Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1/afcec47f-0abd-3455-98e1-1c658eec0eb8.roa
File: afcec47f-0abd-3455-98e1-1c658eec0eb8.roa (raw, json)
Hash identifier: tMcxlEITWboJDjvBvYdI1QZmRH/St8R6FObwYHOEnDM=
Subject key identifier: A9:64:01:53:4A:E1:4B:9E:9B:D6:0D:0E:B6:D4:70:BA:3D:76:02:CF
Certificate issuer: /CN=1384adb3-843b-4d6e-a2b4-6dc37093dfe1
Certificate serial: 010D0C9F432858487CEB336F3D14B5E09DEDB100
Authority key identifier: 53:8D:5C:B5:18:DE:88:4A:47:5D:75:DC:5E:34:E8:DB:6F:C6:6F:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1/afcec47f-0abd-3455-98e1-1c658eec0eb8.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 399392
IP address blocks: 23.175.112.0/24 maxlen: 24
2602:fcb6::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:33:6f:3d:14:b5:e0:9d:ed:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1384adb3-843b-4d6e-a2b4-6dc37093dfe1
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=b91a03f1-4fba-46cf-aa68-19b704ffd160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4f:c9:17:02:6c:74:00:e0:5b:ac:47:2f:23:
a6:59:8b:b6:e5:77:79:c8:e1:be:bb:f7:c8:4d:cf:
d7:b2:64:27:c5:6b:5d:2b:51:78:a2:54:27:84:92:
6c:c7:e2:f1:ca:23:c8:53:7a:62:1f:c3:cb:b4:2f:
52:3d:03:91:b6:ab:f1:19:77:3f:9f:10:0d:e7:9d:
08:9e:11:53:1a:c0:7a:fe:8c:2f:42:af:7b:4c:6f:
87:55:da:44:b9:77:07:20:f7:ba:ae:b8:a8:9e:b6:
06:92:d1:2d:3c:74:52:95:e8:81:68:77:d7:c7:01:
f9:04:bc:7d:91:42:8a:62:6b:1d:b3:19:ae:e6:92:
57:c6:e9:71:cf:3b:56:b4:29:4c:ee:da:4d:45:fc:
69:a8:ad:5c:5c:19:d9:06:40:a3:81:03:c1:3c:b8:
e5:10:b5:03:8e:5b:c9:ce:2e:19:53:b1:5f:11:1e:
ea:37:55:9f:a8:e0:5a:18:fb:30:db:56:21:4b:b3:
ee:0a:74:71:1b:a4:6a:3b:0e:9e:ae:a0:99:a7:8e:
e3:7e:89:f8:41:db:df:12:73:69:be:29:03:dc:f1:
85:a3:c9:94:0a:72:3a:da:3d:11:a5:55:14:56:58:
f5:a4:3e:7b:a0:00:29:87:67:68:ea:9d:30:39:fe:
d2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:64:01:53:4A:E1:4B:9E:9B:D6:0D:0E:B6:D4:70:BA:3D:76:02:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1/afcec47f-0abd-3455-98e1-1c658eec0eb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1/1384adb3-843b-4d6e-a2b4-6dc37093dfe1.crl
X509v3 Authority Key Identifier:
keyid:53:8D:5C:B5:18:DE:88:4A:47:5D:75:DC:5E:34:E8:DB:6F:C6:6F:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1.cer
sbgp-ipAddrBlock: critical
IPv4:
23.175.112.0/24
IPv6:
2602:fcb6::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:52:08:69:87:8d:53:07:96:c1:c3:28:41:c2:56:e5:df:fb:
3c:fc:60:03:5d:c6:76:45:42:3c:32:41:3b:82:96:fc:fc:57:
