Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/11d2bbe1-6b46-36d3-9897-9ff310fb7e69.roa
File: 11d2bbe1-6b46-36d3-9897-9ff310fb7e69.roa (raw, json)
Hash identifier: gtpljUREKkPPCMUJ+AU6LqQNj3fnRFuisyUOYYt2ykk=
Subject key identifier: F0:C3:AD:8E:42:E1:73:CF:34:B5:E3:47:46:79:58:9B:FD:7A:C5:EA
Certificate issuer: /CN=d70b978a-944a-401c-aa25-2ebbd4d58340
Certificate serial: 010D0C9F432858480BDA7B92657E1B0D069A0A00
Authority key identifier: 73:1F:5D:9D:14:F3:A7:ED:C2:34:6A:74:2A:64:CB:70:AA:FF:2E:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/11d2bbe1-6b46-36d3-9897-9ff310fb7e69.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 394144
IP address blocks: 23.143.8.0/24 maxlen: 24
130.51.127.0/24 maxlen: 24
2602:27c::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:7b:92:65:7e:1b:0d:06:9a:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70b978a-944a-401c-aa25-2ebbd4d58340
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=809a8294-84ae-44be-bb72-7149f410b74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9a:0c:a4:85:c7:94:4f:a6:dd:3b:01:d4:95:
1d:d3:13:53:58:a4:30:73:bc:37:86:07:9b:05:28:
d2:a9:97:c8:d0:bf:d3:44:a3:07:4f:59:ba:9e:16:
63:e1:e6:f0:18:72:dc:2f:ce:38:a3:56:ef:d7:43:
70:36:b3:4a:12:6f:4a:03:3e:04:40:a8:20:07:45:
e4:5a:07:6f:5a:9a:5c:3a:c9:23:31:00:0d:33:a1:
38:de:56:a3:15:b1:19:6e:00:02:cc:b2:8b:2d:8d:
b8:ed:ce:4c:f8:03:27:e2:ae:22:7c:ac:8b:f6:2f:
07:04:8c:98:37:56:64:d7:5b:5e:a5:c2:b4:a3:6b:
36:24:a1:13:92:72:bc:b0:72:42:75:9d:13:2b:95:
fb:7c:9e:13:88:f5:00:db:24:7b:f3:04:aa:2d:4b:
ae:88:05:dc:a7:4d:a1:f7:03:84:fa:e7:03:8c:e7:
4e:3e:ff:df:69:db:cd:28:d8:e4:bf:2a:59:30:11:
16:1d:0f:38:0a:48:67:16:de:e5:d1:1c:d1:12:6e:
22:49:84:c8:9b:b6:dc:d7:75:ae:b4:ce:1c:2c:d9:
2d:5a:9a:59:ef:69:24:75:31:43:be:49:e6:b9:7b:
97:3e:2c:27:ef:34:fe:c6:ca:16:fd:cb:a2:e5:a2:
61:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C3:AD:8E:42:E1:73:CF:34:B5:E3:47:46:79:58:9B:FD:7A:C5:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/11d2bbe1-6b46-36d3-9897-9ff310fb7e69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.crl
X509v3 Authority Key Identifier:
keyid:73:1F:5D:9D:14:F3:A7:ED:C2:34:6A:74:2A:64:CB:70:AA:FF:2E:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer
sbgp-ipAddrBlock: critical
IPv4:
23.143.8.0/24
130.51.127.0/24
IPv6:
2602:27c::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:90:7b:a2:f9:69:92:50:c0:0e:0b:ba:d2:f9:66:17:20:56:
a8:5d:ea:fc:72:6d:2c:75:3b:ea:a4:37:29:f4:e3:7e:34:5d:
