Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/4e395ad4-2d90-3ea0-8528-5883f02119d1.roa
File: 4e395ad4-2d90-3ea0-8528-5883f02119d1.roa (raw, json)
Hash identifier: j9TtOyoVipgvxb1ku57iNgHv0t4d0eSNBA9rHX30qHA=
Subject key identifier: F1:23:05:52:F0:BF:33:5B:05:E3:F1:CF:C3:F0:A0:52:A6:3C:36:3B
Certificate issuer: /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
Certificate serial: 010D0C9F43285848748B1BF21F0E2493E424E280
Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/4e395ad4-2d90-3ea0-8528-5883f02119d1.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 950
IP address blocks: 23.140.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:1b:f2:1f:0e:24:93:e4:24:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=09dda139-7865-4a51-a191-258436b9b98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:62:c8:26:10:01:80:bd:ba:ba:76:5b:29:f9:
52:e0:e2:d3:bb:af:b3:46:ee:71:ed:6d:f1:e9:d2:
78:05:d7:25:d9:c8:d1:8b:bf:0a:21:d8:dd:08:01:
6e:5a:d3:3c:70:84:13:50:4c:8e:39:e5:70:98:a6:
a2:b1:7e:c5:9a:41:33:ac:e4:98:17:87:ff:2d:b0:
63:d9:ff:1b:5c:20:13:dc:4f:e8:23:1b:b7:3b:a4:
18:33:13:a8:18:60:3b:de:c0:c6:58:c8:41:31:03:
01:c4:9e:cf:90:27:ca:6a:3a:33:99:b1:02:00:a1:
0c:dd:d5:52:6e:20:c5:5f:00:8f:2f:e0:e9:e5:e7:
36:af:07:cd:f8:06:a0:43:aa:ad:be:d3:22:35:39:
19:e4:30:23:12:f1:6a:96:4e:59:80:4f:47:b5:34:
79:b2:a6:94:78:89:fe:49:64:5c:89:ea:7d:7f:6a:
95:8a:3e:e4:e2:4c:98:cb:f5:f6:be:7f:ab:00:dc:
d1:c2:90:79:67:bd:51:db:42:2b:3d:7e:27:ee:32:
0f:75:26:d4:4c:9f:4d:43:a5:36:50:77:e8:f7:fd:
03:a9:49:39:81:01:3d:ca:df:d0:bf:f8:f0:f5:67:
72:5f:1c:75:d7:f4:cd:a7:71:ab:60:92:4f:f5:10:
a6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:23:05:52:F0:BF:33:5B:05:E3:F1:CF:C3:F0:A0:52:A6:3C:36:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/4e395ad4-2d90-3ea0-8528-5883f02119d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl
X509v3 Authority Key Identifier:
keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
sbgp-ipAddrBlock: critical
IPv4:
23.140.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:dd:2f:ee:57:05:95:4e:b2:0c:e3:72:27:8c:46:63:48:8e:
48:8f:c8:bd:c0:f7:d7:78:dc:42:0b:ca:fd:73:9e:94:b0:a3:
72:e8:2c:df:01:c4:ea:4d:93:11:0e:d0:b5:02:09:0a:94:dd:
e7:7a:7f:2c:9c:07:c2:0a:1e:a9:8c:59:86:28:2c:42:de:2d:
17:13:65:ac:07:9f:c3:e7:95:50:e9:74:45:96:8c:7f:65:fb:
0d:c8:ce:bc:b6:d3:a3:9a:49:1a:5a:55:6d:8c:88:dd:4c:b1:
71:7d:ff:6d:31:94:b2:68:7f:ff:33:73:1f:7e:56:af:5d:13:
a5:ea:0e:b3:9e:ac:0b:98:a9:10:85:52:e3:e0:60:ec:4b:f5:
4e:73:f4:c6:21:41:79:fe:99:4f:da:66:54:80:dc:fe:ec:fe:
09:89:c9:4e:be:03:7f:49:2f:d4:a2:ee:40:6f:d0:6b:70:05:
02:5c:e5:1f:72:2b:3c:a9:b2:ca:22:df:eb:e0:ff:ea:b0:26:
5f:0f:77:c5:7a:be:a8:75:da:7c:28:dd:6b:60:4e:1b:e4:cf:
ce:14:57:59:f5:c3:d7:52:6f:9e:dd:09:93:89:97:a8:41:9f:
b0:91:7d:bc:18:b9:39:ef:72:89:66:71:62:a2:b1:16:6c:f1:
73:4f:c6:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh0ixvyHw4kk+Qk4oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTJlN2I5NmQtMGFhNS00MDJhLWIyZmUtMzM3ZDdjMjA3
ZWVlMB4XDTI1MDEwNjE0MDA1MloXDTI1MDQwNjEzMDA1MlowLzEtMCsGA1UEAxMk
MDlkZGExMzktNzg2NS00YTUxLWExOTEtMjU4NDM2YjliOThjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2LIJhABgL26unZbKflS4OLTu6+zRu5x7W3x
6dJ4Bdcl2cjRi78KIdjdCAFuWtM8cIQTUEyOOeVwmKaisX7FmkEzrOSYF4f/LbBj
2f8bXCAT3E/oIxu3O6QYMxOoGGA73sDGWMhBMQMBxJ7PkCfKajozmbECAKEM3dVS
biDFXwCPL+Dp5ec2rwfN+AagQ6qtvtMiNTkZ5DAjEvFqlk5ZgE9HtTR5sqaUeIn+
SWRciep9f2qVij7k4kyYy/X2vn+rANzRwpB5Z71R20IrPX4n7jIPdSbUTJ9NQ6U2
UHfo9/0DqUk5gQE9yt/Qv/jw9WdyXxx11/TNp3GrYJJP9RCmIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPEjBVLwvzNbBePxz8PwoFKmPDY7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3
Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdkN2MyMDdlZWUvNGUzOTVhZDQtMmQ5MC0z
ZWEwLTg1MjgtNTg4M2YwMjExOWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlN2I5NmQtMGFhNS00MDJhLWIy
ZmUtMzM3ZDdjMjA3ZWVlLzUyZTdiOTZkLTBhYTUtNDAyYS1iMmZlLTMzN2Q3YzIw
N2VlZS5jcmwwHwYDVR0jBBgwFoAUm2pshpw0IMSPY6IRpANBGtJdnzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdk
N2MyMDdlZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4w4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGXdL+5XBZVOsgzjcieMRmNIjkiPyL3A99d43EILyv1znpSwo3LoLN8B
xOpNkxEO0LUCCQqU3ed6fyycB8IKHqmMWYYoLELeLRcTZawHn8PnlVDpdEWWjH9l
+w3Izry206OaSRpaVW2MiN1MsXF9/20xlLJof/8zcx9+Vq9dE6XqDrOerAuYqRCF
UuPgYOxL9U5z9MYhQXn+mU/aZlSA3P7s/gmJyU6+A39JL9Si7kBv0GtwBQJc5R9y
Kzypssoi3+vg/+qwJl8Pd8V6vqh12nwo3WtgThvkz84UV1n1w9dSb57dCZOJl6hB
n7CRfbwYuTnvcolmcWKisRZs8XNPxoQ=
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:00:12 2025 by rpki-client