
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/12e1d236-b7f8-37db-8d5d-f604225f8f77.roa
File: 12e1d236-b7f8-37db-8d5d-f604225f8f77.roa (raw, json)
Hash identifier: n6e5j2puTG04xDKgrWKYh5vmz6W0NbIYqvb/Qvl2joU=
Subject key identifier: EF:85:A4:14:8A:2E:15:10:18:F0:33:07:89:40:6D:65:92:AC:CF:CC
Certificate issuer: /CN=8d619cd3-f969-49ad-ac09-3fb40392cdc5
Certificate serial: 010D0C9F432858486695AA94E72855518041CA80
Authority key identifier: 8F:79:41:42:96:99:E1:90:A8:95:56:77:57:30:D5:D3:A9:09:80:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/12e1d236-b7f8-37db-8d5d-f604225f8f77.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 30006
IP address blocks: 23.191.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:aa:94:e7:28:55:51:80:41:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d619cd3-f969-49ad-ac09-3fb40392cdc5
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=573d7bc9-25a7-4fca-803b-ed7752c1ebfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:42:4e:94:84:12:a5:d3:d4:4c:b8:d8:fb:9e:
5b:70:6c:60:0e:fd:79:a7:e7:b4:fe:b7:50:6b:9d:
45:f2:af:55:1d:62:a1:cc:0f:43:b4:1e:8d:8b:51:
38:3c:2a:0e:5d:cf:aa:6a:80:15:b3:89:0d:27:34:
4b:46:9e:ae:aa:26:00:2c:87:a4:00:9f:61:50:b2:
9d:9f:2c:1a:b6:ff:35:2b:39:8f:cb:df:48:87:a0:
97:af:40:ac:05:68:60:be:ed:17:e7:1a:82:4a:cc:
7a:b5:ba:d4:fb:2e:01:22:da:ac:cb:1f:a3:49:e0:
cb:7c:cc:1a:a7:60:fd:c5:f8:0d:2b:6d:26:98:6c:
c5:3a:36:8e:73:ff:f7:b5:74:a1:22:a5:48:e5:cd:
cf:d9:1e:61:76:1f:16:24:53:e2:2f:3b:c1:b7:bf:
a7:76:50:9a:fd:12:45:78:d7:13:e3:5c:69:6e:12:
cd:37:f5:59:1f:3b:bc:27:12:79:86:f8:66:76:a9:
92:6f:19:69:5e:49:e4:b9:98:bb:28:13:bb:52:11:
84:ff:af:b3:88:3f:d7:ed:1f:79:8e:f5:c8:f3:1a:
88:0d:c7:6b:f9:44:e9:1e:33:51:94:5a:6c:8d:88:
05:56:b9:a5:63:ea:32:3a:f3:9e:7a:a8:cd:1c:95:
30:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:85:A4:14:8A:2E:15:10:18:F0:33:07:89:40:6D:65:92:AC:CF:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/12e1d236-b7f8-37db-8d5d-f604225f8f77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/8d619cd3-f969-49ad-ac09-3fb40392cdc5.crl
X509v3 Authority Key Identifier:
keyid:8F:79:41:42:96:99:E1:90:A8:95:56:77:57:30:D5:D3:A9:09:80:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.191.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:a3:d6:c0:05:7a:df:ec:55:a3:08:a6:7f:b3:50:00:ea:36:
cd:2c:76:de:56:4f:b4:06:71:ba:0e:5f:3f:f6:86:ee:46:ed:
