Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7b4b06c8-1b72-31d8-a9ee-e72629b24a08.roa
File: 7b4b06c8-1b72-31d8-a9ee-e72629b24a08.roa (raw, json)
Hash identifier: 5PP+sPXXaev5uDig6CsuUyRwA9wYgxnQqRt4rINhGGA=
Subject key identifier: B8:3B:88:1F:61:FC:4E:FC:9C:58:F8:03:C6:01:9A:71:84:BB:5E:99
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F432858484D758B61B3ACB91A0F6F0500
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7b4b06c8-1b72-31d8-a9ee-e72629b24a08.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 3356
IP address blocks: 8.39.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:8b:61:b3:ac:b9:1a:0f:6f:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=528a049c-528a-47db-b15a-5170a46f4f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:99:ce:21:92:82:ce:cc:05:17:34:46:01:b5:
59:0f:a4:61:e8:28:e7:fe:af:52:18:81:83:12:c2:
52:a2:ee:6e:22:1a:76:ca:b7:bf:d4:6f:d0:e4:bf:
3c:52:c6:93:e0:64:23:da:98:ff:6f:34:67:a3:49:
7d:fc:1e:73:a9:ce:f8:9c:38:97:59:08:de:95:46:
dd:61:05:8c:b4:c1:b8:ed:89:6a:09:41:07:fe:0d:
67:51:20:21:25:09:bc:43:06:e8:8b:e0:8b:ab:17:
ee:11:67:c3:e7:61:5a:c7:72:11:16:99:5f:36:38:
c9:8a:be:bf:fc:54:fe:30:66:88:ce:50:bb:55:66:
dc:4b:25:38:9e:4b:08:77:e2:69:aa:e4:07:a1:a5:
9b:5a:2c:4e:49:4d:49:2e:92:44:f4:75:34:8a:39:
0b:b6:22:c7:6e:8c:30:67:d4:8d:b0:fd:0a:61:71:
df:02:37:8c:d8:be:81:72:87:8b:74:26:8a:26:2d:
a1:95:c5:c9:48:82:f7:4f:c9:3b:7e:78:4e:cb:64:
32:e1:0a:43:88:bf:c0:8e:05:f3:2b:bf:ed:39:70:
8f:c8:93:92:8a:1c:87:df:f5:8d:47:a9:c7:34:cc:
e2:99:da:42:fc:b6:f4:32:7d:4f:16:40:52:4f:44:
f1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3B:88:1F:61:FC:4E:FC:9C:58:F8:03:C6:01:9A:71:84:BB:5E:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7b4b06c8-1b72-31d8-a9ee-e72629b24a08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.39.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:b9:c0:cf:0d:7e:4c:42:34:23:41:17:66:8e:21:44:d5:c4:
61:d9:67:13:84:6d:a3:a9:49:59:59:cb:6c:c8:d6:e2:93:ea:
cf:29:c3:4a:b6:a4:03:b4:73:6d:c5:d3:ea:90:7f:70:63:3b:
8a:0d:4d:61:ea:dc:87:d4:d9:a3:23:e9:32:32:96:14:92:10:
11:c7:11:88:65:fc:a5:f0:98:d0:7b:9f:d5:02:94:d8:e6:93:
71:e9:dd:a8:8b:49:10:7c:48:96:ec:4a:50:7e:b6:11:5e:4b:
fa:a0:bd:8e:11:52:d7:f2:50:b9:0d:75:66:ea:e1:a3:ea:f3:
d7:84:95:e3:62:8a:14:57:eb:83:c9:64:ae:46:9e:56:94:f3:
0d:b4:8e:c1:7e:49:4d:76:3a:bb:a8:83:37:36:d4:cc:0e:09:
dc:fa:ab:df:75:5d:64:d3:7f:d2:5f:86:e1:86:a2:be:54:cf:
74:21:2f:53:91:e1:ad:a3:41:aa:3e:64:43:65:da:d3:4b:72:
67:f3:af:be:67:ab:17:1e:8c:4c:d5:2b:e9:4d:b2:af:dc:3c:
ff:75:04:1b:85:b5:e8:97:7a:69:64:63:53:73:21:70:19:fc:
8e:6c:7f:1f:1c:17:76:54:9d:16:b5:c0:f1:b4:a5:68:9e:2a:
d9:76:d8:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhNdYths6y5Gg9vBQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI0MTIyMzE0MDA1MVoXDTI1MDMyMzEzMDA1MVowLzEtMCsGA1UEAxMk
NTI4YTA0OWMtNTI4YS00N2RiLWIxNWEtNTE3MGE0NmY0ZjBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJnOIZKCzswFFzRGAbVZD6Rh6Cjn/q9SGIGD
EsJSou5uIhp2yre/1G/Q5L88UsaT4GQj2pj/bzRno0l9/B5zqc74nDiXWQjelUbd
YQWMtMG47YlqCUEH/g1nUSAhJQm8Qwboi+CLqxfuEWfD52Fax3IRFplfNjjJir6/
/FT+MGaIzlC7VWbcSyU4nksId+JpquQHoaWbWixOSU1JLpJE9HU0ijkLtiLHboww
Z9SNsP0KYXHfAjeM2L6BcoeLdCaKJi2hlcXJSIL3T8k7fnhOy2Qy4QpDiL/AjgXz
K7/tOXCPyJOSihyH3/WNR6nHNMzimdpC/Lb0Mn1PFkBST0TxEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLg7iB9h/E78nFj4A8YBmnGEu16ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvN2I0YjA2YzgtMWI3Mi0z
MWQ4LWE5ZWUtZTcyNjI5YjI0YTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACCehMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHm5wM8NfkxCNCNBF2aOIUTVxGHZZxOEbaOpSVlZy2zI1uKT6s8pw0q2
pAO0c23F0+qQf3BjO4oNTWHq3IfU2aMj6TIylhSSEBHHEYhl/KXwmNB7n9UClNjm
k3Hp3aiLSRB8SJbsSlB+thFeS/qgvY4RUtfyULkNdWbq4aPq89eEleNiihRX64PJ
ZK5GnlaU8w20jsF+SU12Oruogzc21MwOCdz6q991XWTTf9JfhuGGor5Uz3QhL1OR
4a2jQao+ZENl2tNLcmfzr75nqxcejEzVK+lNsq/cPP91BBuFteiXemlkY1NzIXAZ
/I5sfx8cF3ZUnRa1wPG0pWieKtl22Ec=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:12:24 2025 by rpki-client