Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/0dfce121-6f1d-3771-aaa7-0d8a76d62eb9.roa
File: 0dfce121-6f1d-3771-aaa7-0d8a76d62eb9.roa (raw, json)
Hash identifier: 5P7mh2TDizKv5klnlKs7IzxrxI8icy4Dw0tVjg8eBJE=
Subject key identifier: E6:27:B8:FC:FF:57:92:BB:42:C9:21:34:92:5F:C9:B7:28:85:F7:D7
Certificate issuer: /CN=dec85453-756b-41c4-9e89-03593a6d3f56
Certificate serial: 010D0C9F4328584848B1A735FFA6150DFF386E80
Authority key identifier: 93:C3:EC:0E:AA:2F:E9:A5:ED:BA:4C:FB:B6:90:24:9B:80:86:3D:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/0dfce121-6f1d-3771-aaa7-0d8a76d62eb9.roa
Signing time: Sat 21 Dec 2024 21:03:02 +0000
ROA not before: Sat 21 Dec 2024 21:03:02 +0000
ROA not after: Fri 21 Mar 2025 20:03:02 +0000
asID: 215475
IP address blocks: 23.161.24.0/24 maxlen: 24
2602:2f2:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:48:b1:a7:35:ff:a6:15:0d:ff:38:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec85453-756b-41c4-9e89-03593a6d3f56
Validity
Not Before: Dec 21 21:03:02 2024 GMT
Not After : Mar 21 20:03:02 2025 GMT
Subject: CN=60e468f2-219e-4d1d-a880-39302d99dcba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6d:79:35:ef:f3:1a:a1:7d:b2:a4:79:e4:b9:
b9:de:5b:38:e3:ba:5b:97:7a:50:09:48:a6:42:53:
24:c1:15:9a:7e:4c:84:6d:e4:6b:2b:d8:a2:61:cc:
8e:f6:00:a2:33:26:91:19:97:d5:85:80:5a:63:c8:
ee:93:2a:f0:25:c6:dc:3f:02:85:cf:5a:c4:56:07:
1e:43:c6:b8:82:6a:76:7e:2a:5a:9d:e5:ce:b7:73:
f5:85:a3:d2:1a:1a:b1:e2:83:ee:cc:34:32:0c:30:
06:81:d6:6c:e8:65:7e:a1:34:dd:72:8f:b9:ea:22:
5c:ac:b3:47:8b:e2:87:5c:f8:9a:c2:e6:e0:db:42:
5b:3f:42:84:15:61:72:7d:14:2b:8d:c4:95:49:9e:
fc:81:4f:d1:ac:18:63:cc:f3:e3:f7:ab:ae:d9:6a:
26:dc:d1:13:55:b1:4f:f0:fc:cd:59:32:fa:58:68:
be:57:bc:f6:52:90:c4:2f:06:3b:9b:f3:93:59:12:
cb:dd:c5:82:b7:c9:69:ed:6b:11:46:57:0e:16:30:
5d:f6:dc:88:92:15:fa:40:46:f9:49:82:16:6f:5b:
8c:3f:50:90:42:be:9b:00:1e:0d:04:b5:d4:33:45:
94:25:6f:64:a6:2b:50:32:42:e3:99:1f:57:10:b4:
2a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:27:B8:FC:FF:57:92:BB:42:C9:21:34:92:5F:C9:B7:28:85:F7:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/0dfce121-6f1d-3771-aaa7-0d8a76d62eb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/dec85453-756b-41c4-9e89-03593a6d3f56.crl
X509v3 Authority Key Identifier:
keyid:93:C3:EC:0E:AA:2F:E9:A5:ED:BA:4C:FB:B6:90:24:9B:80:86:3D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56.cer
sbgp-ipAddrBlock: critical
IPv4:
23.161.24.0/24
IPv6:
2602:2f2:1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:ec:65:6c:74:ce:ff:5a:84:72:28:34:6b:10:13:3f:a0:c5:
