Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1/f57db452-5b74-3562-992f-ff43177b4c28.roa
File: f57db452-5b74-3562-992f-ff43177b4c28.roa (raw, json)
Hash identifier: 0IkKzIUlHASyaHsye2HRGdNEFeu+Zmvkm3pc96G3Nmg=
Subject key identifier: 70:DA:BF:B7:54:B6:CF:52:B9:AD:D8:C3:38:E9:0D:4C:C6:73:6F:68
Certificate issuer: /CN=aa750f8e-a6ce-4a3f-8257-bc12479a72b1
Certificate serial: 010D0C9F432858483DF0CD3FD37E2BAE4364CF80
Authority key identifier: D7:16:B1:3C:45:DF:41:9A:DC:28:CA:D8:B1:30:C0:CB:BA:9F:C4:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1/f57db452-5b74-3562-992f-ff43177b4c28.roa
Signing time: Wed 18 Dec 2024 00:36:23 +0000
ROA not before: Wed 18 Dec 2024 00:36:23 +0000
ROA not after: Mon 17 Mar 2025 23:36:23 +0000
asID: 64264
IP address blocks: 23.138.216.0/24 maxlen: 24
167.253.110.0/24 maxlen: 24
2602:fb6b::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3d:f0:cd:3f:d3:7e:2b:ae:43:64:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa750f8e-a6ce-4a3f-8257-bc12479a72b1
Validity
Not Before: Dec 18 00:36:23 2024 GMT
Not After : Mar 17 23:36:23 2025 GMT
Subject: CN=1ed37ace-9af4-4849-9e4c-cbd08d54c814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d8:45:c5:a8:ce:e0:9d:06:21:35:c2:75:2d:
43:2c:22:ca:fd:f7:06:4f:3e:a0:4c:1d:46:ff:c2:
ba:62:d0:2d:55:81:99:00:c9:84:92:b5:be:39:49:
f1:59:c7:3c:b5:51:76:70:69:3f:3b:2e:1f:be:a6:
46:1a:76:0a:db:17:e6:75:d0:6f:3a:b0:8d:1b:24:
51:c0:c1:19:4b:d3:cd:e3:99:83:99:6f:79:7a:8b:
4e:e1:08:52:39:6c:a0:a0:a6:6d:3e:df:08:ca:ba:
3e:30:83:3c:02:91:2b:20:83:07:15:ec:49:19:36:
56:3d:61:7a:75:bb:5a:c5:46:79:96:bc:9c:27:26:
32:0f:7d:b9:7f:69:cc:96:8b:7e:b9:70:57:bb:9a:
44:3c:d3:ad:41:3d:8d:5e:d2:5e:7f:10:47:51:38:
68:62:d8:d2:70:7d:3f:a5:99:8e:1d:15:1b:f4:bb:
32:8a:a1:40:a8:81:c7:44:0f:bd:1e:cf:11:94:1b:
81:f8:2f:63:3a:85:a1:68:dc:0a:4a:3c:0d:9f:e4:
06:66:a2:49:2a:46:a8:6b:20:80:1b:6b:c0:70:87:
f2:86:e5:46:8b:00:30:92:5f:1f:de:7a:e7:bc:e1:
58:50:cc:b9:fb:4c:bd:9a:6e:35:cf:ae:f4:d0:ab:
42:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DA:BF:B7:54:B6:CF:52:B9:AD:D8:C3:38:E9:0D:4C:C6:73:6F:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1/f57db452-5b74-3562-992f-ff43177b4c28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1/aa750f8e-a6ce-4a3f-8257-bc12479a72b1.crl
X509v3 Authority Key Identifier:
keyid:D7:16:B1:3C:45:DF:41:9A:DC:28:CA:D8:B1:30:C0:CB:BA:9F:C4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1.cer
sbgp-ipAddrBlock: critical
IPv4:
23.138.216.0/24
167.253.110.0/24
IPv6:
2602:fb6b::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:f8:de:2c:c4:2d:6e:db:6b:fb:3d:ed:23:7b:1c:89:15:91:
