Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/cde9ce8b-b7f9-3619-9dae-ba2d46cb9395.roa
File: cde9ce8b-b7f9-3619-9dae-ba2d46cb9395.roa (raw, json)
Hash identifier: Wgq8PPns4CekfyxQZ0By/ZjSjhD75s0/yulDojjDDrw=
Subject key identifier: C4:22:EE:C2:BE:3C:5B:D3:8A:7F:D9:7E:B3:CA:58:EF:49:72:CD:CB
Certificate issuer: /CN=896f0624-c28d-44c0-93cf-3f879f877518
Certificate serial: 010D0C9F432858485F9AE0F1B7512E054DA81380
Authority key identifier: AE:65:9C:F0:57:7D:5C:5C:89:D1:60:E9:01:2F:27:A1:AB:B6:AF:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/cde9ce8b-b7f9-3619-9dae-ba2d46cb9395.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 400503
IP address blocks: 23.133.56.0/24 maxlen: 24
23.133.57.0/24 maxlen: 24
2602:fbb4::/40 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:e0:f1:b7:51:2e:05:4d:a8:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896f0624-c28d-44c0-93cf-3f879f877518
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=4ac658e6-ca2d-48a7-b051-4036463dfdcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:e0:72:77:e3:ca:2a:bb:f6:f2:aa:f7:a0:
de:d4:94:7e:10:0f:8d:1c:d3:fb:3a:e5:69:3e:5d:
b7:6c:aa:96:ea:ce:d4:e9:3b:e4:8e:23:0c:a2:7b:
da:ee:88:fc:9d:e6:fa:bb:5e:93:75:4b:ff:45:f0:
40:95:24:f5:84:b5:1c:fe:8e:31:e2:83:31:33:59:
2e:da:33:30:f3:e9:c1:79:ad:6f:a1:58:8e:8c:04:
38:6a:5b:f3:43:2c:98:84:c9:b6:07:25:b1:ce:5f:
ba:0c:60:db:35:10:ab:8b:5f:86:70:45:4c:f2:62:
71:f8:fc:41:2d:df:b6:13:55:f7:1c:09:d8:c1:c7:
56:35:67:70:47:70:6b:29:49:f1:a6:46:93:fb:ef:
e7:b9:57:de:c9:ac:29:b2:ed:3c:32:57:26:d8:93:
52:55:fe:49:63:b1:0d:ea:7d:5d:91:41:7f:52:4b:
8e:00:8f:23:1b:2b:8f:88:53:a9:b2:d5:30:83:46:
d8:7b:08:42:cf:66:33:c3:ff:05:c6:9d:55:c2:fa:
79:27:58:0e:b4:1c:ef:24:28:75:b9:7c:fd:4d:ab:
fe:b4:fe:37:38:7d:2c:b9:b2:98:b6:dd:5c:87:db:
f8:18:84:5e:d4:af:69:e9:b0:bd:3a:e5:86:af:8f:
27:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:22:EE:C2:BE:3C:5B:D3:8A:7F:D9:7E:B3:CA:58:EF:49:72:CD:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/cde9ce8b-b7f9-3619-9dae-ba2d46cb9395.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/896f0624-c28d-44c0-93cf-3f879f877518.crl
X509v3 Authority Key Identifier:
keyid:AE:65:9C:F0:57:7D:5C:5C:89:D1:60:E9:01:2F:27:A1:AB:B6:AF:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.56.0/23
IPv6:
2602:fbb4::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:20:32:22:50:93:69:08:5b:cd:e5:35:4c:f5:f1:28:48:cc:
58:7a:29:90:6e:42:0c:2e:a2:98:44:cf:dc:e2:a0:ee:4e:f3:
