Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/8160f0e3-2d6f-3b91-9726-f47e80235128.roa
File: 8160f0e3-2d6f-3b91-9726-f47e80235128.roa (raw, json)
Hash identifier: q/azcHId9xLVoWHqFCCsoOZxmE04w+neETJYN4eJ5Pc=
Subject key identifier: C9:FA:A9:3A:C4:20:18:43:71:67:96:F7:2B:E6:9D:34:C3:9A:4A:B1
Certificate issuer: /CN=7d172af9-258d-47d2-b4e6-7e0c02152fea
Certificate serial: 010D0C9F43285847EFEF84EFB8DD50263E29E000
Authority key identifier: 71:04:7E:96:58:55:DC:3D:DF:E9:07:F5:EC:3B:A8:BB:67:FC:FC:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/8160f0e3-2d6f-3b91-9726-f47e80235128.roa
Signing time: Wed 20 Nov 2024 02:00:39 +0000
ROA not before: Wed 20 Nov 2024 02:00:39 +0000
ROA not after: Tue 18 Feb 2025 02:00:39 +0000
asID: 133199
IP address blocks: 23.156.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ef:ef:84:ef:b8:dd:50:26:3e:29:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d172af9-258d-47d2-b4e6-7e0c02152fea
Validity
Not Before: Nov 20 02:00:39 2024 GMT
Not After : Feb 18 02:00:39 2025 GMT
Subject: CN=5c7a7fba-62c7-4a2c-b467-4b59379db3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e7:8f:59:73:10:bf:4c:d3:7f:4d:e5:a1:5b:
f0:83:f4:bd:13:68:16:4a:1b:08:11:09:3c:4a:7f:
94:91:44:ef:e8:31:5d:f2:69:a4:7c:be:d5:c0:12:
f7:40:5c:c2:36:ee:b5:39:bc:ff:1a:bc:be:7e:66:
ca:44:87:3f:f6:70:2b:b3:80:d0:2c:02:67:b0:8f:
e0:f0:3f:5d:22:05:06:53:a5:3c:45:e2:93:c0:86:
df:72:d1:a2:69:34:16:53:a7:32:0e:53:50:96:92:
da:bc:1c:39:78:8d:d2:85:5c:fa:0f:3c:cb:0b:c3:
6c:68:09:a7:32:63:73:ff:2d:15:76:70:ec:50:86:
26:4e:0a:11:90:c2:c0:1a:8a:8c:9e:97:4f:bf:a9:
6e:a7:ae:f5:cb:53:35:49:b2:aa:7e:27:b1:79:c4:
23:b4:eb:19:7d:b7:ff:fa:9a:0b:97:ff:78:67:e8:
f2:ce:d9:53:1c:bb:f5:af:bc:b3:e8:d5:0a:bc:95:
06:40:b8:c0:ff:40:55:65:93:d6:0a:78:06:49:1f:
4f:d7:d7:1f:35:96:7a:71:bf:81:91:b9:6d:22:d3:
77:3b:28:42:29:60:72:c9:3b:68:f2:0f:39:5e:4d:
b0:0d:19:bc:d8:ff:bf:19:ea:5d:db:b5:9f:4c:b2:
48:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FA:A9:3A:C4:20:18:43:71:67:96:F7:2B:E6:9D:34:C3:9A:4A:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/8160f0e3-2d6f-3b91-9726-f47e80235128.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/7d172af9-258d-47d2-b4e6-7e0c02152fea.crl
X509v3 Authority Key Identifier:
keyid:71:04:7E:96:58:55:DC:3D:DF:E9:07:F5:EC:3B:A8:BB:67:FC:FC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea.cer
sbgp-ipAddrBlock: critical
IPv4:
23.156.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:6f:35:d7:83:0e:7d:e2:5e:31:3e:d5:d2:37:28:44:a7:39:
