Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d3e143da-c721-3da9-8123-92a7febad310.roa
File: d3e143da-c721-3da9-8123-92a7febad310.roa (raw, json)
Hash identifier: fJXUVvsHbzNVPYtjK5yP2g7WRCYJsUnm86wazoONbfU=
Subject key identifier: 5D:BD:C9:B8:4D:04:C5:75:04:AD:5A:D7:F8:26:FE:7A:FA:C4:4E:BE
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584839EAC83F99B1930D6CCE67C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d3e143da-c721-3da9-8123-92a7febad310.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 20940
IP address blocks: 165.254.234.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:c8:3f:99:b1:93:0d:6c:ce:67:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=2362c580-442e-43a4-ab66-9e1e495e30a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:59:4c:1c:1d:cc:18:ad:ab:66:5e:38:f3:d1:
38:62:bc:57:48:4e:c4:4f:34:30:cb:e0:57:26:4c:
c7:6d:bf:c4:fd:37:3d:4b:76:cb:9d:63:bd:07:c8:
1f:52:16:ed:ce:05:bc:fc:e2:06:8a:81:d5:01:77:
4a:55:c2:d6:ca:42:76:ea:fa:8b:30:2e:fd:79:8f:
ac:59:50:8a:f8:5f:13:18:49:25:19:64:af:e1:6a:
b5:c2:f4:f3:94:e6:de:15:23:c1:ba:a7:0c:63:f7:
db:cf:b2:fc:23:46:55:70:d8:cd:e9:18:5f:5d:07:
ba:38:03:94:22:58:05:66:5c:f5:25:b8:c1:26:1a:
a1:97:7f:26:cc:3f:a1:9c:97:da:9d:0d:ed:ee:30:
40:86:42:74:f7:3f:d2:eb:f3:2d:b9:f7:6a:79:4a:
6d:e3:60:63:a5:4b:d3:03:74:a1:34:68:e3:e2:bf:
24:fe:fb:9b:d1:96:4b:ce:0d:32:0e:b9:b4:63:fc:
b0:a6:7f:f1:2c:b4:43:98:29:c0:fa:ce:b6:cd:12:
f8:b5:09:f2:37:e7:ca:bf:a0:67:68:74:19:66:c2:
63:24:16:e8:df:6e:26:01:0b:3d:cb:6d:c0:c6:6b:
3a:53:4a:8e:9b:b4:10:b7:4b:24:32:d0:5d:33:8b:
9e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BD:C9:B8:4D:04:C5:75:04:AD:5A:D7:F8:26:FE:7A:FA:C4:4E:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d3e143da-c721-3da9-8123-92a7febad310.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
165.254.234.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:60:d6:91:34:ad:0f:4c:3a:05:01:13:47:bd:4c:5b:d1:be:
e6:41:70:8f:03:99:3e:60:e0:e5:37:53:82:1e:d9:5a:e7:c1:
d9:77:e3:ec:4f:9c:9f:e3:cc:cc:16:12:fb:ea:0b:d8:2b:3b:
04:53:71:b4:e4:7c:f5:b1:58:b7:4f:d7:fa:9a:1c:90:8d:65:
43:0c:db:58:bf:da:17:aa:cf:90:82:5f:9c:64:c0:a8:db:87:
8b:08:2b:ed:99:c6:fa:20:d7:28:c8:0e:6d:9c:d9:62:ac:00:
6f:2d:b1:44:c7:98:61:57:81:59:bc:19:05:6f:db:f9:49:08:
a8:2e:4b:4e:e9:fd:b4:0a:b3:5a:b9:df:8e:93:3f:f4:07:e4:
32:8c:39:55:e4:6f:4c:89:46:79:5d:57:c4:46:1e:a9:c2:c3:
37:b7:de:8f:7b:65:9e:0f:dd:ef:94:f9:36:74:11:b7:cd:67:
e2:6e:f5:7f:2f:c1:05:ec:02:eb:74:c1:b8:0c:87:87:95:d7:
be:fa:91:e1:fb:7d:6c:1e:6f:62:2f:cb:1c:ae:3d:04:38:cb:
80:15:fc:4a:51:a3:d2:88:7c:e4:78:ba:4b:21:8b:7f:f8:ee:
9e:a7:22:c0:3a:46:e5:62:44:dd:4f:d2:ba:1f:9f:8f:47:69:
4b:48:4c:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg56sg/mbGTDWzOZ8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI0MTIxNjE0MDA1MVoXDTI1MDMxNjEzMDA1MVowLzEtMCsGA1UEAxMk
MjM2MmM1ODAtNDQyZS00M2E0LWFiNjYtOWUxZTQ5NWUzMGExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFlMHB3MGK2rZl4489E4YrxXSE7ETzQwy+BX
JkzHbb/E/Tc9S3bLnWO9B8gfUhbtzgW8/OIGioHVAXdKVcLWykJ26vqLMC79eY+s
WVCK+F8TGEklGWSv4Wq1wvTzlObeFSPBuqcMY/fbz7L8I0ZVcNjN6RhfXQe6OAOU
IlgFZlz1JbjBJhqhl38mzD+hnJfanQ3t7jBAhkJ09z/S6/MtufdqeUpt42BjpUvT
A3ShNGjj4r8k/vub0ZZLzg0yDrm0Y/ywpn/xLLRDmCnA+s62zRL4tQnyN+fKv6Bn
aHQZZsJjJBbo324mAQs9y23Axms6U0qOm7QQt0skMtBdM4uemwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF29ybhNBMV1BK1a1/gm/nr6xE6+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZDNlMTQzZGEtYzcyMS0z
ZGE5LTgxMjMtOTJhN2ZlYmFkMzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpf7qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHRg1pE0rQ9MOgUBE0e9TFvRvuZBcI8DmT5g4OU3U4Ie2Vrnwdl34+xP
nJ/jzMwWEvvqC9grOwRTcbTkfPWxWLdP1/qaHJCNZUMM21i/2heqz5CCX5xkwKjb
h4sIK+2Zxvog1yjIDm2c2WKsAG8tsUTHmGFXgVm8GQVv2/lJCKguS07p/bQKs1q5
346TP/QH5DKMOVXkb0yJRnldV8RGHqnCwze33o97ZZ4P3e+U+TZ0EbfNZ+Ju9X8v
wQXsAut0wbgMh4eV1776keH7fWweb2IvyxyuPQQ4y4AV/EpRo9KIfOR4ukshi3/4
7p6nIsA6RuViRN1P0rofn49HaUtITIA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:49:28 2025 by rpki-client