Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/7f168c5b-c14e-3b1e-918a-0069b8ca7e04.roa
File: 7f168c5b-c14e-3b1e-918a-0069b8ca7e04.roa (raw, json)
Hash identifier: biSySvNlh2krUEm4Cd/VnPFGbG2Jy2PVThdjs/pnmGg=
Subject key identifier: 64:CE:F1:43:38:15:AA:F1:2D:6F:C2:80:3A:E7:48:52:F8:7C:B6:E4
Certificate issuer: /CN=bf246bfa-4298-4264-af85-3fb2845207f8
Certificate serial: 010D0C9F432858482A8FE203B19ADD69B62C30D0
Authority key identifier: 0C:B2:02:68:95:CB:E4:C6:84:98:68:D4:B4:1A:BB:BD:65:6D:BF:A5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/7f168c5b-c14e-3b1e-918a-0069b8ca7e04.roa
Signing time: Wed 11 Dec 2024 02:00:38 +0000
ROA not before: Wed 11 Dec 2024 02:00:38 +0000
ROA not after: Tue 11 Mar 2025 01:00:38 +0000
asID: 395886
IP address blocks: 23.135.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8f:e2:03:b1:9a:dd:69:b6:2c:30:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf246bfa-4298-4264-af85-3fb2845207f8
Validity
Not Before: Dec 11 02:00:38 2024 GMT
Not After : Mar 11 01:00:38 2025 GMT
Subject: CN=592b7007-118c-4039-8f2e-92f4dfe06b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e6:e9:ae:0d:04:24:c1:59:ad:1d:34:f4:a1:
75:95:64:78:a9:29:09:c1:7c:b7:3a:da:d3:42:bf:
b3:43:9a:68:2f:a7:e0:b5:3a:8b:e7:7a:78:76:8d:
35:5f:ff:54:02:38:20:ed:60:4e:b5:54:0e:f6:cf:
32:ae:05:88:25:15:96:bd:3b:16:08:3a:cc:5a:a9:
89:43:63:bb:d9:d3:08:61:8a:10:1e:6b:b2:a3:89:
b4:7a:ce:28:b4:9c:2f:20:23:98:06:e5:dc:1b:95:
3d:37:2f:e5:b2:04:d1:58:05:9a:ab:cd:c7:43:44:
2e:b2:a6:b0:2e:d7:7d:6b:c4:ef:9c:62:2b:2b:25:
af:77:cd:97:47:ae:a9:6f:6a:c0:1c:75:a9:fa:ba:
1c:c6:6a:6a:79:f9:1f:ee:88:2b:e0:92:ac:5b:63:
e9:a9:65:8f:53:2a:86:83:fd:c3:99:04:f7:59:5a:
16:55:f1:2f:ea:b6:bd:af:ec:08:d0:41:71:0a:21:
90:d8:ed:47:ce:5c:93:c4:bc:b3:b3:98:70:24:fa:
3a:b9:c3:c3:d9:2a:ad:5c:50:6a:37:f0:39:27:56:
d4:fe:e0:25:b5:9a:8b:c5:12:91:23:aa:2b:9e:f1:
82:9a:29:3a:d0:29:5b:c6:73:3d:72:f2:c1:a2:83:
5f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CE:F1:43:38:15:AA:F1:2D:6F:C2:80:3A:E7:48:52:F8:7C:B6:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/7f168c5b-c14e-3b1e-918a-0069b8ca7e04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/bf246bfa-4298-4264-af85-3fb2845207f8.crl
X509v3 Authority Key Identifier:
keyid:0C:B2:02:68:95:CB:E4:C6:84:98:68:D4:B4:1A:BB:BD:65:6D:BF:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.135.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:3f:14:fa:9a:cf:18:51:8c:66:5c:a6:af:8f:74:86:4a:3d:
