Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbfdf8cc-52ba-3dd8-8124-bd9b036d60d8.roa
File: dbfdf8cc-52ba-3dd8-8124-bd9b036d60d8.roa (raw, json)
Hash identifier: 1ETkWx+yklt8ZoTMksKvxkfhhEdY3UIPsNFDL1hHXgU=
Subject key identifier: 90:7E:1D:45:BD:59:FF:52:09:FE:32:3E:76:BA:8B:18:3D:B4:2D:45
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584890760D6A94BAFB4CE3C1DE60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbfdf8cc-52ba-3dd8-8124-bd9b036d60d8.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 35994
IP address blocks: 23.196.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:76:0d:6a:94:ba:fb:4c:e3:c1:de:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=3a3a3cfb-db4f-43d6-aa6d-a60943b5ac3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:51:ed:b2:b7:3c:05:2d:f2:2c:a3:6e:a1:33:
03:20:0e:a8:66:43:4a:da:ff:ee:54:8f:6e:54:1d:
73:80:27:08:28:8c:d5:87:34:8b:a7:1e:bf:ba:8c:
f4:6e:8c:9f:af:7c:31:d9:29:63:8d:6d:f7:7b:7e:
3a:e7:6e:fb:54:5e:80:c4:48:9f:cd:86:d4:76:96:
97:bf:62:71:a7:3a:f4:9e:61:fa:9b:79:76:c0:c9:
b3:66:94:7d:eb:4a:1e:28:3e:15:63:1c:e4:46:99:
ae:4d:cf:98:8d:0d:0b:9c:72:1e:bc:a3:dc:87:98:
2f:bb:c5:ef:09:2c:37:47:4c:d4:97:af:59:99:06:
38:6e:fd:47:2e:1e:ef:a8:b2:a9:73:61:b7:ad:53:
a3:c1:cd:a5:c8:62:e7:73:81:61:63:89:17:68:03:
c0:68:cc:8d:dc:3c:46:70:c1:9b:b2:f0:f6:55:d0:
55:23:8b:50:89:08:e9:16:56:f7:bb:cf:e9:e6:f9:
5a:fa:6a:9c:3f:c0:58:2d:37:a3:d5:0f:5f:b2:df:
7c:6a:aa:1f:a5:13:8b:7e:02:5e:d6:00:f9:58:00:
5e:1a:64:a0:c6:b2:17:03:74:3b:64:9c:98:cc:ea:
61:65:cf:69:6f:6e:62:d8:16:b0:72:2d:07:13:8f:
54:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7E:1D:45:BD:59:FF:52:09:FE:32:3E:76:BA:8B:18:3D:B4:2D:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbfdf8cc-52ba-3dd8-8124-bd9b036d60d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.196.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:77:e3:96:27:26:42:97:0a:4a:7d:2f:d2:d1:98:7a:67:7b:
eb:d3:12:b4:5c:be:7f:f0:fa:a3:66:d9:c5:2f:a2:25:d1:ff:
cf:44:ed:88:34:84:69:90:95:23:4e:ad:21:1d:c2:20:d6:cb:
56:06:58:29:84:6d:74:32:0e:55:49:6f:a4:17:32:aa:82:cd:
e7:67:24:7c:df:f6:10:58:ac:c4:cb:2d:20:c7:f9:8e:e4:d2:
ca:33:a5:bf:f6:b4:8b:0c:e5:08:29:33:56:6e:1d:7d:cb:62:
cc:79:80:2e:a5:ae:ff:b0:fa:23:85:95:ac:7e:b5:95:43:34:
98:46:2a:81:3b:f6:40:96:56:6d:de:8f:48:d6:68:36:1a:d1:
20:5d:80:c8:a3:67:a2:70:a0:d2:da:12:fb:8a:05:4b:6a:48:
41:52:b1:fc:c8:db:98:5b:7c:26:41:3a:d0:a5:2c:3e:6e:f1:
9f:fb:95:77:79:15:6e:75:f6:39:b9:12:49:c0:ae:a6:56:7a:
fa:e3:5a:9b:95:b3:7c:14:10:97:15:65:cc:7d:81:b0:96:51:
f4:1c:14:26:83:33:15:76:32:d9:d7:00:51:b0:8e:4b:5b:68:
43:af:47:39:2b:4c:a8:65:44:e8:9b:db:ce:2c:e8:65:0a:75:
db:62:63:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdg1qlLr7TOPB3mAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk
M2EzYTNjZmItZGI0Zi00M2Q2LWFhNmQtYTYwOTQzYjVhYzNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFHtsrc8BS3yLKNuoTMDIA6oZkNK2v/uVI9u
VB1zgCcIKIzVhzSLpx6/uoz0boyfr3wx2SljjW33e3465277VF6AxEifzYbUdpaX
v2Jxpzr0nmH6m3l2wMmzZpR960oeKD4VYxzkRpmuTc+YjQ0LnHIevKPch5gvu8Xv
CSw3R0zUl69ZmQY4bv1HLh7vqLKpc2G3rVOjwc2lyGLnc4FhY4kXaAPAaMyN3DxG
cMGbsvD2VdBVI4tQiQjpFlb3u8/p5vla+mqcP8BYLTej1Q9fst98aqofpROLfgJe
1gD5WABeGmSgxrIXA3Q7ZJyYzOphZc9pb25i2Bawci0HE49UBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJB+HUW9Wf9SCf4yPna6ixg9tC1FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGJmZGY4Y2MtNTJiYS0z
ZGQ4LTgxMjQtYmQ5YjAzNmQ2MGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8TkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABB345YnJkKXCkp9L9LRmHpne+vTErRcvn/w+qNm2cUvoiXR/89E7Yg0
hGmQlSNOrSEdwiDWy1YGWCmEbXQyDlVJb6QXMqqCzednJHzf9hBYrMTLLSDH+Y7k
0sozpb/2tIsM5QgpM1ZuHX3LYsx5gC6lrv+w+iOFlax+tZVDNJhGKoE79kCWVm3e
j0jWaDYa0SBdgMijZ6JwoNLaEvuKBUtqSEFSsfzI25hbfCZBOtClLD5u8Z/7lXd5
FW519jm5EknArqZWevrjWpuVs3wUEJcVZcx9gbCWUfQcFCaDMxV2MtnXAFGwjktb
aEOvRzkrTKhlROib284s6GUKddtiY6I=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:02:44 2025 by rpki-client