Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/91ec1b9a-5318-3b0b-8d0d-18183e71e924.roa
File: 91ec1b9a-5318-3b0b-8d0d-18183e71e924.roa (raw, json)
Hash identifier: Poee0x9eCzaeTVz3gHcqrKuoZoJS8ECpR6tG5KZHD18=
Subject key identifier: 00:8F:F7:2D:2E:19:12:02:41:E9:90:08:29:0D:83:D8:60:B5:2B:45
Certificate issuer: /CN=3aeb4dac-8911-4f44-9f24-1f5081193043
Certificate serial: 010D0C9F43285848143A6AE2C0100BF532503068
Authority key identifier: 96:FF:31:79:24:B5:E1:3A:74:B0:00:4D:50:56:C3:6D:12:47:5E:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/91ec1b9a-5318-3b0b-8d0d-18183e71e924.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 55077
IP address blocks: 23.128.208.0/24 maxlen: 24
103.25.230.0/24 maxlen: 24
104.36.4.0/22 maxlen: 22
198.44.204.0/22 maxlen: 22
2602:ff31::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:6a:e2:c0:10:0b:f5:32:50:30:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aeb4dac-8911-4f44-9f24-1f5081193043
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=c77f3765-7738-4952-9f2b-74219a7348cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:16:5c:0e:ed:1f:da:cf:5d:77:03:00:f4:6f:
91:c5:8c:6c:06:54:e2:63:66:80:33:69:58:4e:30:
9c:6a:a5:85:4d:85:e0:d5:db:ae:51:40:f9:86:39:
2d:ea:ca:99:10:8d:3f:d8:e9:a1:6d:7c:fd:e5:56:
66:86:f7:3d:b9:bb:dc:0e:0c:1a:50:62:d2:c2:25:
9d:cb:6c:49:19:03:6f:b4:62:ab:3f:eb:17:89:5f:
aa:67:e2:b0:ab:5a:06:30:63:35:3a:0d:e2:ae:c1:
61:f8:f6:06:14:ed:40:95:eb:92:1c:56:3c:33:a8:
21:5e:5a:66:17:3d:5a:e8:08:e2:da:17:8c:cf:66:
f2:09:62:37:34:18:70:a5:e7:7e:1e:f4:44:67:59:
dd:18:1e:dc:5d:92:4a:fa:14:e1:f9:32:dc:02:2e:
1a:5b:bc:ce:b2:3a:5c:83:ab:97:fa:7c:db:e5:38:
e3:ee:e4:dd:21:19:e5:f3:af:b1:e9:aa:dd:5d:cc:
21:eb:7a:c9:16:5a:c0:b3:8c:45:e1:da:46:ba:50:
d1:c8:da:ef:89:d6:bb:d1:25:e4:79:d8:84:b0:cb:
76:85:20:cb:24:de:4c:70:e0:70:b6:ec:f5:78:f7:
bc:6e:d8:cd:f3:6f:33:b5:e7:ef:ff:19:78:8a:55:
a0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8F:F7:2D:2E:19:12:02:41:E9:90:08:29:0D:83:D8:60:B5:2B:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/91ec1b9a-5318-3b0b-8d0d-18183e71e924.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.crl
X509v3 Authority Key Identifier:
keyid:96:FF:31:79:24:B5:E1:3A:74:B0:00:4D:50:56:C3:6D:12:47:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043.cer
sbgp-ipAddrBlock: critical
IPv4:
23.128.208.0/24
103.25.230.0/24
104.36.4.0/22
198.44.204.0/22
IPv6:
2602:ff31::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:07:0e:67:33:ae:49:fa:d0:e0:ad:83:2a:0d:e9:1a:64:04:
22:86:c0:97:84:71:02:d2:6f:d2:6a:1e:ee:10:05:06:87:80:
