Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9449050-84d0-32ae-9ef3-be98b83af4a4.roa
File: f9449050-84d0-32ae-9ef3-be98b83af4a4.roa (raw, json)
Hash identifier: yOszJw8RAd4+MMYhB9N9aJdiTRvS1oC7CSwxDoLe+qg=
Subject key identifier: 07:7F:36:CF:74:37:A9:53:D8:C4:8B:5D:51:8D:21:BE:1F:7F:CF:D6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848BBBB8AADDA0660EAA37A3780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9449050-84d0-32ae-9ef3-be98b83af4a4.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 16625
IP address blocks: 23.210.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:8a:ad:da:06:60:ea:a3:7a:37:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=2814944f-f8ea-4546-8a3d-7cd741640205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:36:d9:1d:cd:17:c8:b5:b7:20:05:09:a3:
d2:9c:9b:eb:4f:6b:84:f5:a2:94:c9:d5:8e:75:a0:
10:f2:32:2b:d9:17:d3:5e:c7:ae:06:08:86:8c:bb:
b1:92:1e:18:5e:fa:83:30:ff:48:73:21:ee:b2:4e:
dd:79:21:17:1f:26:f3:77:1a:13:e9:4a:b8:8b:dc:
56:8a:5c:ac:f3:66:15:80:66:72:7a:91:6a:33:99:
b1:c1:68:cb:84:73:a5:64:06:0b:56:93:ae:e9:0d:
76:3c:77:08:67:02:a2:a1:62:32:01:71:a2:c1:4c:
a8:c5:d5:9c:17:69:7a:e6:69:a2:a6:7a:b7:31:10:
59:47:49:35:df:f3:cc:a8:d7:c6:90:6b:15:f4:2f:
1f:f9:54:a6:7b:cb:61:80:1a:22:76:26:99:27:79:
76:ef:3b:55:55:f6:af:d0:9a:f0:2a:be:60:b3:07:
cd:e2:4f:61:b4:cd:58:70:e5:5a:9b:72:b2:5e:aa:
79:df:bf:7b:28:27:72:9a:96:90:5d:e7:aa:e3:3f:
6d:a1:dd:46:bc:04:8f:4f:b6:ea:d3:b7:ba:08:4c:
80:7e:72:ca:7a:05:32:e5:ef:67:0d:45:d1:67:22:
18:ca:fb:9b:bb:2b:63:b7:92:0e:d5:5b:62:98:7d:
fc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7F:36:CF:74:37:A9:53:D8:C4:8B:5D:51:8D:21:BE:1F:7F:CF:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9449050-84d0-32ae-9ef3-be98b83af4a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.210.76.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:99:fa:61:4d:a2:19:3f:18:40:a2:d2:be:4b:e7:da:2a:a9:
be:4a:87:86:32:45:d8:e0:38:ff:cb:0c:60:b4:d4:01:72:98:
3f:4a:ac:e7:6b:a4:61:ec:c4:cb:28:e5:6a:12:fa:74:c1:de:
8f:98:91:2d:57:44:29:69:a0:61:c4:7d:45:12:86:e3:e3:95:
78:69:06:3f:5a:da:3b:a4:bd:6d:b2:49:5b:e6:e5:3f:c0:87:
a7:5c:f8:8c:f6:11:2b:a8:22:33:a9:52:31:b1:71:d6:b7:4b:
3e:c0:e0:6b:ee:2e:48:af:c6:2c:5d:f7:52:58:b9:29:85:8f:
3f:9b:78:8f:8b:3b:50:a5:a7:dc:66:25:2a:76:ac:3c:59:f1:
b7:6e:67:a4:dd:78:67:32:07:0a:d0:56:20:7b:3f:4e:9d:47:
d4:70:ae:d7:16:50:37:2b:79:d7:fc:b2:ff:8c:d2:6d:da:e8:
35:a4:df:ac:14:b8:a1:76:a5:39:2a:12:c0:5d:b4:d1:5f:56:
09:01:7b:50:1d:9a:9a:4a:8b:3d:8c:b6:c6:c8:c8:0b:a4:ad:
aa:21:21:49:cd:1e:c2:ec:e7:67:49:59:f7:cf:1a:0a:e0:84:
73:88:56:62:f5:fc:92:48:05:32:9b:35:d7:88:d6:aa:87:7b:
75:6a:57:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u4qt2gZg6qN6N4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk
MjgxNDk0NGYtZjhlYS00NTQ2LThhM2QtN2NkNzQxNjQwMjA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUQ22R3NF8i1tyAFCaPSnJvrT2uE9aKUydWO
daAQ8jIr2RfTXseuBgiGjLuxkh4YXvqDMP9IcyHusk7deSEXHybzdxoT6Uq4i9xW
ilys82YVgGZyepFqM5mxwWjLhHOlZAYLVpOu6Q12PHcIZwKioWIyAXGiwUyoxdWc
F2l65mmipnq3MRBZR0k13/PMqNfGkGsV9C8f+VSme8thgBoidiaZJ3l27ztVVfav
0JrwKr5gswfN4k9htM1YcOVam3KyXqp53797KCdympaQXeeq4z9tod1GvASPT7bq
07e6CEyAfnLKegUy5e9nDUXRZyIYyvubuytjt5IO1VtimH38OwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAd/Ns90N6lT2MSLXVGNIb4ff8/WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjk0NDkwNTAtODRkMC0z
MmFlLTllZjMtYmU5OGI4M2FmNGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9JMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABSZ+mFNohk/GECi0r5L59oqqb5Kh4YyRdjgOP/LDGC01AFymD9KrOdr
pGHsxMso5WoS+nTB3o+YkS1XRClpoGHEfUUShuPjlXhpBj9a2jukvW2ySVvm5T/A
h6dc+Iz2ESuoIjOpUjGxcda3Sz7A4GvuLkivxixd91JYuSmFjz+beI+LO1Clp9xm
JSp2rDxZ8bduZ6TdeGcyBwrQViB7P06dR9RwrtcWUDcredf8sv+M0m3a6DWk36wU
uKF2pTkqEsBdtNFfVgkBe1AdmppKiz2MtsbIyAukraohIUnNHsLs52dJWffPGgrg
hHOIVmL1/JJIBTKbNdeI1qqHe3VqV8U=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:59:55 2025 by rpki-client