnQmugAMx2z1Q4Rc1AjROH7IwLC8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:11:53 2025 by rpki-client