Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df86d034-3d1b-385b-8ea1-5c09abe7568c.roa
File: df86d034-3d1b-385b-8ea1-5c09abe7568c.roa (raw, json)
Hash identifier: T7o/2PEX+qOgQpX9gTz0OimI14b4X7NKY8lt6Gwp/d8=
Subject key identifier: 45:F4:4E:E7:AB:FB:A4:F8:5B:DE:69:BF:0C:A2:F1:E2:6F:E9:B8:D4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858488DAB6396EAB37D16D90F4280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df86d034-3d1b-385b-8ea1-5c09abe7568c.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.61.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:63:96:ea:b3:7d:16:d9:0f:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=1ade398c-68c1-426f-bb3d-4fcd4c764cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b0:0b:b1:e7:c8:fc:5f:fb:2b:08:4f:82:c6:
15:ef:02:9c:66:57:78:e0:b1:3c:a9:e9:58:af:6d:
1f:1d:f7:eb:bf:94:4b:49:67:f3:41:99:b9:91:a4:
2f:2f:5e:6a:f3:2b:40:f3:57:b6:99:f0:a2:69:4b:
aa:28:ea:95:ff:7f:06:d4:05:c2:23:fe:9f:59:5f:
cf:f2:89:63:6b:62:68:8b:b2:60:7e:72:f9:b7:e1:
6a:99:17:13:98:a5:f2:bd:d5:93:d5:7a:76:3b:56:
69:69:90:ac:44:86:8f:9a:db:2f:8c:8d:b4:78:24:
50:b6:23:63:f0:a7:8c:1c:33:a3:de:5d:58:d5:7a:
80:94:59:0e:72:7c:0c:c4:79:43:04:0a:31:d4:b0:
7d:72:e1:5a:29:04:6f:a0:b7:13:4e:67:05:90:3b:
f2:d2:f0:64:b6:b3:a5:4d:93:b2:97:bb:bc:11:b9:
30:4b:c6:31:ee:d5:24:d2:96:bd:8b:8d:9a:c3:4e:
a2:3c:ee:1c:48:ee:d7:ff:e9:63:eb:06:de:99:47:
5e:47:5b:f4:f9:b2:f2:81:d6:1a:89:4d:85:13:01:
77:c8:8f:fe:0b:f9:76:40:16:5f:f6:1b:38:8a:d5:
27:90:15:e2:bb:e2:dd:f8:ad:67:eb:2c:00:bf:37:
72:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F4:4E:E7:AB:FB:A4:F8:5B:DE:69:BF:0C:A2:F1:E2:6F:E9:B8:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df86d034-3d1b-385b-8ea1-5c09abe7568c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.61.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:6a:72:ab:ce:94:ad:73:81:df:69:69:6a:e5:6a:37:9e:97:
c6:34:9c:21:fd:38:61:13:2b:36:07:74:c8:84:6c:7f:b6:d5:
8c:2b:34:f5:91:05:46:d6:c2:ce:6a:7f:e3:39:63:b3:5a:f5:
b6:0a:4e:2c:25:62:ec:a9:4f:0c:8e:7d:55:a2:e2:ea:c4:cd:
e5:8b:b4:8c:d9:19:4f:41:94:2a:a4:d5:93:4a:0a:67:93:73:
0b:52:17:24:5a:de:64:18:1e:a9:91:9f:ed:5b:30:f6:57:07:
a1:7f:01:6e:8f:6b:b1:1a:71:77:f3:99:c9:99:94:de:2a:7d:
ae:0d:1d:44:c3:c6:e5:36:7c:ee:8b:bf:44:a3:05:c1:f3:24:
13:7d:47:bd:46:62:e2:5b:6a:a3:6b:6f:06:69:7d:b4:5d:e8:
98:c5:8e:25:13:c8:99:34:5a:8f:93:74:d0:cd:7f:2b:8b:fc:
66:f5:97:88:b1:65:db:ff:23:67:76:13:c0:39:c1:13:ea:82:
8a:30:ab:25:f1:03:9e:ee:23:e6:2e:85:ba:29:4c:0e:16:13:
b5:56:a7:27:96:06:b5:25:21:88:f1:b2:bb:d8:46:aa:f0:4a:
47:2f:b4:2e:44:d5:95:fe:85:64:ba:cf:3f:b4:6c:69:ba:ce:
43:ed:0a:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq2OW6rN9FtkPQoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk
MWFkZTM5OGMtNjhjMS00MjZmLWJiM2QtNGZjZDRjNzY0Y2IwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLALsefI/F/7KwhPgsYV7wKcZld44LE8qelY
r20fHffrv5RLSWfzQZm5kaQvL15q8ytA81e2mfCiaUuqKOqV/38G1AXCI/6fWV/P
8olja2Joi7JgfnL5t+FqmRcTmKXyvdWT1Xp2O1ZpaZCsRIaPmtsvjI20eCRQtiNj
8KeMHDOj3l1Y1XqAlFkOcnwMxHlDBAox1LB9cuFaKQRvoLcTTmcFkDvy0vBktrOl
TZOyl7u8EbkwS8Yx7tUk0pa9i42aw06iPO4cSO7X/+lj6wbemUdeR1v0+bLygdYa
iU2FEwF3yI/+C/l2QBZf9hs4itUnkBXiu+Ld+K1n6ywAvzdyCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEX0Tuer+6T4W95pvwyi8eJv6bjUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGY4NmQwMzQtM2QxYi0z
ODViLThlYTEtNWMwOWFiZTc1NjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFz37MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF5qcqvOlK1zgd9paWrlajeel8Y0nCH9OGETKzYHdMiEbH+21YwrNPWR
BUbWws5qf+M5Y7Na9bYKTiwlYuypTwyOfVWi4urEzeWLtIzZGU9BlCqk1ZNKCmeT
cwtSFyRa3mQYHqmRn+1bMPZXB6F/AW6Pa7EacXfzmcmZlN4qfa4NHUTDxuU2fO6L
v0SjBcHzJBN9R71GYuJbaqNrbwZpfbRd6JjFjiUTyJk0Wo+TdNDNfyuL/Gb1l4ix
Zdv/I2d2E8A5wRPqgoowqyXxA57uI+YuhbopTA4WE7VWpyeWBrUlIYjxsrvYRqrw
SkcvtC5E1ZX+hWS6zz+0bGm6zkPtCn0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:55:41 2025 by rpki-client