Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbb5b1a3-3cc8-34bc-abd8-d66d4ab7a459.roa
File: dbb5b1a3-3cc8-34bc-abd8-d66d4ab7a459.roa (raw, json)
Hash identifier: XJDWCOPvbhbrSS/6ipl6upPw7BU9e/dp7qM+lDCEyFg=
Subject key identifier: 27:46:4B:CC:57:BE:9B:77:43:20:F0:44:81:90:96:89:4F:59:9B:35
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A400C5F0C32ADF423DAE1E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbb5b1a3-3cc8-34bc-abd8-d66d4ab7a459.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 35994
IP address blocks: 23.194.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:c5:f0:c3:2a:df:42:3d:ae:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=9bb2d0bc-7c01-4b28-b5f5-d10213be8941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:25:cf:dc:5c:b4:a9:88:93:fb:f2:9e:fd:a3:
d0:c3:1d:b2:16:c6:96:f7:1d:10:57:49:e2:74:b8:
5a:7f:d7:89:a8:3d:81:03:8b:c6:6e:70:ae:e6:80:
7e:be:a7:68:84:2a:a1:a8:5a:53:55:76:8b:40:f2:
f3:0d:d9:ab:8c:16:f8:9f:22:fa:cd:c0:fb:e4:54:
03:62:d9:39:cf:52:cb:f5:8b:a3:47:d5:78:cb:79:
b8:13:fd:4f:e9:6d:8f:a7:b4:42:62:c9:df:39:7d:
bc:6f:62:0b:03:d7:07:ea:f0:c3:03:d0:a9:84:33:
f1:f5:3c:6d:cf:ad:f7:ea:35:ca:9d:59:05:b5:f0:
11:7f:a9:52:c5:c7:9f:fb:5c:04:e4:78:3b:f0:10:
4e:05:b5:1a:8a:c1:26:2c:0f:0f:97:da:d4:ee:6e:
c3:cc:87:84:2e:70:ed:b9:92:f0:31:d6:aa:b7:34:
35:10:ea:7c:e8:42:f3:68:b3:b9:06:49:6e:33:46:
fc:5c:9a:d0:1c:6d:97:c3:8b:22:40:ac:0a:e5:e4:
89:6a:68:2f:0f:d9:72:12:0f:2d:33:f6:f0:0a:e0:
69:39:80:00:bd:ce:f9:90:0b:8d:92:c5:7e:58:5e:
0f:40:9e:48:d5:d5:4f:47:53:6c:2a:34:45:6a:b9:
65:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:46:4B:CC:57:BE:9B:77:43:20:F0:44:81:90:96:89:4F:59:9B:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbb5b1a3-3cc8-34bc-abd8-d66d4ab7a459.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.194.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:b6:58:8d:6f:eb:a4:1d:4e:09:4d:f7:0c:5e:11:6a:1a:af:
a9:f7:c2:64:ba:eb:a4:d0:fb:f3:74:8a:52:99:e0:1e:fc:f6:
5d:1c:54:bb:43:e3:65:67:9c:2f:c6:f3:76:8a:33:5e:46:31:
68:59:fe:7a:25:c2:0a:d1:99:03:e5:be:dc:a8:dc:63:af:61:
59:03:9a:87:8e:04:64:74:4d:b1:71:85:3b:c9:a0:7a:11:18:
54:88:54:17:d0:b2:98:88:8e:5d:45:71:fa:aa:b0:eb:9f:24:
b7:39:e2:1c:fc:29:d2:25:c0:ee:9e:4e:38:a3:de:b6:94:61:
de:ac:59:05:18:62:b5:e6:be:ea:ff:4a:eb:c8:da:d2:fb:44:
5c:5d:c0:2c:2d:7f:b4:95:f7:54:9e:fa:26:cd:d6:63:4a:e3:
f3:74:fd:05:a3:a7:4b:9f:1a:38:7d:3f:13:6e:c7:1b:bd:6c:
85:00:9e:f4:ba:a0:86:7e:6c:69:ba:36:2a:86:2f:86:d9:f1:
e7:35:11:c7:cd:b9:54:85:5c:fa:a5:a9:36:85:a1:4a:0a:e5:
57:61:f3:81:fa:d7:96:fd:ec:d8:4a:f5:be:63:58:96:24:c3:
69:30:c5:ad:57:d2:8f:eb:d8:10:62:a1:89:fd:d9:b1:48:18:
83:49:7d:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAMXwwyrfQj2uHoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk
OWJiMmQwYmMtN2MwMS00YjI4LWI1ZjUtZDEwMjEzYmU4OTQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCXP3Fy0qYiT+/Ke/aPQwx2yFsaW9x0QV0ni
dLhaf9eJqD2BA4vGbnCu5oB+vqdohCqhqFpTVXaLQPLzDdmrjBb4nyL6zcD75FQD
Ytk5z1LL9YujR9V4y3m4E/1P6W2Pp7RCYsnfOX28b2ILA9cH6vDDA9CphDPx9Txt
z6336jXKnVkFtfARf6lSxcef+1wE5Hg78BBOBbUaisEmLA8Pl9rU7m7DzIeELnDt
uZLwMdaqtzQ1EOp86ELzaLO5BkluM0b8XJrQHG2Xw4siQKwK5eSJamgvD9lyEg8t
M/bwCuBpOYAAvc75kAuNksV+WF4PQJ5I1dVPR1NsKjRFarllAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCdGS8xXvpt3QyDwRIGQlolPWZs1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGJiNWIxYTMtM2NjOC0z
NGJjLWFiZDgtZDY2ZDRhYjdhNDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8J+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIq2WI1v66QdTglN9wxeEWoar6n3wmS666TQ+/N0ilKZ4B789l0cVLtD
42VnnC/G83aKM15GMWhZ/nolwgrRmQPlvtyo3GOvYVkDmoeOBGR0TbFxhTvJoHoR
GFSIVBfQspiIjl1FcfqqsOufJLc54hz8KdIlwO6eTjij3raUYd6sWQUYYrXmvur/
SuvI2tL7RFxdwCwtf7SV91Se+ibN1mNK4/N0/QWjp0ufGjh9PxNuxxu9bIUAnvS6
oIZ+bGm6NiqGL4bZ8ec1EcfNuVSFXPqlqTaFoUoK5Vdh84H615b97NhK9b5jWJYk
w2kwxa1X0o/r2BBioYn92bFIGINJfck=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:27 2025 by rpki-client