35:b3:26:f4:68:c7:34:43:47:72:93:3a:26:f1:a5:c5:e6:eb:
1d:01:dc:24:76:f8:a9:fa:04:fd:9c:34:8f:9d:df:ac:59:cc:
2e:55:4e:39:57:60:06:06:b2:3c:b2:57:94:0b:06:43:a8:a0:
2f:9b:f9:43:b9:9c:3f:34:ec:9c:10:fa:11:37:c0:31:f7:aa:
69:ae:2a:7e:5a:2b:ba:18:44:e3:c2:04:4e:68:2b:49:a1:81:
ed:36:2c:4f:d3:9b:5e:8f:f0:0f:d6:68:04:72:f6:5a:b1:39:
d0:62:b5:0f:17:0c:7c:68:50:bd:4b:af:9a:41:30:dd:91:c1:
49:8a:ee:7d:43:f0:49:d4:55:b7:c5:da:24:3c:fa:67:3d:9f:
34:5e:9f:d4:ea:d1:7b:ab:7e:72:a2:1a:ef:19:b7:1f:35:49:
d3:6d:c0:36:74:18:6c:61:b9:28:68:09:fc:6d:c0:ac:94:70:
90:4c:8a:96:93:34:b0:4d:03:b3:43:b8:af:b6:ca:df:7b:86:
e4:30:fa:5b:5b:e3:c7:8c:1b:ba:b8:2d:e4:ac:21:74:5a:7e:
ba:e6:c5:8d:d7:3c:54:6e:84:13:d9:9f:44:d9:33:7d:7b:71:
5d:28:ae:a5
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEg98M0/034rrkNkz4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWE3NTBmOGUtYTZjZS00YTNmLTgyNTctYmMxMjQ3OWE3
MmIxMB4XDTI0MTIxODAwMzYyM1oXDTI1MDMxNzIzMzYyM1owLzEtMCsGA1UEAxMk
MWVkMzdhY2UtOWFmNC00ODQ5LTllNGMtY2JkMDhkNTRjODE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAithFxajO4J0GITXCdS1DLCLK/fcGTz6gTB1G
/8K6YtAtVYGZAMmEkrW+OUnxWcc8tVF2cGk/Oy4fvqZGGnYK2xfmddBvOrCNGyRR
wMEZS9PN45mDmW95eotO4QhSOWygoKZtPt8Iyro+MIM8ApErIIMHFexJGTZWPWF6
dbtaxUZ5lrycJyYyD325f2nMlot+uXBXu5pEPNOtQT2NXtJefxBHUThoYtjScH0/
pZmOHRUb9LsyiqFAqIHHRA+9Hs8RlBuB+C9jOoWhaNwKSjwNn+QGZqJJKkaoayCA
G2vAcIfyhuVGiwAwkl8f3nrnvOFYUMy5+0y9mm41z6700KtCsQIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFHDav7dUts9Sua3YwzjpDUzGc29oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYTc1
MGY4ZS1hNmNlLTRhM2YtODI1Ny1iYzEyNDc5YTcyYjEvZjU3ZGI0NTItNWI3NC0z
NTYyLTk5MmYtZmY0MzE3N2I0YzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWE3NTBmOGUtYTZjZS00YTNmLTgy
NTctYmMxMjQ3OWE3MmIxL2FhNzUwZjhlLWE2Y2UtNGEzZi04MjU3LWJjMTI0Nzlh
NzJiMS5jcmwwHwYDVR0jBBgwFoAU1xaxPEXfQZrcKMrYsTDAy7qfxNEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYTc1MGY4ZS1hNmNlLTRhM2YtODI1Ny1iYzEy
NDc5YTcyYjEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF4rYAwQA
p/1uMA4EAgACMAgDBgQmAvtrADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAr+N4sxC1u22v7Pe0jexyJFZE1
syb0aMc0Q0dykzom8aXF5usdAdwkdvip+gT9nDSPnd+sWcwuVU45V2AGBrI8sleU
CwZDqKAvm/lDuZw/NOycEPoRN8Ax96pprip+Wiu6GETjwgROaCtJoYHtNixP05te
j/AP1mgEcvZasTnQYrUPFwx8aFC9S6+aQTDdkcFJiu59Q/BJ1FW3xdokPPpnPZ80
Xp/U6tF7q35yohrvGbcfNUnTbcA2dBhsYbkoaAn8bcCslHCQTIqWkzSwTQOzQ7iv
tsrfe4bkMPpbW+PHjBu6uC3krCF0Wn665sWN1zxUboQT2Z9E2TN9e3FdKK6l
-----END CERTIFICATE-----
Generated at Mon May 12 12:13:09 2025 by rpki-client