3f:84:99:bb:9c:00:a6:46:d6:dc:c6:6d:94:ce:ec:6f:95:34:
d0:79:e8:8f:78:9e:63:91:58:a2:48:c1:10:0c:c2:24:5e:f2:
2a:bf:35:9c:04:f2:24:19:e9:60:40:7f:3a:5a:c3:23:de:7f:
dd:3a:af:20:90:c0:d8:10:12:06:1c:6a:d3:77:78:62:2d:bb:
36:9d:a0:70:5a:70:1e:36:a7:f3:f2:ae:e2:82:1a:2e:07:c0:
e8:42:44:be:86:85:1c:0c:da:b7:c9:25:7f:9c:21:44:25:df:
e9:e6:dd:bc:19:f5:20:8c:dc:15:bb:6e:43:35:6e:72:2f:2e:
f4:3a:85:99:75:5f:6a:57:f4:52:e8:65:9d:fa:92:71:63:2f:
59:00:1d:f2:12:49:7a:8f:59:e8:69:2f:6e:51:c3:09:7d:31:
44:e8:38:dc:bb:41:69:29:a0:99:e2:05:18:15:53:3c:ce:35:
05:e7:81:1a:ba:01:b1:9b:a6:7d:27:3d:c7:ac:94:70:9c:5e:
30:43:8e:bb:f5:d7:91:9d:a5:fb:32:75:8f:54:16:b6:8e:f0:
c8:02:e8:a8:63:f9:b1:70:7c:cb:2b:c8:e7:bf:26:46:2d:fa:
ff:d5:0e:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfv74TvuN1QJj4p4AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2QxNzJhZjktMjU4ZC00N2QyLWI0ZTYtN2UwYzAyMTUy
ZmVhMB4XDTI0MTEyMDAyMDAzOVoXDTI1MDIxODAyMDAzOVowLzEtMCsGA1UEAxMk
NWM3YTdmYmEtNjJjNy00YTJjLWI0NjctNGI1OTM3OWRiM2Q5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOePWXMQv0zTf03loVvwg/S9E2gWShsIEQk8
Sn+UkUTv6DFd8mmkfL7VwBL3QFzCNu61Obz/Gry+fmbKRIc/9nArs4DQLAJnsI/g
8D9dIgUGU6U8ReKTwIbfctGiaTQWU6cyDlNQlpLavBw5eI3ShVz6DzzLC8NsaAmn
MmNz/y0VdnDsUIYmTgoRkMLAGoqMnpdPv6lup671y1M1SbKqfiexecQjtOsZfbf/
+poLl/94Z+jyztlTHLv1r7yz6NUKvJUGQLjA/0BVZZPWCngGSR9P19cfNZZ6cb+B
kbltItN3OyhCKWByyTto8g85Xk2wDRm82P+/Gepd27WfTLJIeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMn6qTrEIBhDcWeW9yvmnTTDmkqxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83ZDE3
MmFmOS0yNThkLTQ3ZDItYjRlNi03ZTBjMDIxNTJmZWEvODE2MGYwZTMtMmQ2Zi0z
YjkxLTk3MjYtZjQ3ZTgwMjM1MTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2QxNzJhZjktMjU4ZC00N2QyLWI0
ZTYtN2UwYzAyMTUyZmVhLzdkMTcyYWY5LTI1OGQtNDdkMi1iNGU2LTdlMGMwMjE1
MmZlYS5jcmwwHwYDVR0jBBgwFoAUcQR+llhV3D3f6Qf17Duou2f8/NEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi83ZDE3MmFmOS0yNThkLTQ3ZDItYjRlNi03ZTBj
MDIxNTJmZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5wIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAElvNdeDDn3iXjE+1dI3KESnOT+EmbucAKZG1tzGbZTO7G+VNNB56I94
nmORWKJIwRAMwiRe8iq/NZwE8iQZ6WBAfzpawyPef906ryCQwNgQEgYcatN3eGIt
uzadoHBacB42p/PyruKCGi4HwOhCRL6GhRwM2rfJJX+cIUQl3+nm3bwZ9SCM3BW7
bkM1bnIvLvQ6hZl1X2pX9FLoZZ36knFjL1kAHfISSXqPWehpL25Rwwl9MUToONy7
QWkpoJniBRgVUzzONQXngRq6AbGbpn0nPceslHCcXjBDjrv115GdpfsydY9UFraO
8MgC6Khj+bFwfMsryOe/JkYt+v/VDtI=
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:59:28 2025 by rpki-client