Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/07cd9fc5-1051-39bc-bd56-dadd655c312e.roa
File: 07cd9fc5-1051-39bc-bd56-dadd655c312e.roa (raw, json)
Hash identifier: BhTNNO7xaOHrUlS4Rp7lcHS1GhWIofrAM+pAKEmjvEQ=
Subject key identifier: F7:BE:65:6B:5E:D4:FA:09:39:56:59:74:F3:9F:ED:A1:F9:65:C7:29
Certificate issuer: /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e
Certificate serial: 010D0C9F43285847F584F0AB4E9C656E8F706300
Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/07cd9fc5-1051-39bc-bd56-dadd655c312e.roa
Signing time: Fri 22 Nov 2024 02:00:40 +0000
ROA not before: Fri 22 Nov 2024 02:00:40 +0000
ROA not after: Thu 20 Feb 2025 02:00:40 +0000
asID: 400226
IP address blocks: 23.128.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f5:84:f0:ab:4e:9c:65:6e:8f:70:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e
Validity
Not Before: Nov 22 02:00:40 2024 GMT
Not After : Feb 20 02:00:40 2025 GMT
Subject: CN=7497445e-999f-4c48-b4eb-7d4f91a41de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7a:fb:ea:4b:62:3e:8d:86:57:9a:be:1f:a1:
d5:5d:77:31:76:b4:9b:47:26:bb:c7:19:60:cd:06:
39:4a:56:07:fc:49:62:66:0b:2c:05:ac:67:90:f0:
0f:a0:9b:e2:05:7c:83:4d:c4:ea:33:b9:0c:62:74:
a8:f6:47:69:ea:d1:e3:17:51:15:3b:0d:c4:36:bc:
de:91:40:71:c0:39:04:be:4f:7b:24:20:99:91:0b:
15:23:86:03:d9:33:15:fb:df:7a:44:6f:e4:25:7c:
7e:23:ad:22:99:47:08:3c:05:32:d6:fe:c6:5a:ce:
c7:3b:be:9d:39:9e:6c:cd:37:f4:0a:f0:05:16:71:
d2:aa:d6:23:cd:7f:cd:51:9c:8d:7e:ab:13:06:78:
69:66:7c:72:50:e6:8b:2d:e2:d8:e9:46:18:e1:86:
3f:45:63:64:ac:99:5e:88:44:8b:83:09:04:dd:fc:
dc:1e:80:c7:44:7a:ab:2c:65:46:28:e6:9d:bb:f1:
ec:05:46:b1:71:be:5a:d6:86:51:f5:30:ad:95:64:
5c:8a:52:8e:82:f5:c4:a5:2e:d4:2f:56:d6:a7:68:
f9:cb:79:38:1c:a2:21:60:c8:0c:a4:c8:4f:fa:d7:
40:53:fe:6c:82:99:97:56:5d:a7:ac:f9:c7:14:ba:
8c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BE:65:6B:5E:D4:FA:09:39:56:59:74:F3:9F:ED:A1:F9:65:C7:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/07cd9fc5-1051-39bc-bd56-dadd655c312e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl
X509v3 Authority Key Identifier:
keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer
sbgp-ipAddrBlock: critical
IPv4:
23.128.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:42:6e:79:7f:83:b1:ec:85:2c:9a:a2:06:cc:ab:62:ab:42:
77:1a:90:87:68:da:d4:0c:f7:bf:a2:11:1a:1f:d0:d1:72:2b:
33:be:32:40:33:ec:ba:39:56:4b:9d:69:d0:51:80:bb:11:7a:
