Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/a9270aef-9b4e-3df7-aa5b-0b12831a0972.roa
File: a9270aef-9b4e-3df7-aa5b-0b12831a0972.roa (raw, json)
Hash identifier: ac5XV85m/RKRmBeDWfdBNff5O+hwgacEnoeMiejHMC8=
Subject key identifier: 09:A5:48:10:CC:AC:91:20:6A:64:86:31:23:4B:A5:BE:27:B8:0F:ED
Certificate issuer: /CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd
Certificate serial: 010D0C9F4328584865303F8B2C838ECC71B6C1E0
Authority key identifier: EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/a9270aef-9b4e-3df7-aa5b-0b12831a0972.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 16509
IP address blocks: 23.165.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:3f:8b:2c:83:8e:cc:71:b6:c1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=6b7eba91-22ba-4dbd-b73c-7a00a302f9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:51:56:b7:0e:f0:ab:18:45:70:1e:3c:da:90:
d1:9c:9d:2f:bc:5b:a6:a6:28:fc:f0:b7:f4:be:14:
9c:51:64:dc:0c:28:4b:4d:17:0f:47:bf:9a:24:49:
f4:cb:d7:89:26:bc:85:45:e4:8b:ff:76:98:a3:5a:
86:24:4e:8d:65:e9:da:05:87:e5:82:ec:45:22:6e:
bd:05:96:b5:c7:05:3d:4b:2f:53:71:8f:56:8f:0c:
df:39:f6:88:c3:1a:14:38:3b:25:10:bd:27:11:b2:
88:0c:0b:7f:50:89:f3:10:94:0a:08:f5:2c:3a:0c:
23:da:17:b6:08:1a:32:c9:43:2f:89:f2:8d:a9:06:
e9:82:40:51:c4:6f:15:26:f2:26:2e:f4:2e:e6:98:
60:ed:bb:60:fd:bc:0d:9a:42:2b:50:63:c2:38:29:
9c:1f:3f:61:f1:20:4a:43:4d:c6:70:ad:da:42:72:
15:10:1f:54:a9:ca:f3:c2:da:0d:01:40:67:f8:77:
fa:f7:cb:1d:d2:e4:19:33:c2:1a:ae:d9:53:85:a7:
04:09:ee:07:bf:15:a2:99:39:22:20:00:ac:18:a9:
c1:c0:7d:b4:bb:ac:f3:f9:d9:ff:28:91:ef:73:46:
09:09:61:8c:1f:5e:3a:a1:b3:a6:a7:71:2e:65:b4:
49:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A5:48:10:CC:AC:91:20:6A:64:86:31:23:4B:A5:BE:27:B8:0F:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/a9270aef-9b4e-3df7-aa5b-0b12831a0972.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl
X509v3 Authority Key Identifier:
keyid:EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer
sbgp-ipAddrBlock: critical
IPv4:
23.165.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:53:b7:1e:5d:0d:62:6a:27:1c:bb:94:14:37:ce:59:c7:68:
6d:9f:fa:e2:0d:d5:86:a5:51:09:45:e1:14:98:c4:01:f3:b1:
5b:99:fc:00:91:e2:b5:b5:c1:47:25:7b:a0:be:06:f3:5f:c5:
6f:68:be:50:44:a8:72:33:5f:84:eb:d9:96:80:e0:f3:d5:ba:
ec:ff:1a:af:3b:d9:37:2b:80:ee:8c:e4:b0:5f:ff:3d:ee:bc:
b7:a3:0e:01:2a:20:8d:48:98:54:82:fd:2f:39:97:7a:cc:cf:
aa:a1:c9:52:db:17:b9:df:ac:1f:1c:d7:16:c1:02:e3:eb:dc:
8c:c4:88:1a:2d:02:d9:f7:2a:84:0e:91:e8:d6:3d:1a:33:01:
b0:6a:f8:b5:91:b2:57:98:0c:48:5d:93:f4:2e:26:54:90:85:
cc:c3:aa:25:50:fa:1c:e9:e4:2e:9c:17:99:04:03:86:b5:f6:
54:f4:64:56:f4:7c:59:90:dd:d8:c3:3c:ad:5a:a0:8e:a5:48:
96:69:38:d2:2d:75:4f:c1:08:af:72:60:8c:56:fd:af:ae:5b:
4d:9e:2a:53:67:ab:99:29:61:8a:b7:f6:63:d8:75:9a:cc:07:
ee:f4:8f:ee:81:c7:09:7e:0d:05:64:c9:ab:2e:e4:c8:ad:c8:
70:80:ec:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhlMD+LLIOOzHG2weAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWU3YjliMjgtNzkzNC00NTRhLThiMmYtMjQ2ZDg4ODlm
ZGJkMB4XDTI1MDEwMTAyMDA0MFoXDTI1MDQwMTAxMDA0MFowLzEtMCsGA1UEAxMk
NmI3ZWJhOTEtMjJiYS00ZGJkLWI3M2MtN2EwMGEzMDJmOWMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8lFWtw7wqxhFcB482pDRnJ0vvFumpij88Lf0
vhScUWTcDChLTRcPR7+aJEn0y9eJJryFReSL/3aYo1qGJE6NZenaBYflguxFIm69
BZa1xwU9Sy9TcY9WjwzfOfaIwxoUODslEL0nEbKIDAt/UInzEJQKCPUsOgwj2he2
CBoyyUMvifKNqQbpgkBRxG8VJvImLvQu5phg7btg/bwNmkIrUGPCOCmcHz9h8SBK
Q03GcK3aQnIVEB9UqcrzwtoNAUBn+Hf698sd0uQZM8IartlThacECe4HvxWimTki
IACsGKnBwH20u6zz+dn/KJHvc0YJCWGMH146obOmp3EuZbRJBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAmlSBDMrJEgamSGMSNLpb4nuA/tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZTdi
OWIyOC03OTM0LTQ1NGEtOGIyZi0yNDZkODg4OWZkYmQvYTkyNzBhZWYtOWI0ZS0z
ZGY3LWFhNWItMGIxMjgzMWEwOTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWU3YjliMjgtNzkzNC00NTRhLThi
MmYtMjQ2ZDg4ODlmZGJkLzFlN2I5YjI4LTc5MzQtNDU0YS04YjJmLTI0NmQ4ODg5
ZmRiZC5jcmwwHwYDVR0jBBgwFoAU7CTbIeW+m2u6JkrzwmZOds7dmxQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZTdiOWIyOC03OTM0LTQ1NGEtOGIyZi0yNDZk
ODg4OWZkYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6WoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAVTtx5dDWJqJxy7lBQ3zlnHaG2f+uIN1YalUQlF4RSYxAHzsVuZ/ACR
4rW1wUcle6C+BvNfxW9ovlBEqHIzX4Tr2ZaA4PPVuuz/Gq872TcrgO6M5LBf/z3u
vLejDgEqII1ImFSC/S85l3rMz6qhyVLbF7nfrB8c1xbBAuPr3IzEiBotAtn3KoQO
kejWPRozAbBq+LWRsleYDEhdk/QuJlSQhczDqiVQ+hzp5C6cF5kEA4a19lT0ZFb0
fFmQ3djDPK1aoI6lSJZpONItdU/BCK9yYIxW/a+uW02eKlNnq5kpYYq39mPYdZrM
B+70j+6Bxwl+DQVkyasu5MityHCA7JU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:38:35 2025 by rpki-client