1e:31:c5:df:76:25:2f:85:b1:7b:72:44:dc:13:fe:10:79:f3:
8c:d9:0a:c0:02:b9:df:e4:37:29:82:5b:3d:c1:3f:d2:5d:7f:
8f:b3:f6:15:f7:e7:70:68:08:79:16:87:a5:31:c8:ac:8d:5f:
d7:f4:a1:d5:c7:72:33:94:b8:db:48:7f:66:90:48:68:aa:0c:
e8:72:97:d5:fb:9f:cd:25:49:6c:5c:48:ec:d6:5b:31:47:36:
e5:a7:0a:73:f3:40:5f:26:cd:a4:f5:46:3e:fa:56:df:92:32:
89:c0:d4:34:fe:08:c2:d2:cf:a0:46:a4:28:c5:96:24:22:ad:
af:07:21:d1:40:aa:d1:9b:c1:17:a1:01:b4:27:b6:75:75:5d:
a8:14:e4:75:ac:6d:01:d5:81:44:f2:e4:e7:ab:6f:7c:01:36:
51:b3:30:76:a7:50:93:6f:cc:9f:04:44:0c:e4:0e:18:17:13:
17:8f:7c:a4:bb:a6:57:28:cd:e7:74:13:ad:1c:3a:be:08:8c:
5a:e9:ae:43:7f:e9:40:e7:e6:e4:57:cb:42:fb:81:71:ea:e9:
a5:cc:40:b8
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEhfmuDxt1EuBU2oE4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODk2ZjA2MjQtYzI4ZC00NGMwLTkzY2YtM2Y4NzlmODc3
NTE4MB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk
NGFjNjU4ZTYtY2EyZC00OGE3LWIwNTEtNDAzNjQ2M2RmZGNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS/gcnfjyiq79vKq96De1JR+EA+NHNP7OuVp
Pl23bKqW6s7U6TvkjiMMonva7oj8neb6u16TdUv/RfBAlST1hLUc/o4x4oMxM1ku
2jMw8+nBea1voViOjAQ4alvzQyyYhMm2ByWxzl+6DGDbNRCri1+GcEVM8mJx+PxB
Ld+2E1X3HAnYwcdWNWdwR3BrKUnxpkaT++/nuVfeyawpsu08Mlcm2JNSVf5JY7EN
6n1dkUF/UkuOAI8jGyuPiFOpstUwg0bYewhCz2Yzw/8Fxp1Vwvp5J1gOtBzvJCh1
uXz9Tav+tP43OH0subKYtt1ch9v4GIRe1K9p6bC9OuWGr48n5wIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFMQi7sK+PFvTin/ZfrPKWO9Jcs3LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OTZm
MDYyNC1jMjhkLTQ0YzAtOTNjZi0zZjg3OWY4Nzc1MTgvY2RlOWNlOGItYjdmOS0z
NjE5LTlkYWUtYmEyZDQ2Y2I5Mzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODk2ZjA2MjQtYzI4ZC00NGMwLTkz
Y2YtM2Y4NzlmODc3NTE4Lzg5NmYwNjI0LWMyOGQtNDRjMC05M2NmLTNmODc5Zjg3
NzUxOC5jcmwwHwYDVR0jBBgwFoAUrmWc8Fd9XFyJ0WDpAS8noau2rwswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84OTZmMDYyNC1jMjhkLTQ0YzAtOTNjZi0zZjg3
OWY4Nzc1MTguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBF4U4MA4E
AgACMAgDBgAmAvu0ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCpIDIiUJNpCFvN5TVM9fEoSMxYeimQbkIM
LqKYRM/c4qDuTvMeMcXfdiUvhbF7ckTcE/4QefOM2QrAArnf5Dcpgls9wT/SXX+P
s/YV9+dwaAh5FoelMcisjV/X9KHVx3IzlLjbSH9mkEhoqgzocpfV+5/NJUlsXEjs
1lsxRzblpwpz80BfJs2k9UY++lbfkjKJwNQ0/gjC0s+gRqQoxZYkIq2vByHRQKrR
m8EXoQG0J7Z1dV2oFOR1rG0B1YFE8uTnq298ATZRszB2p1CTb8yfBEQM5A4YFxMX
j3yku6ZXKM3ndBOtHDq+CIxa6a5Df+lA5+bkV8tC+4Fx6umlzEC4
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:45:22 2025 by rpki-client