b5:fe:84:65:c4:00:e1:85:13:ae:6a:6a:23:ad:2e:54:91:f2:
05:89:7c:e5:03:f0:6c:0b:21:88:eb:e2:bc:b7:3d:36:4f:6a:
94:91:df:09:4f:e6:99:0b:2b:c9:b8:e5:b7:19:0d:8c:f2:61:
cb:cd:a3:e3:bc:3a:3c:ea:75:d1:bf:dc:23:7f:34:45:8f:98:
87:91:5e:45:0e:bf:c0:db:4d:6c:16:6b:2e:ad:ba:d5:04:aa:
a5:12:ff:de:77:41:6e:1b:5f:78:83:39:49:54:ce:64:94:cb:
50:2d:fe:07:43:e9:ab:4c:d8:dd:64:5b:1a:a5:23:cc:41:25:
a4:63:97:27:1c:bc:ea:2b:d6:bb:e3:2f:86:5a:bf:6b:14:cf:
82:6f:6a:40:b3:0f:b6:3f:81:ef:0d:02:e4:a4:ea:ac:75:fb:
37:a5:c5:ac:d9:9d:0b:07:1a:90:51:e3:37:91:34:fc:30:13:
82:5b:47:b8:d6:95:c3:ea:94:c3:75:1e:7e:20:03:69:af:d2:
94:f1:4c:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf1hPCrTpxlbo9wYwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTkzM2FmNzAtZmFlNC00NGM2LTllNDItMmI5ZWRhM2Mx
ZTBlMB4XDTI0MTEyMjAyMDA0MFoXDTI1MDIyMDAyMDA0MFowLzEtMCsGA1UEAxMk
NzQ5NzQ0NWUtOTk5Zi00YzQ4LWI0ZWItN2Q0ZjkxYTQxZGU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXr76ktiPo2GV5q+H6HVXXcxdrSbRya7xxlg
zQY5SlYH/EliZgssBaxnkPAPoJviBXyDTcTqM7kMYnSo9kdp6tHjF1EVOw3ENrze
kUBxwDkEvk97JCCZkQsVI4YD2TMV+996RG/kJXx+I60imUcIPAUy1v7GWs7HO76d
OZ5szTf0CvAFFnHSqtYjzX/NUZyNfqsTBnhpZnxyUOaLLeLY6UYY4YY/RWNkrJle
iESLgwkE3fzcHoDHRHqrLGVGKOadu/HsBUaxcb5a1oZR9TCtlWRcilKOgvXEpS7U
L1bWp2j5y3k4HKIhYMgMpMhP+tdAU/5sgpmXVl2nrPnHFLqMtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPe+ZWte1PoJOVZZdPOf7aH5ZccpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OTMz
YWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjllZGEzYzFlMGUvMDdjZDlmYzUtMTA1MS0z
OWJjLWJkNTYtZGFkZDY1NWMzMTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTkzM2FmNzAtZmFlNC00NGM2LTll
NDItMmI5ZWRhM2MxZTBlLzU5MzNhZjcwLWZhZTQtNDRjNi05ZTQyLTJiOWVkYTNj
MWUwZS5jcmwwHwYDVR0jBBgwFoAUX0piry7HhCrgxdrmtpTYiRdP1RowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81OTMzYWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjll
ZGEzYzFlMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4D4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABdCbnl/g7HshSyaogbMq2KrQncakIdo2tQM97+iERof0NFyKzO+MkAz
7Lo5VkudadBRgLsRerX+hGXEAOGFE65qaiOtLlSR8gWJfOUD8GwLIYjr4ry3PTZP
apSR3wlP5pkLK8m45bcZDYzyYcvNo+O8OjzqddG/3CN/NEWPmIeRXkUOv8DbTWwW
ay6tutUEqqUS/953QW4bX3iDOUlUzmSUy1At/gdD6atM2N1kWxqlI8xBJaRjlycc
vOor1rvjL4Zav2sUz4JvakCzD7Y/ge8NAuSk6qx1+zelxazZnQsHGpBR4zeRNPww
E4JbR7jWlcPqlMN1Hn4gA2mv0pTxTOY=
-----END CERTIFICATE-----
Generated at Fri May 2 06:59:47 2025 by rpki-client