Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1e345d4-affe-3b73-9ebe-e452eb52e2c9.roa
File: e1e345d4-affe-3b73-9ebe-e452eb52e2c9.roa (raw, json)
Hash identifier: nb+Faw7SONVh/+5HXWtze3GuklrUqZJ155R3LwK5+nk=
Subject key identifier: 99:9E:9B:EF:93:75:D3:09:1B:EA:6B:E6:28:77:EE:65:B4:8B:CD:AE
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A99661A62BB3B4F06E429120
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1e345d4-affe-3b73-9ebe-e452eb52e2c9.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.202.122.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:61:a6:2b:b3:b4:f0:6e:42:91:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=dbe82b03-0b6f-46af-87b3-9a81667f4edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4c:f1:ab:ea:59:cd:e3:24:f8:6c:7d:1d:6b:
ac:2a:2c:a7:40:77:50:23:95:27:25:08:d1:f1:31:
81:8c:4d:d4:3b:10:2d:dc:21:f5:5b:25:6e:2f:ae:
65:0f:83:3b:6d:92:e9:65:6a:2f:f6:65:7a:27:eb:
a3:61:d3:f4:b8:1d:db:76:16:8f:3b:2c:1c:1e:85:
46:5c:d3:fc:4a:72:3b:ad:d4:fe:ac:e0:8e:cb:7a:
76:1c:8e:46:d3:0c:4b:a5:d8:17:ed:65:08:62:64:
07:03:27:31:1a:1b:a6:44:12:80:ef:05:33:03:79:
af:36:9f:e3:12:10:c0:dd:5c:22:6b:37:be:16:d2:
ae:72:26:d4:b8:1c:50:b4:27:93:44:db:8a:c1:46:
f1:4a:78:fa:3e:4c:d8:d4:4b:35:8c:8e:ed:1d:3e:
b0:c9:3c:be:81:62:6d:6c:31:fc:17:a5:9f:66:f6:
67:e7:ee:5d:b9:39:99:b4:f6:18:2e:bc:c7:fe:c7:
1e:88:37:fc:a7:1a:a5:6d:df:d4:c6:91:b7:e3:88:
23:79:98:c9:bf:36:df:11:ff:cb:bf:aa:16:80:e0:
db:a7:15:df:78:12:d8:51:3e:29:e8:64:6e:27:e1:
f8:a8:56:4d:32:a5:c9:1c:59:b8:b5:4e:02:30:c1:
ed:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9E:9B:EF:93:75:D3:09:1B:EA:6B:E6:28:77:EE:65:B4:8B:CD:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1e345d4-affe-3b73-9ebe-e452eb52e2c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.202.122.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:08:fe:e3:1b:97:4b:e3:d5:01:c7:5c:37:70:17:0c:5e:d3:
8e:0e:aa:39:eb:b7:01:7a:ee:aa:ba:fd:2d:99:62:f5:a7:57:
89:b2:2a:9f:c9:28:b8:a9:24:f7:bd:f8:84:1c:b6:c9:d1:b5:
ad:a2:44:98:ab:d9:db:9e:4f:ff:2f:4e:85:e8:38:c9:04:9e:
b9:7c:2c:a5:c6:7f:c6:e3:fc:f9:df:12:bf:d7:d2:97:5e:18:
d5:20:e5:da:9c:4a:c5:a1:98:70:eb:4d:78:34:21:f7:63:a4:
d0:91:b1:a1:c7:ec:0c:94:af:67:33:ce:8b:42:d4:f2:fe:16:
b7:b2:3b:49:28:ce:04:dd:0c:49:4b:86:33:5f:15:ca:e8:e7:
54:db:53:f7:4d:6e:0f:22:3c:b3:df:eb:b3:b9:de:af:c5:fb:
09:59:6e:28:16:6e:7a:36:d5:22:c4:a5:1d:5d:83:df:07:44:
3f:90:bc:f4:b6:bd:a9:03:ee:9b:3f:b8:23:dc:66:c6:6c:72:
f1:04:62:c4:e9:01:10:89:83:eb:27:66:0e:03:cc:fe:d7:2e:
d9:55:1b:bf:ce:e7:d7:86:2c:70:11:e7:7d:68:df:86:ba:62:
46:28:a3:02:a1:b9:de:0c:3b:5f:88:1e:f0:eb:04:96:c8:f1:
56:b8:0a:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplmGmK7O08G5CkSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZGJlODJiMDMtMGI2Zi00NmFmLTg3YjMtOWE4MTY2N2Y0ZWRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUzxq+pZzeMk+Gx9HWusKiynQHdQI5UnJQjR
8TGBjE3UOxAt3CH1WyVuL65lD4M7bZLpZWov9mV6J+ujYdP0uB3bdhaPOywcHoVG
XNP8SnI7rdT+rOCOy3p2HI5G0wxLpdgX7WUIYmQHAycxGhumRBKA7wUzA3mvNp/j
EhDA3Vwiaze+FtKucibUuBxQtCeTRNuKwUbxSnj6PkzY1Es1jI7tHT6wyTy+gWJt
bDH8F6WfZvZn5+5duTmZtPYYLrzH/sceiDf8pxqlbd/UxpG344gjeZjJvzbfEf/L
v6oWgODbpxXfeBLYUT4p6GRuJ+H4qFZNMqXJHFm4tU4CMMHtzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJmem++TddMJG+pr5ih37mW0i82uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTFlMzQ1ZDQtYWZmZS0z
YjczLTllYmUtZTQ1MmViNTJlMmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8p6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADoI/uMbl0vj1QHHXDdwFwxe044OqjnrtwF67qq6/S2ZYvWnV4myKp/J
KLipJPe9+IQctsnRta2iRJir2dueT/8vToXoOMkEnrl8LKXGf8bj/PnfEr/X0pde
GNUg5dqcSsWhmHDrTXg0IfdjpNCRsaHH7AyUr2czzotC1PL+FreyO0kozgTdDElL
hjNfFcro51TbU/dNbg8iPLPf67O53q/F+wlZbigWbno21SLEpR1dg98HRD+QvPS2
vakD7ps/uCPcZsZscvEEYsTpARCJg+snZg4DzP7XLtlVG7/O59eGLHAR531o34a6
YkYoowKhud4MO1+IHvDrBJbI8Va4CnQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:32 2025 by rpki-client