f5:9c:3a:c7:79:0a:b8:a5:d1:19:1a:d0:0e:ee:73:16:57:c9:
2f:9f:10:05:cf:7a:1f:cf:09:a6:2e:dd:e9:e4:7e:a4:dc:d4:
b7:76:73:2d:3d:a3:fe:0a:37:05:11:73:11:0c:c3:94:44:83:
89:16:07:11:23:20:43:9a:73:6e:e0:56:29:41:c3:04:eb:35:
e8:b1:fd:51:c7:dc:74:a5:f7:ea:3f:53:6a:0f:60:59:7c:3f:
b5:e6:1c:d1:54:40:02:a0:25:56:e6:1f:63:27:bc:fa:01:b5:
5f:f5:cc:14:b8:2c:db:c1:12:25:05:9d:0f:61:ff:be:15:eb:
38:0d:6d:3e:ba:b5:01:eb:d4:d8:78:99:7f:c1:f4:dd:f0:52:
1a:67:df:92:66:2f:49:2b:3f:34:af:2c:77:44:ee:ee:96:97:
dc:50:c0:ba:18:b9:bc:44:3d:3b:14:f2:a0:ea:0b:5c:1a:f1:
c6:d8:4b:7c:fc:82:54:8c:09:2c:96:40:a7:aa:c7:bc:3a:84:
dc:aa:8e:ce:5a:42:c9:64:87:eb:66:89:8a:4d:1b:16:1e:1b:
fc:6e:f0:d1
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEh86zNvPRS14J3tsQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTM4NGFkYjMtODQzYi00ZDZlLWEyYjQtNmRjMzcwOTNk
ZmUxMB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
YjkxYTAzZjEtNGZiYS00NmNmLWFhNjgtMTliNzA0ZmZkMTYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE/JFwJsdADgW6xHLyOmWYu25Xd5yOG+u/fI
Tc/XsmQnxWtdK1F4olQnhJJsx+LxyiPIU3piH8PLtC9SPQORtqvxGXc/nxAN550I
nhFTGsB6/owvQq97TG+HVdpEuXcHIPe6rrionrYGktEtPHRSleiBaHfXxwH5BLx9
kUKKYmsdsxmu5pJXxulxzztWtClM7tpNRfxpqK1cXBnZBkCjgQPBPLjlELUDjlvJ
zi4ZU7FfER7qN1WfqOBaGPsw21YhS7PuCnRxG6RqOw6erqCZp47jfon4QdvfEnNp
vikD3PGFo8mUCnI62j0RpVUUVlj1pD57oAAph2do6p0wOf7SWQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFKlkAVNK4Uuem9YNDrbUcLo9dgLPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xMzg0
YWRiMy04NDNiLTRkNmUtYTJiNC02ZGMzNzA5M2RmZTEvYWZjZWM0N2YtMGFiZC0z
NDU1LTk4ZTEtMWM2NThlZWMwZWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTM4NGFkYjMtODQzYi00ZDZlLWEy
YjQtNmRjMzcwOTNkZmUxLzEzODRhZGIzLTg0M2ItNGQ2ZS1hMmI0LTZkYzM3MDkz
ZGZlMS5jcmwwHwYDVR0jBBgwFoAUU41ctRjeiEpHXXXcXjTo22/Gbx8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xMzg0YWRiMy04NDNiLTRkNmUtYTJiNC02ZGMz
NzA5M2RmZTEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF69wMA4E
AgACMAgDBgQmAvy2ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAoUghph41TB5bBwyhBwlbl3/s8/GADXcZ2
RUI8MkE7gpb8/Ff1nDrHeQq4pdEZGtAO7nMWV8kvnxAFz3ofzwmmLt3p5H6k3NS3
dnMtPaP+CjcFEXMRDMOURIOJFgcRIyBDmnNu4FYpQcME6zXosf1Rx9x0pffqP1Nq
D2BZfD+15hzRVEACoCVW5h9jJ7z6AbVf9cwUuCzbwRIlBZ0PYf++Fes4DW0+urUB
69TYeJl/wfTd8FIaZ9+SZi9JKz80ryx3RO7ulpfcUMC6GLm8RD07FPKg6gtcGvHG
2Et8/IJUjAkslkCnqse8OoTcqo7OWkLJZIfrZomKTRsWHhv8bvDR
-----END CERTIFICATE-----
Generated at Mon May 12 11:38:45 2025 by rpki-client