a2:f4:dd:14:18:1b:7a:49:97:3e:37:19:a4:32:7f:0e:55:67:
7a:3b:25:54:ba:b0:a6:94:6b:1b:4b:1a:02:0b:76:47:1f:e4:
a0:38:4d:29:48:ca:48:38:5e:f6:03:bb:46:8c:71:af:e6:83:
f1:61:72:32:17:2a:dc:10:97:87:80:42:77:49:6d:1d:b3:64:
4d:1f:45:df:7e:48:58:77:b2:74:76:19:6c:5a:83:23:35:4f:
69:c2:b5:58:1e:56:5e:32:cc:ca:00:44:f7:99:4a:99:5c:e5:
06:67:d7:27:d6:1d:fe:73:fa:e2:c0:fd:1e:e3:aa:5f:0f:db:
df:14:52:1c:c2:16:ef:02:7a:31:0e:de:d3:2b:9c:d0:39:63:
ab:e0:3e:49:50:ed:3f:16:3d:f6:04:71:7b:55:5d:bd:af:53:
52:74:c1:c2:b5:80:7e:17:fa:67:a6:37:55:e2:5c:7a:7a:6b:
30:3c:ca:d2:e6:e7:c1:99:8d:91:fd:33:de:bc:e2:e5:86:17:
fe:8a:b8:ff:d7:46:38:37:9b:d4:3c:5a:e5:e0:7a:85:ec:45:
92:00:a0:2c:1e:5c:cf:60:d3:67:8f:8d:07:95:f5:b4:c8:65:
c6:1c:a5:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgqj+IDsZrdabYsMNAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmYyNDZiZmEtNDI5OC00MjY0LWFmODUtM2ZiMjg0NTIw
N2Y4MB4XDTI0MTIxMTAyMDAzOFoXDTI1MDMxMTAxMDAzOFowLzEtMCsGA1UEAxMk
NTkyYjcwMDctMTE4Yy00MDM5LThmMmUtOTJmNGRmZTA2YjZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhebprg0EJMFZrR009KF1lWR4qSkJwXy3OtrT
Qr+zQ5poL6fgtTqL53p4do01X/9UAjgg7WBOtVQO9s8yrgWIJRWWvTsWCDrMWqmJ
Q2O72dMIYYoQHmuyo4m0es4otJwvICOYBuXcG5U9Ny/lsgTRWAWaq83HQ0Qusqaw
Ltd9a8TvnGIrKyWvd82XR66pb2rAHHWp+rocxmpqefkf7ogr4JKsW2PpqWWPUyqG
g/3DmQT3WVoWVfEv6ra9r+wI0EFxCiGQ2O1HzlyTxLyzs5hwJPo6ucPD2SqtXFBq
N/A5J1bU/uAltZqLxRKRI6ornvGCmik60ClbxnM9cvLBooNfKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGTO8UM4FarxLW/CgDrnSFL4fLbkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iZjI0
NmJmYS00Mjk4LTQyNjQtYWY4NS0zZmIyODQ1MjA3ZjgvN2YxNjhjNWItYzE0ZS0z
YjFlLTkxOGEtMDA2OWI4Y2E3ZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmYyNDZiZmEtNDI5OC00MjY0LWFm
ODUtM2ZiMjg0NTIwN2Y4L2JmMjQ2YmZhLTQyOTgtNDI2NC1hZjg1LTNmYjI4NDUy
MDdmOC5jcmwwHwYDVR0jBBgwFoAUDLICaJXL5MaEmGjUtBq7vWVtv6UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iZjI0NmJmYS00Mjk4LTQyNjQtYWY4NS0zZmIy
ODQ1MjA3ZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4c4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAQ/FPqazxhRjGZcpq+PdIZKPaL03RQYG3pJlz43GaQyfw5VZ3o7JVS6
sKaUaxtLGgILdkcf5KA4TSlIykg4XvYDu0aMca/mg/FhcjIXKtwQl4eAQndJbR2z
ZE0fRd9+SFh3snR2GWxagyM1T2nCtVgeVl4yzMoARPeZSplc5QZn1yfWHf5z+uLA
/R7jql8P298UUhzCFu8CejEO3tMrnNA5Y6vgPklQ7T8WPfYEcXtVXb2vU1J0wcK1
gH4X+memN1XiXHp6azA8ytLm58GZjZH9M9684uWGF/6KuP/XRjg3m9Q8WuXgeoXs
RZIAoCweXM9g02ePjQeV9bTIZcYcpYs=
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:50:31 2025 by rpki-client