96:58:b2:8b:bb:9c:f5:83:02:ef:7c:1e:9b:5b:6c:c8:b0:9c:
10:25:49:01:a5:ec:e6:b4:c4:29:1b:8a:19:00:52:42:a0:0f:
3c:9e:a7:0c:ac:8e:cc:8b:26:5e:5b:05:7e:f1:88:0f:94:80:
48:97:5b:5e:d1:f8:08:8f:e2:f4:47:f6:e5:a2:76:34:21:e0:
68:a3:3f:03:47:24:85:34:a0:0e:c2:98:fa:e8:34:44:af:db:
ce:b7:64:6c:1e:73:f3:c2:d8:6e:8a:0c:35:0b:49:76:0f:f5:
8d:c1:9a:24:d2:06:31:a5:f9:6b:6b:2f:6f:c1:fe:94:01:f5:
54:40:7c:8f:2b:ef:fc:75:bc:3b:f1:98:0c:79:5c:04:eb:1b:
74:2a:bf:24:56:83:55:e9:b4:23:35:ad:04:db:cb:ac:9b:82:
f2:1b:cf:20:49:55:09:a7:08:98:d2:c7:2d:23:db:7a:83:3e:
60:58:6a:0a:02:58:77:d4:cc:c1:6e:ec:59:ca:14:8d:bd:68:
c4:6e:17:e9:69:c7:90:c1:a4:91:3d:a9:54:c7:fb:e8:52:29:
b2:11:fc:30
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEgL2nuSZX4bDQaaCgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwYjk3OGEtOTQ0YS00MDFjLWFhMjUtMmViYmQ0ZDU4
MzQwMB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk
ODA5YTgyOTQtODRhZS00NGJlLWJiNzItNzE0OWY0MTBiNzRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5oMpIXHlE+m3TsB1JUd0xNTWKQwc7w3hgeb
BSjSqZfI0L/TRKMHT1m6nhZj4ebwGHLcL844o1bv10NwNrNKEm9KAz4EQKggB0Xk
WgdvWppcOskjMQANM6E43lajFbEZbgACzLKLLY247c5M+AMn4q4ifKyL9i8HBIyY
N1Zk11tepcK0o2s2JKETknK8sHJCdZ0TK5X7fJ4TiPUA2yR78wSqLUuuiAXcp02h
9wOE+ucDjOdOPv/fadvNKNjkvypZMBEWHQ84CkhnFt7l0RzREm4iSYTIm7bc13Wu
tM4cLNktWppZ72kkdTFDvknmuXuXPiwn7zT+xsoW/cui5aJhVQIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFPDDrY5C4XPPNLXjR0Z5WJv9esXqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNzBi
OTc4YS05NDRhLTQwMWMtYWEyNS0yZWJiZDRkNTgzNDAvMTFkMmJiZTEtNmI0Ni0z
NmQzLTk4OTctOWZmMzEwZmI3ZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDcwYjk3OGEtOTQ0YS00MDFjLWFh
MjUtMmViYmQ0ZDU4MzQwL2Q3MGI5NzhhLTk0NGEtNDAxYy1hYTI1LTJlYmJkNGQ1
ODM0MC5jcmwwHwYDVR0jBBgwFoAUcx9dnRTzp+3CNGp0KmTLcKr/LnAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNzBiOTc4YS05NDRhLTQwMWMtYWEyNS0yZWJi
ZDRkNTgzNDAuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF48IAwQA
gjN/MA4EAgACMAgDBgQmAgJ8ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC0kHui+WmSUMAOC7rS+WYXIFao
Xer8cm0sdTvqpDcp9ON+NF2WWLKLu5z1gwLvfB6bW2zIsJwQJUkBpezmtMQpG4oZ
AFJCoA88nqcMrI7MiyZeWwV+8YgPlIBIl1te0fgIj+L0R/blonY0IeBooz8DRySF
NKAOwpj66DREr9vOt2RsHnPzwthuigw1C0l2D/WNwZok0gYxpflray9vwf6UAfVU
QHyPK+/8dbw78ZgMeVwE6xt0Kr8kVoNV6bQjNa0E28usm4LyG88gSVUJpwiY0sct
I9t6gz5gWGoKAlh31MzBbuxZyhSNvWjEbhfpaceQwaSRPalUx/voUimyEfww
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:38:01 2025 by rpki-client