Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa
File: 65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa (raw, json)
Hash identifier: CcZl59/a1jiGFxSnG9TM1tLgbnhwzV5viO1H5/2VgAA=
Subject key identifier: 78:D6:14:13:86:E7:08:44:EF:1A:98:D9:09:00:12:2E:99:9A:47:65
Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020
Certificate serial: 010D0C9F432858486EF5C0ECC67C7761B8238A80
Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 13849
IP address blocks: 23.133.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:c0:ec:c6:7c:77:61:b8:23:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=767d7ca8-df53-4dde-b662-1de1ac6e8d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ca:34:d2:20:f1:ba:36:61:ef:9d:f0:fd:a8:
14:60:fa:b1:58:9e:33:e2:37:41:cb:b9:1a:63:bc:
da:ab:e1:39:f0:a0:62:5e:0d:30:d4:ab:e1:6d:7a:
ee:bc:5c:c1:20:f4:6f:0a:68:f4:75:ea:b8:1f:44:
40:5f:a8:7a:15:95:91:6d:2c:c3:4d:48:d0:2f:d4:
0d:4e:dc:ca:39:80:a0:8f:4a:f8:3e:0c:18:48:ef:
b5:df:2f:41:41:5b:3d:3a:35:c1:ec:c1:e7:3c:ec:
8d:63:38:e2:c5:42:64:dd:28:09:3a:97:e9:39:72:
ce:d8:4b:fe:80:c1:f3:ff:61:01:b8:a7:ed:4e:b7:
a5:eb:62:fc:dc:73:24:49:3f:b4:1c:0c:82:90:0c:
d6:d1:18:81:c4:36:91:bc:e4:77:b4:f8:79:c1:b1:
4b:92:7f:f2:11:93:0d:b8:d6:1c:ac:e9:fb:2c:d1:
19:ff:fc:5a:f0:63:b5:84:84:ff:28:41:8b:08:3e:
51:53:8c:2f:60:28:9a:3b:11:74:74:44:27:e0:dd:
7e:16:46:63:2e:8b:ec:45:e8:b9:da:47:3a:5b:aa:
cf:a1:27:e4:6b:50:2a:ae:8d:43:63:29:5a:22:ae:
d8:5a:8b:70:bf:2c:31:89:a2:ac:cf:8d:c7:c3:71:
cf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D6:14:13:86:E7:08:44:EF:1A:98:D9:09:00:12:2E:99:9A:47:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl
X509v3 Authority Key Identifier:
keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.82.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:39:a1:65:d2:da:38:d8:93:b5:54:52:85:f5:b4:98:3c:95:
8d:03:5e:25:ea:ad:ec:0c:85:33:2f:0f:ce:6e:8b:54:c0:ad:
66:a8:cd:75:df:6b:f6:c7:f2:a2:d7:ab:90:76:6e:d6:1c:3b:
84:9b:e0:25:08:6f:7b:77:cf:76:48:dd:d3:a6:13:f0:6f:64:
fa:81:4c:91:f2:80:87:2b:94:39:89:78:6d:42:89:c5:e1:a7:
94:48:c5:7e:d2:17:bf:22:f3:f6:36:77:ea:00:0c:bc:f5:93:
4a:a5:15:4c:52:cf:b7:e4:aa:a4:f6:18:65:77:9b:a9:d6:80:
41:85:23:df:6d:3f:9f:9b:5c:db:8d:93:8f:89:c7:bb:79:83:
07:28:15:7a:01:c2:76:d0:3b:19:24:98:98:4d:07:de:27:84:
cd:18:77:e1:e1:dc:66:5a:fe:9b:01:0c:40:5b:69:77:12:65:
5b:96:4f:4e:0d:3f:5d:68:74:6e:1b:af:af:dd:da:45:2a:64:
b9:a0:10:90:17:fc:4d:00:be:fc:e9:ce:09:4f:7d:dd:9b:9f:
e4:a1:18:3c:da:fe:d2:2a:0e:20:f4:98:c7:c8:6a:29:3d:1a:
c8:e4:20:be:c1:7f:db:84:9d:57:93:e2:e2:fd:59:f6:eb:32:
31:89:20:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhu9cDsxnx3YbgjioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl
MDIwMB4XDTI1MDEwNDE0MDA1MVoXDTI1MDQwNDEzMDA1MVowLzEtMCsGA1UEAxMk
NzY3ZDdjYTgtZGY1My00ZGRlLWI2NjItMWRlMWFjNmU4ZDFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjco00iDxujZh753w/agUYPqxWJ4z4jdBy7ka
Y7zaq+E58KBiXg0w1KvhbXruvFzBIPRvCmj0deq4H0RAX6h6FZWRbSzDTUjQL9QN
TtzKOYCgj0r4PgwYSO+13y9BQVs9OjXB7MHnPOyNYzjixUJk3SgJOpfpOXLO2Ev+
gMHz/2EBuKftTrel62L83HMkST+0HAyCkAzW0RiBxDaRvOR3tPh5wbFLkn/yEZMN
uNYcrOn7LNEZ//xa8GO1hIT/KEGLCD5RU4wvYCiaOxF0dEQn4N1+FkZjLovsRei5
2kc6W6rPoSfka1Aqro1DYylaIq7YWotwvywxiaKsz43Hw3HPPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHjWFBOG5whE7xqY2QkAEi6ZmkdlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl
ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvNjViYjA3YTQtZWI5Mi0z
MDM2LWE3OTEtZjNjZTlhMzMyZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy
NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2
ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz
MTJhNmUwMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4VSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFo5oWXS2jjYk7VUUoX1tJg8lY0DXiXqrewMhTMvD85ui1TArWaozXXf
a/bH8qLXq5B2btYcO4Sb4CUIb3t3z3ZI3dOmE/BvZPqBTJHygIcrlDmJeG1CicXh
p5RIxX7SF78i8/Y2d+oADLz1k0qlFUxSz7fkqqT2GGV3m6nWgEGFI99tP5+bXNuN
k4+Jx7t5gwcoFXoBwnbQOxkkmJhNB94nhM0Yd+Hh3GZa/psBDEBbaXcSZVuWT04N
P11odG4br6/d2kUqZLmgEJAX/E0AvvzpzglPfd2bn+ShGDza/tIqDiD0mMfIaik9
GsjkIL7Bf9uEnVeT4uL9WfbrMjGJIG4=
-----END CERTIFICATE-----
Generated at Tue Apr 29 13:14:02 2025 by rpki-client