ab:0b:5e:9b:36:2c:1c:8f:94:3d:56:13:96:c2:f4:e4:f9:6d:
a7:6e:59:0e:73:9b:74:d3:09:db:e9:d0:b3:18:5d:bf:7e:69:
0d:5d:45:f6:ed:f3:66:c1:48:be:34:a8:45:18:25:0e:60:a9:
6b:c5:ff:28:b9:64:1a:10:00:e2:b6:91:e2:aa:d8:77:16:90:
0c:4a:4f:18:11:21:3c:b8:9b:0b:d4:bb:60:0b:ae:07:97:f9:
89:42:82:0f:b3:61:b1:9f:00:7e:40:f9:d9:0d:29:8a:d1:b2:
c5:e0:d3:b3:a4:48:fd:fb:b9:03:15:58:6f:ea:b6:99:7f:31:
82:c7:2e:f3:e5:91:b2:94:c7:83:7f:85:d0:e5:68:ac:67:b7:
11:0e:bf:db:3f:ca:d5:9e:65:04:9a:f2:e2:3b:11:c4:94:23:
92:39:06:34:56:80:4e:57:a3:bf:c4:b4:e6:ec:08:07:23:62:
f8:f0:0f:1d:1a:b9:d7:e6:07:45:81:dd:d0:d2:25:f8:f4:88:
c7:0c:80:7e:c1:a0:07:f9:3b:b6:63:fc:81:65:bb:79:a6:36:
79:36:b5:06
-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWEgUOmriwBAL9TJQMGgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2FlYjRkYWMtODkxMS00ZjQ0LTlmMjQtMWY1MDgxMTkz
MDQzMB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
Yzc3ZjM3NjUtNzczOC00OTUyLTlmMmItNzQyMTlhNzM0OGNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxZcDu0f2s9ddwMA9G+RxYxsBlTiY2aAM2lY
TjCcaqWFTYXg1duuUUD5hjkt6sqZEI0/2OmhbXz95VZmhvc9ubvcDgwaUGLSwiWd
y2xJGQNvtGKrP+sXiV+qZ+Kwq1oGMGM1Og3irsFh+PYGFO1AleuSHFY8M6ghXlpm
Fz1a6Aji2heMz2byCWI3NBhwped+HvREZ1ndGB7cXZJK+hTh+TLcAi4aW7zOsjpc
g6uX+nzb5Tjj7uTdIRnl86+x6ardXcwh63rJFlrAs4xF4dpGulDRyNrvida70SXk
ediEsMt2hSDLJN5McOBwtuz1ePe8btjN828ztefv/xl4ilWgCQIDAQABo4IDdzCC
A3MwHQYDVR0OBBYEFACP9y0uGRICQemQCCkNg9hgtStFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYWVi
NGRhYy04OTExLTRmNDQtOWYyNC0xZjUwODExOTMwNDMvOTFlYzFiOWEtNTMxOC0z
YjBiLThkMGQtMTgxODNlNzFlOTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2FlYjRkYWMtODkxMS00ZjQ0LTlm
MjQtMWY1MDgxMTkzMDQzLzNhZWI0ZGFjLTg5MTEtNGY0NC05ZjI0LTFmNTA4MTE5
MzA0My5jcmwwHwYDVR0jBBgwFoAUlv8xeSS14Tp0sABNUFbDbRJHXp0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYWViNGRhYy04OTExLTRmNDQtOWYyNC0xZjUw
ODExOTMwNDMuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAeBAIAATAYAwQAF4DQAwQA
ZxnmAwQCaCQEAwQCxizMMA4EAgACMAgDBgQmAv8xADBUBgNVHSABAf8ESjBIMEYG
CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl
c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAdBw5nM65J
+tDgrYMqDekaZAQihsCXhHEC0m/Sah7uEAUGh4CrC16bNiwcj5Q9VhOWwvTk+W2n
blkOc5t00wnb6dCzGF2/fmkNXUX27fNmwUi+NKhFGCUOYKlrxf8ouWQaEADitpHi
qth3FpAMSk8YESE8uJsL1LtgC64Hl/mJQoIPs2GxnwB+QPnZDSmK0bLF4NOzpEj9
+7kDFVhv6raZfzGCxy7z5ZGylMeDf4XQ5WisZ7cRDr/bP8rVnmUEmvLiOxHElCOS
OQY0VoBOV6O/xLTm7AgHI2L48A8dGrnX5gdFgd3Q0iX49IjHDIB+waAH+Tu2Y/yB
Zbt5pjZ5NrUG
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:00:55 2025 by rpki-client