Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8f624f01-a177-3b50-a03a-330cff6ca82f.roa
File: 8f624f01-a177-3b50-a03a-330cff6ca82f.roa (raw, json)
Hash identifier: gcB5ke/hD1Bn+4U4gwrqXPUJ6TmQu7yd/oYsn7bEqP0=
Subject key identifier: 5B:AB:A6:DB:AE:7C:92:13:13:7C:47:E0:EC:5D:BA:86:BE:75:38:B3
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F432858487325A70FA32861598981B200
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8f624f01-a177-3b50-a03a-330cff6ca82f.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 9009
IP address blocks: 23.27.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:a7:0f:a3:28:61:59:89:81:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=bdc31146-390e-48e9-a798-fe884a8bd1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:07:03:44:aa:62:8e:84:c8:38:cb:50:27:fa:
41:0b:2f:db:7d:b0:fa:c9:87:b3:59:50:4e:95:33:
4b:30:c0:e9:dd:84:0c:c3:9b:98:3d:eb:eb:63:5b:
13:59:6d:f9:09:d0:c2:72:82:b7:f8:e6:50:16:ec:
e1:cc:f6:3d:87:1f:2c:57:d4:0a:34:82:a4:e1:92:
5c:8d:7b:93:b7:78:c1:b4:17:94:66:10:e2:69:bc:
31:4a:de:e3:ba:1e:aa:95:ae:4b:bd:a2:1e:28:f4:
20:62:ae:f1:12:b1:7a:d5:52:10:5b:75:10:27:95:
b7:cc:80:7b:e5:85:ff:a3:48:bc:2e:8c:21:e1:29:
49:3c:64:b8:34:91:0f:9b:a7:ee:fe:b0:b4:2e:f8:
1d:62:06:5c:cf:5b:ea:36:4b:bd:8a:94:30:93:29:
14:6b:b0:10:a2:e2:9f:9e:c3:eb:0f:e0:5b:91:f0:
b2:1e:c3:cd:85:a0:0a:a2:1d:85:5c:18:30:60:e7:
c8:66:5c:11:06:7e:f1:98:a2:e8:ba:97:a6:b1:bf:
41:b1:ab:a6:2d:65:cf:22:de:35:ff:67:e7:fd:3e:
c1:23:70:3b:01:5b:18:52:b1:0d:e9:d3:04:a4:11:
8e:b3:61:f6:94:a6:ca:89:cd:71:26:be:17:24:63:
40:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AB:A6:DB:AE:7C:92:13:13:7C:47:E0:EC:5D:BA:86:BE:75:38:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8f624f01-a177-3b50-a03a-330cff6ca82f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.80.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:64:b1:18:28:e1:ce:32:1c:53:8e:4e:3e:e0:54:0d:16:56:
7d:43:0f:fa:fa:2d:7f:5d:76:91:b1:53:77:57:4e:4d:b7:80:
09:70:4e:cb:92:46:ee:f2:f6:ac:2b:bb:86:7f:cc:7c:2c:42:
85:89:f0:ba:06:a2:ce:ac:b4:f1:77:44:71:b1:2e:a9:18:34:
a2:57:47:41:3c:ae:06:43:4e:ad:02:aa:37:bb:23:52:d6:b0:
41:28:42:19:1c:d0:0b:c2:8a:b6:e4:59:70:a7:81:ed:1f:e7:
3b:67:c1:b1:77:f1:84:84:26:58:ca:b9:78:6c:fc:12:49:24:
96:c3:5e:cc:83:06:b1:d0:f1:99:5a:b1:72:d6:2f:2e:42:5a:
33:ca:bf:14:71:fa:87:5e:cb:cb:0e:1f:75:33:5b:ef:c3:88:
b5:52:c3:36:8b:66:74:fc:8d:83:d4:1e:41:1b:46:37:30:dc:
ba:d0:46:98:de:97:4d:f4:a2:06:1b:ce:d4:51:27:ed:eb:2d:
66:bf:17:0f:4d:1b:a2:aa:0b:82:79:74:d6:db:ab:0f:2b:19:
ca:02:a4:82:7e:3c:d9:3c:7a:95:56:fb:a7:8a:b3:ad:ad:2d:
57:15:a1:2d:0b:0a:52:b1:6d:2b:05:f0:9c:88:a6:19:1f:92:
35:f2:6e:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhzJacPoyhhWYmBsgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDEwNjAyMDA0MFoXDTI1MDQwNjAxMDA0MFowLzEtMCsGA1UEAxMk
YmRjMzExNDYtMzkwZS00OGU5LWE3OTgtZmU4ODRhOGJkMWIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQcDRKpijoTIOMtQJ/pBCy/bfbD6yYezWVBO
lTNLMMDp3YQMw5uYPevrY1sTWW35CdDCcoK3+OZQFuzhzPY9hx8sV9QKNIKk4ZJc
jXuTt3jBtBeUZhDiabwxSt7juh6qla5LvaIeKPQgYq7xErF61VIQW3UQJ5W3zIB7
5YX/o0i8Lowh4SlJPGS4NJEPm6fu/rC0LvgdYgZcz1vqNku9ipQwkykUa7AQouKf
nsPrD+BbkfCyHsPNhaAKoh2FXBgwYOfIZlwRBn7xmKLoupemsb9BsaumLWXPIt41
/2fn/T7BI3A7AVsYUrEN6dMEpBGOs2H2lKbKic1xJr4XJGNAtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFurptuufJITE3xH4Oxduoa+dTizMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOGY2MjRmMDEtYTE3Ny0z
YjUwLWEwM2EtMzMwY2ZmNmNhODJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxtQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEFksRgo4c4yHFOOTj7gVA0WVn1DD/r6LX9ddpGxU3dXTk23gAlwTsuS
Ru7y9qwru4Z/zHwsQoWJ8LoGos6stPF3RHGxLqkYNKJXR0E8rgZDTq0Cqje7I1LW
sEEoQhkc0AvCirbkWXCnge0f5ztnwbF38YSEJljKuXhs/BJJJJbDXsyDBrHQ8Zla
sXLWLy5CWjPKvxRx+odey8sOH3UzW+/DiLVSwzaLZnT8jYPUHkEbRjcw3LrQRpje
l030ogYbztRRJ+3rLWa/Fw9NG6KqC4J5dNbbqw8rGcoCpIJ+PNk8epVW+6eKs62t
LVcVoS0LClKxbSsF8JyIphkfkjXyboA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:38:44 2025 by rpki-client