Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/599a3cef-130f-3ac0-802b-3ae5797ea70e.roa
File: 599a3cef-130f-3ac0-802b-3ae5797ea70e.roa (raw, json)
Hash identifier: H7DGT7Gn5HqDsOD2lnzVhymq7x8wXjzko4PhrYfgi2U=
Subject key identifier: 60:39:3F:4D:06:4A:6A:28:B0:F1:1B:E2:FD:06:CA:06:E8:27:63:79
Certificate issuer: /CN=c88386bc-096d-46b5-8278-7abb79f23665
Certificate serial: 010D0C9F4328584851A57977915E70A766976440
Authority key identifier: 7D:3F:78:AA:D9:A1:EE:C4:6E:D8:24:9F:83:D2:8C:69:53:09:D2:3A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/599a3cef-130f-3ac0-802b-3ae5797ea70e.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 7311
IP address blocks: 23.155.64.0/24 maxlen: 24
161.129.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:79:77:91:5e:70:a7:66:97:64:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c88386bc-096d-46b5-8278-7abb79f23665
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=b3f946c0-8065-453d-863e-8369bde61279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:42:05:7c:e2:9e:22:ae:d8:46:24:1b:f5:6a:
69:51:6a:8e:89:fe:b5:91:f3:6b:5f:6e:53:d6:c5:
f0:18:ee:9f:14:a0:91:db:6e:4a:e8:be:24:ea:fb:
0c:e1:39:79:08:d5:58:5a:bc:2e:3c:3c:5b:32:cb:
de:6b:73:cb:ed:e9:12:9f:90:42:61:cf:93:e6:ba:
dc:9a:e9:9f:8f:99:49:da:fd:be:a6:09:e9:53:9a:
08:d3:ce:03:3f:82:a4:61:3b:10:1e:8d:1f:e0:bb:
21:57:d0:3d:db:c2:99:2e:21:59:10:af:fb:0c:e8:
2c:00:03:f2:91:0a:d3:22:42:32:e9:1d:79:a1:e7:
53:8e:29:e0:76:25:6f:f3:06:f0:6d:f4:69:67:96:
97:41:df:35:91:58:f8:6a:b3:22:af:80:c6:40:4d:
b9:c5:64:59:aa:5f:03:c5:80:d1:c2:7b:f0:ab:3c:
fb:67:1b:5c:04:6e:ce:b1:86:47:10:8a:24:05:dd:
56:c7:84:cd:89:18:7b:b1:88:07:1e:0e:ca:6e:f6:
b9:89:28:ff:a4:72:af:f9:54:2d:31:12:1e:47:0c:
c2:1a:6d:21:bb:d7:d4:39:47:2f:35:bd:c0:6b:10:
ec:11:c5:88:0d:94:56:00:7a:5d:89:a9:8d:b1:cb:
c1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:39:3F:4D:06:4A:6A:28:B0:F1:1B:E2:FD:06:CA:06:E8:27:63:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/599a3cef-130f-3ac0-802b-3ae5797ea70e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/c88386bc-096d-46b5-8278-7abb79f23665.crl
X509v3 Authority Key Identifier:
keyid:7D:3F:78:AA:D9:A1:EE:C4:6E:D8:24:9F:83:D2:8C:69:53:09:D2:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665.cer
sbgp-ipAddrBlock: critical
IPv4:
23.155.64.0/24
161.129.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:d9:48:73:39:55:b1:c6:4b:bb:76:e3:ee:d1:3c:98:17:00:
b0:a8:96:6b:00:4c:c3:66:24:82:2e:c2:d7:91:8e:8b:5b:86:
