Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ec928207-07bb-3f1b-930b-99f6c7bb07f3.roa
File: ec928207-07bb-3f1b-930b-99f6c7bb07f3.roa (raw, json)
Hash identifier: eNS9LCKAVFQhQ9tU/5yWyThGiogPjNqURYkzMwv2D00=
Subject key identifier: AB:1D:92:4E:1F:B9:BB:7D:B1:01:7C:C4:A4:86:A8:32:AA:2E:DE:0E
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F4328584871C075459544AB4802045A40
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ec928207-07bb-3f1b-930b-99f6c7bb07f3.roa
Signing time: Sun 05 Jan 2025 14:00:52 +0000
ROA not before: Sun 05 Jan 2025 14:00:52 +0000
ROA not after: Sat 05 Apr 2025 13:00:52 +0000
asID: 18345
IP address blocks: 173.239.194.0/24 maxlen: 24
173.239.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:71:c0:75:45:95:44:ab:48:02:04:5a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Jan 5 14:00:52 2025 GMT
Not After : Apr 5 13:00:52 2025 GMT
Subject: CN=336be67b-e49a-42ba-a27e-fe0e30945178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:87:b8:e6:21:41:23:c5:5c:9d:9f:09:f7:50:
93:14:79:92:d7:2f:9a:9c:36:9f:b9:01:34:8f:20:
0f:d6:c8:e0:af:01:87:36:19:7c:b3:34:df:5d:28:
77:11:1b:bb:d3:27:c2:0f:9a:53:c2:3d:d2:98:e7:
46:b9:2e:db:e1:b4:81:d1:39:62:33:d1:33:0f:b4:
5a:99:dd:3c:15:8f:85:40:77:8d:52:72:2b:11:2a:
01:81:7d:72:01:44:e9:40:60:29:69:8b:62:c2:53:
eb:86:99:d8:67:7e:88:f2:fe:e2:c0:2f:f5:68:5b:
c6:e7:7f:50:ca:39:78:ac:d1:3a:1c:0c:33:57:a6:
56:dd:79:6a:f4:2d:19:4c:7f:16:2b:6d:d4:7e:e1:
3a:1e:cb:f4:0a:d4:15:32:54:8f:dc:20:bf:dc:9f:
04:c4:aa:15:f9:70:37:d4:e0:47:70:1c:65:52:16:
19:f3:9b:f2:a7:c9:9f:65:99:78:ba:e9:5f:85:69:
ac:1f:21:10:1f:86:a3:77:fa:c3:0d:6b:4d:95:3a:
29:e1:99:27:cb:f5:b5:80:8f:b8:d9:c8:d2:50:58:
5c:09:76:f9:2f:d1:fc:f5:d6:88:54:b9:4a:b5:59:
0d:2f:07:ac:d4:8a:29:63:e3:8f:5c:eb:02:10:bd:
f3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1D:92:4E:1F:B9:BB:7D:B1:01:7C:C4:A4:86:A8:32:AA:2E:DE:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ec928207-07bb-3f1b-930b-99f6c7bb07f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv4:
173.239.194.0/24
173.239.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c1:c7:04:a2:f3:61:46:2e:5b:a0:60:d4:3b:b3:37:89:7d:a2:
2f:9d:6d:cb:8a:95:9b:22:7f:cd:98:1c:83:4a:44:49:47:06:
e0:63:09:b5:b7:1a:22:64:54:87:ed:ee:8d:76:ee:3c:7b:21:
f9:8f:df:15:15:d5:e3:43:a6:ef:ea:62:ba:1b:fd:48:1c:c1:
e7:6d:f9:c2:29:0c:eb:35:77:77:2b:b9:4a:6c:87:d2:c0:c3:
4f:ae:a6:8a:00:1b:92:91:b3:ea:dc:de:ee:b8:81:e8:26:2e:
6f:5a:e9:3c:f7:f6:26:d5:7b:63:53:03:ef:5d:df:54:d9:2b:
9d:02:97:6a:8c:21:e0:b5:94:7b:14:87:df:b4:65:70:fd:d2:
6f:f3:94:f7:f1:e9:ec:f9:76:9f:66:51:71:af:e4:c3:07:80:
50:34:30:41:be:d1:85:7b:b8:c1:9b:8a:d2:32:41:2f:ee:28:
1f:ca:db:7f:b1:a0:25:f9:e1:39:5f:77:98:21:01:48:bc:ec:
f5:f6:64:df:29:a0:1b:1a:74:4b:e0:80:93:d7:e6:33:6b:af:
0b:4d:da:d4:e6:e1:82:ec:ad:ee:15:f7:3d:fd:6a:e2:36:ff:
d0:0a:e5:49:63:c0:d5:0c:6e:1b:ce:fa:71:e2:51:68:cc:d2:
af:f2:36:fc
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEhxwHVFlUSrSAIEWkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx
NzNhMB4XDTI1MDEwNTE0MDA1MloXDTI1MDQwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MzM2YmU2N2ItZTQ5YS00MmJhLWEyN2UtZmUwZTMwOTQ1MTc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oe45iFBI8VcnZ8J91CTFHmS1y+anDafuQE0
jyAP1sjgrwGHNhl8szTfXSh3ERu70yfCD5pTwj3SmOdGuS7b4bSB0TliM9EzD7Ra
md08FY+FQHeNUnIrESoBgX1yAUTpQGApaYtiwlPrhpnYZ36I8v7iwC/1aFvG539Q
yjl4rNE6HAwzV6ZW3Xlq9C0ZTH8WK23UfuE6Hsv0CtQVMlSP3CC/3J8ExKoV+XA3
1OBHcBxlUhYZ85vyp8mfZZl4uulfhWmsHyEQH4ajd/rDDWtNlTop4Zkny/W1gI+4
2cjSUFhcCXb5L9H89daIVLlKtVkNLwes1IopY+OPXOsCEL3z/wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFKsdkk4fubt9sQF8xKSGqDKqLt4OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx
ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvZWM5MjgyMDctMDdiYi0z
ZjFiLTkzMGItOTlmNmM3YmIwN2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh
M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm
MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk
MDFlZjE3M2EuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAre/CAwQA
re/LMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAMHHBKLzYUYuW6Bg1DuzN4l9oi+dbcuKlZsif82YHINKRElH
BuBjCbW3GiJkVIft7o127jx7IfmP3xUV1eNDpu/qYrob/Ugcwedt+cIpDOs1d3cr
uUpsh9LAw0+upooAG5KRs+rc3u64gegmLm9a6Tz39ibVe2NTA+9d31TZK50Cl2qM
IeC1lHsUh9+0ZXD90m/zlPfx6ez5dp9mUXGv5MMHgFA0MEG+0YV7uMGbitIyQS/u
KB/K23+xoCX54Tlfd5ghAUi87PX2ZN8poBsadEvggJPX5jNrrwtN2tTm4YLsre4V
9z39auI2/9AK5UljwNUMbhvO+nHiUWjM0q/yNvw=
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:23:51 2025 by rpki-client