f2:95:26:ae:ae:20:96:63:fb:d2:b2:55:51:6c:ed:53:47:91:
4d:e2:67:f7:82:87:ce:68:cb:65:eb:44:f3:2d:a4:08:1b:0e:
12:ef:80:0f:bb:60:6e:b7:63:fe:a0:d2:ef:8c:b1:7e:20:f9:
ec:25:aa:29:e5:cc:39:f6:0b:7d:a7:41:0f:b4:f4:f5:51:b3:
2b:cb:ac:cd:06:36:a9:0c:be:bf:5f:b1:be:d0:43:0f:0d:95:
6b:41:a2:48:9e:8b:5f:df:69:ce:e0:13:ae:c6:9c:3e:8e:9d:
7a:e1:28:13:4c:11:4c:2f:62:6c:4f:83:2c:e9:c7:58:95:f7:
65:92:b2:f9:8d:4f:09:ff:ef:57:7c:96:60:67:64:4d:41:ad:
d0:f3:04:41:85:91:f8:70:98:2d:0b:e4:6b:2f:34:9d:61:fa:
27:95:01:f8:05:1c:9f:c7:1e:1c:ab:25:7c:1d:d6:ca:88:52:
87:bf:90:3d:46:e8:2b:13:3d:46:db:7c:f0:30:3e:21:ea:5b:
da:84:77:e1:1d:12:44:48:c9:d5:58:b0:21:ca:2d:64:bd:26:
b7:83:87:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhmlaqU5yhVUYBByoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGQ2MTljZDMtZjk2OS00OWFkLWFjMDktM2ZiNDAzOTJj
ZGM1MB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk
NTczZDdiYzktMjVhNy00ZmNhLTgwM2ItZWQ3NzUyYzFlYmZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikJOlIQSpdPUTLjY+55bcGxgDv15p+e0/rdQ
a51F8q9VHWKhzA9DtB6Ni1E4PCoOXc+qaoAVs4kNJzRLRp6uqiYALIekAJ9hULKd
nywatv81KzmPy99Ih6CXr0CsBWhgvu0X5xqCSsx6tbrU+y4BItqsyx+jSeDLfMwa
p2D9xfgNK20mmGzFOjaOc//3tXShIqVI5c3P2R5hdh8WJFPiLzvBt7+ndlCa/RJF
eNcT41xpbhLNN/VZHzu8JxJ5hvhmdqmSbxlpXknkuZi7KBO7UhGE/6+ziD/X7R95
jvXI8xqIDcdr+UTpHjNRlFpsjYgFVrmlY+oyOvOeeqjNHJUw7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO+FpBSKLhUQGPAzB4lAbWWSrM/MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZDYx
OWNkMy1mOTY5LTQ5YWQtYWMwOS0zZmI0MDM5MmNkYzUvMTJlMWQyMzYtYjdmOC0z
N2RiLThkNWQtZjYwNDIyNWY4Zjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGQ2MTljZDMtZjk2OS00OWFkLWFj
MDktM2ZiNDAzOTJjZGM1LzhkNjE5Y2QzLWY5NjktNDlhZC1hYzA5LTNmYjQwMzky
Y2RjNS5jcmwwHwYDVR0jBBgwFoAUj3lBQpaZ4ZColVZ3VzDV06kJgAswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZDYxOWNkMy1mOTY5LTQ5YWQtYWMwOS0zZmI0
MDM5MmNkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7+YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC+j1sAFet/sVaMIpn+zUADqNs0sdt5WT7QGcboOXz/2hu5G7fKVJq6u
IJZj+9KyVVFs7VNHkU3iZ/eCh85oy2XrRPMtpAgbDhLvgA+7YG63Y/6g0u+MsX4g
+ewlqinlzDn2C32nQQ+09PVRsyvLrM0GNqkMvr9fsb7QQw8NlWtBokiei1/fac7g
E67GnD6OnXrhKBNMEUwvYmxPgyzpx1iV92WSsvmNTwn/71d8lmBnZE1BrdDzBEGF
kfhwmC0L5GsvNJ1h+ieVAfgFHJ/HHhyrJXwd1sqIUoe/kD1G6CsTPUbbfPAwPiHq
W9qEd+EdEkRIydVYsCHKLWS9JreDh84=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:54:07 2025 by rpki-client