57:58:e3:94:28:a2:b1:74:02:98:96:03:8f:64:bd:ee:9a:16:
52:c1:d2:f4:63:87:a4:9e:c2:4c:48:b5:62:fa:f8:15:ee:11:
55:5c:a3:2b:7b:5b:87:11:29:20:dc:fe:5d:d9:dd:b7:3a:a1:
58:f3:d5:ed:ff:5b:6a:a1:65:49:ba:99:84:22:5d:8d:af:12:
9e:e2:7e:a4:d4:bb:3b:f6:98:e8:98:2a:16:14:42:2b:bb:cb:
75:0f:8b:ff:3f:2d:5b:b0:3c:89:ed:9c:43:c9:3a:cf:64:a9:
c9:ab:33:a3:a0:5b:98:55:5d:b6:a2:ed:40:98:c4:10:db:9e:
5a:28:19:54:b3:4d:5a:4c:4a:7c:78:51:71:9f:ec:77:c5:2c:
95:b4:56:c5:8a:3b:26:0e:1e:05:fc:7c:a8:7e:55:2f:fd:4d:
10:cd:35:c9:f6:ee:c4:6c:0b:09:76:2b:c1:d7:6b:95:b9:d5:
4d:3f:f6:68:df:29:35:29:3e:e2:c8:ef:e0:5a:7a:ee:01:bf:
27:9c:55:c0:7d:35:51:4a:23:2a:aa:f6:79:c9:a3:6a:93:0a:
ea:77:32:3d
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEhRpXl3kV5wp2aXZEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg4Mzg2YmMtMDk2ZC00NmI1LTgyNzgtN2FiYjc5ZjIz
NjY1MB4XDTI0MTIyNTAyMDAzOFoXDTI1MDMyNTAxMDAzOFowLzEtMCsGA1UEAxMk
YjNmOTQ2YzAtODA2NS00NTNkLTg2M2UtODM2OWJkZTYxMjc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kIFfOKeIq7YRiQb9WppUWqOif61kfNrX25T
1sXwGO6fFKCR225K6L4k6vsM4Tl5CNVYWrwuPDxbMsvea3PL7ekSn5BCYc+T5rrc
mumfj5lJ2v2+pgnpU5oI084DP4KkYTsQHo0f4LshV9A928KZLiFZEK/7DOgsAAPy
kQrTIkIy6R15oedTjingdiVv8wbwbfRpZ5aXQd81kVj4arMir4DGQE25xWRZql8D
xYDRwnvwqzz7ZxtcBG7OsYZHEIokBd1Wx4TNiRh7sYgHHg7Kbva5iSj/pHKv+VQt
MRIeRwzCGm0hu9fUOUcvNb3AaxDsEcWIDZRWAHpdiamNscvBsQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFGA5P00GSmoosPEb4v0GygboJ2N5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jODgz
ODZiYy0wOTZkLTQ2YjUtODI3OC03YWJiNzlmMjM2NjUvNTk5YTNjZWYtMTMwZi0z
YWMwLTgwMmItM2FlNTc5N2VhNzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzg4Mzg2YmMtMDk2ZC00NmI1LTgy
NzgtN2FiYjc5ZjIzNjY1L2M4ODM4NmJjLTA5NmQtNDZiNS04Mjc4LTdhYmI3OWYy
MzY2NS5jcmwwHwYDVR0jBBgwFoAUfT94qtmh7sRu2CSfg9KMaVMJ0jowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9jODgzODZiYy0wOTZkLTQ2YjUtODI3OC03YWJi
NzlmMjM2NjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF5tAAwQA
oYG6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAEbZSHM5VbHGS7t24+7RPJgXALColmsATMNmJIIuwteRjotb
hldY45QoorF0ApiWA49kve6aFlLB0vRjh6SewkxItWL6+BXuEVVcoyt7W4cRKSDc
/l3Z3bc6oVjz1e3/W2qhZUm6mYQiXY2vEp7ifqTUuzv2mOiYKhYUQiu7y3UPi/8/
LVuwPIntnEPJOs9kqcmrM6OgW5hVXbai7UCYxBDbnlooGVSzTVpMSnx4UXGf7HfF
LJW0VsWKOyYOHgX8fKh+VS/9TRDNNcn27sRsCwl2K8HXa5W51U0/9mjfKTUpPuLI
7+Baeu4BvyecVcB9NVFKIyqq9nnJo2qTCup3Mj0=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:56:49 2025 by rpki-client