Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/a1f25b08-c285-351d-a5ce-01201a16ceaa.roa
File: a1f25b08-c285-351d-a5ce-01201a16ceaa.roa (raw, json)
Hash identifier: l+J1HkdQ7prrME9HihctQ6KVJ6Qdl0K4hTm94t/Ifhg=
Subject key identifier: 28:18:D4:1B:55:6B:C4:A6:0D:9E:A6:29:E7:01:85:F6:82:99:99:00
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F432858481C9A902BAFE4D3A266033E80
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/a1f25b08-c285-351d-a5ce-01201a16ceaa.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 398202
IP address blocks: 23.148.80.0/24 maxlen: 24
66.118.240.0/22 maxlen: 24
69.64.116.0/22 maxlen: 24
2605:88c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:90:2b:af:e4:d3:a2:66:03:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=17cae109-9d4e-4077-9f46-d30503132149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b3:c0:67:5d:1e:b9:79:b2:77:8d:8f:28:96:
88:85:a8:77:05:9a:01:5f:e0:5e:a1:1a:68:ec:73:
b1:fb:ba:e8:5b:12:f3:1f:f7:23:10:76:bb:e9:c8:
c3:c5:bb:96:2a:38:0f:56:27:c6:5e:52:d1:63:4a:
cc:9b:37:35:b7:ef:2b:ca:9a:74:b5:a5:b6:dc:20:
5c:54:21:01:39:43:af:fa:a4:d2:00:a0:30:44:29:
36:4e:d0:c2:5c:d0:f2:ac:c3:97:cb:08:54:11:69:
2d:13:b7:5c:ab:97:2e:34:52:86:8b:d4:d5:9e:53:
80:48:0e:5f:48:da:1d:f9:fa:d5:0b:c6:20:6f:70:
fa:e7:5a:0a:fb:be:99:fc:05:07:ca:f9:08:e8:cc:
77:cd:e4:58:3c:6d:64:6f:3e:1d:87:a3:c1:aa:dd:
42:c5:81:80:57:03:28:0e:8b:b5:95:1b:88:07:6a:
c2:ce:1f:9c:b4:50:91:8b:04:91:d4:0c:f2:fc:6b:
a3:72:dc:f2:86:2c:13:32:a3:e8:86:19:e2:eb:c6:
f6:5e:8d:33:a8:61:bd:75:9e:30:5c:ba:8f:0a:9a:
71:af:70:4b:c6:f1:03:74:62:a8:1d:4d:90:23:7e:
7b:9a:4e:5b:6f:fb:12:73:c9:61:d3:30:f3:ce:39:
e2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:18:D4:1B:55:6B:C4:A6:0D:9E:A6:29:E7:01:85:F6:82:99:99:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/a1f25b08-c285-351d-a5ce-01201a16ceaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv4:
23.148.80.0/24
66.118.240.0/22
69.64.116.0/22
IPv6:
2605:88c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:f9:c3:8d:c7:d9:40:51:90:0c:8a:5e:49:77:0c:05:56:34:
68:07:bc:63:d6:f8:e9:b9:8a:71:f0:4c:fd:cc:72:9b:75:11:
49:4a:07:2a:49:de:4f:34:9b:df:49:95:77:18:c1:c0:1f:cb:
7b:a5:22:4f:1d:02:eb:4e:f9:14:fb:ef:5a:70:37:20:76:cc:
c7:27:46:3e:42:59:0b:ca:38:2f:ea:c8:7f:0a:bc:f6:88:6c:
fc:50:e4:30:a7:17:23:ce:f1:46:2e:f4:6b:20:6b:0a:79:43:
ab:03:89:4d:df:e2:e9:79:14:0a:5a:34:98:c4:35:6a:3f:da:
90:ca:82:c6:21:31:ed:f2:22:af:44:0d:91:13:ce:81:64:dd:
e4:87:0a:af:79:4f:44:f7:1b:57:eb:34:55:36:38:38:01:de:
46:11:9b:22:35:1c:f1:c7:ff:a4:29:26:e1:96:8a:08:c0:d9:
df:43:0f:df:57:e9:ec:55:d4:bd:83:6d:6c:f3:c7:26:e0:24:
cb:78:76:b4:96:75:40:8b:74:7a:1f:37:21:b5:f9:e2:70:8e:
bf:63:86:1e:44:b9:31:37:84:22:24:b3:85:f8:cd:05:49:05:
19:54:a5:91:de:44:e2:7a:73:d2:04:22:7a:f9:da:16:1c:65:
89:ac:fa:25
-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEgcmpArr+TTomYDPoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4
MzcwMB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk
MTdjYWUxMDktOWQ0ZS00MDc3LTlmNDYtZDMwNTAzMTMyMTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrPAZ10euXmyd42PKJaIhah3BZoBX+BeoRpo
7HOx+7roWxLzH/cjEHa76cjDxbuWKjgPVifGXlLRY0rMmzc1t+8rypp0taW23CBc
VCEBOUOv+qTSAKAwRCk2TtDCXNDyrMOXywhUEWktE7dcq5cuNFKGi9TVnlOASA5f
SNod+frVC8Ygb3D651oK+76Z/AUHyvkI6Mx3zeRYPG1kbz4dh6PBqt1CxYGAVwMo
Dou1lRuIB2rCzh+ctFCRiwSR1Azy/GujctzyhiwTMqPohhni68b2Xo0zqGG9dZ4w
XLqPCppxr3BLxvEDdGKoHU2QI357mk5bb/sSc8lh0zDzzjnizwIDAQABo4IDcDCC
A2wwHQYDVR0OBBYEFCgY1BtVa8SmDZ6mKecBhfaCmZkAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj
NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvYTFmMjViMDgtYzI4NS0z
NTFkLWE1Y2UtMDEyMDFhMTZjZWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm
MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2
ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx
YjZjNjgzNzAuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAF5RQAwQC
QnbwAwQCRUB0MA0EAgACMAcDBQAmBYjAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGr5w43H2UBRkAyKXkl3
DAVWNGgHvGPW+Om5inHwTP3Mcpt1EUlKBypJ3k80m99JlXcYwcAfy3ulIk8dAutO
+RT771pwNyB2zMcnRj5CWQvKOC/qyH8KvPaIbPxQ5DCnFyPO8UYu9Gsgawp5Q6sD
iU3f4ul5FApaNJjENWo/2pDKgsYhMe3yIq9EDZETzoFk3eSHCq95T0T3G1frNFU2
ODgB3kYRmyI1HPHH/6QpJuGWigjA2d9DD99X6exV1L2DbWzzxybgJMt4drSWdUCL
dHofNyG1+eJwjr9jhh5EuTE3hCIks4X4zQVJBRlUpZHeROJ6c9IEInr52hYcZYms
+iU=
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:25:20 2025 by rpki-client