e8:ff:55:db:8a:d1:68:b2:77:ea:8b:1b:5c:ab:3f:5f:3e:97:
3c:12:fc:fa:24:5f:a9:58:5a:77:90:a7:72:f7:a5:0d:a0:a1:
7e:fc:d1:b6:f1:21:55:21:b5:19:22:6d:03:d1:fa:e8:10:04:
7b:86:4d:65:87:12:b6:15:b6:5b:f2:f6:b1:84:6d:5b:2a:7a:
ea:4f:1b:d3:11:60:f5:d8:4c:ef:94:42:fe:ef:df:a7:fe:9e:
c6:41:28:39:be:13:44:1b:a0:b0:5d:a6:6b:38:41:7a:0c:bd:
99:40:4f:e8:a2:e0:dc:84:11:47:df:64:37:7e:69:ca:46:d8:
6f:e6:db:60:f6:e4:2f:87:39:3c:8c:bc:18:5d:41:0d:4f:fe:
0d:db:c6:25:d8:46:42:9c:14:74:1b:2f:00:ab:c8:bf:ce:6d:
20:7d:75:2b:51:d7:d6:20:81:1b:23:23:87:d3:1e:9c:0b:7d:
7b:ce:85:fb:b1:43:7d:08:f8:06:7e:29:bd:70:41:0f:1f:63:
66:4b:50:fb:97:7d:07:3a:f5:68:4f:53:ee:aa:4f:5b:90:60:
71:e0:13:06:1d:71:26:78:d0:22:6c:cb:e7:03:ee:f2:89:75:
bd:46:f5:0b
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEhIsac1/6YVDf84boAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGVjODU0NTMtNzU2Yi00MWM0LTllODktMDM1OTNhNmQz
ZjU2MB4XDTI0MTIyMTIxMDMwMloXDTI1MDMyMTIwMDMwMlowLzEtMCsGA1UEAxMk
NjBlNDY4ZjItMjE5ZS00ZDFkLWE4ODAtMzkzMDJkOTlkY2JhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm15Ne/zGqF9sqR55Lm53ls447pbl3pQCUim
QlMkwRWafkyEbeRrK9iiYcyO9gCiMyaRGZfVhYBaY8jukyrwJcbcPwKFz1rEVgce
Q8a4gmp2fipaneXOt3P1haPSGhqx4oPuzDQyDDAGgdZs6GV+oTTdco+56iJcrLNH
i+KHXPiawubg20JbP0KEFWFyfRQrjcSVSZ78gU/RrBhjzPPj96uu2Wom3NETVbFP
8PzNWTL6WGi+V7z2UpDELwY7m/OTWRLL3cWCt8lp7WsRRlcOFjBd9tyIkhX6QEb5
SYIWb1uMP1CQQr6bAB4NBLXUM0WUJW9kpitQMkLjmR9XELQq4QIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFOYnuPz/V5K7QskhNJJfybcohffXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kZWM4
NTQ1My03NTZiLTQxYzQtOWU4OS0wMzU5M2E2ZDNmNTYvMGRmY2UxMjEtNmYxZC0z
NzcxLWFhYTctMGQ4YTc2ZDYyZWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGVjODU0NTMtNzU2Yi00MWM0LTll
ODktMDM1OTNhNmQzZjU2L2RlYzg1NDUzLTc1NmItNDFjNC05ZTg5LTAzNTkzYTZk
M2Y1Ni5jcmwwHwYDVR0jBBgwFoAUk8PsDqov6aXtukz7tpAkm4CGPWEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kZWM4NTQ1My03NTZiLTQxYzQtOWU4OS0wMzU5
M2E2ZDNmNTYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF6EYMA8E
AgACMAkDBwAmAgLyAAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKuxlbHTO/1qEcig0axATP6DF6P9V24rR
aLJ36osbXKs/Xz6XPBL8+iRfqVhad5CncvelDaChfvzRtvEhVSG1GSJtA9H66BAE
e4ZNZYcSthW2W/L2sYRtWyp66k8b0xFg9dhM75RC/u/fp/6exkEoOb4TRBugsF2m
azhBegy9mUBP6KLg3IQRR99kN35pykbYb+bbYPbkL4c5PIy8GF1BDU/+DdvGJdhG
QpwUdBsvAKvIv85tIH11K1HX1iCBGyMjh9MenAt9e86F+7FDfQj4Bn4pvXBBDx9j
ZktQ+5d9Bzr1aE9T7qpPW5BgceATBh1xJnjQImzL5wPu8ol1vUb1Cw==
-----END CERTIFICATE-----
Generated at Mon May 12 14:25:37 2025 by rpki-client