Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/233bb268-ff26-3cd5-8c27-2d9dfd777e24.roa
File: 233bb268-ff26-3cd5-8c27-2d9dfd777e24.roa (raw, json)
Hash identifier: IwlkSoBsbY02ZcA/hQqv4gJxrGqMOATi/YVLpCiV0TY=
Subject key identifier: 6D:25:93:30:93:FA:6E:54:07:AD:4B:94:2A:91:9A:36:60:CA:44:4B
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C3298189B445EB6515500
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/233bb268-ff26-3cd5-8c27-2d9dfd777e24.roa
Signing time: Mon 30 Dec 2024 18:10:32 +0000
ROA not before: Mon 30 Dec 2024 18:10:32 +0000
ROA not after: Sun 30 Mar 2025 17:10:32 +0000
asID: 13371
IP address blocks: 152.22.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:32:98:18:9b:44:5e:b6:51:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:32 2024 GMT
Not After : Mar 30 17:10:32 2025 GMT
Subject: CN=795bff78-a525-4200-b36a-e586f7a71345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:59:80:6b:3f:54:f4:a2:09:6f:8d:29:cb:00:
8d:f9:85:d5:f6:c6:34:9d:84:38:3c:22:41:96:bc:
77:03:cd:ee:87:01:0f:94:8e:57:7c:35:71:4c:94:
2e:f3:2b:e8:93:06:49:c9:12:31:7b:21:72:05:b0:
48:ca:b9:e8:73:02:4d:3d:f8:8b:31:dc:56:98:53:
c4:ac:85:c8:b7:35:a2:a0:29:5b:1a:50:58:46:b1:
71:53:a2:fa:76:bc:be:39:26:0f:1b:70:74:4c:90:
99:e1:a1:89:c4:fd:94:f9:48:00:48:a0:cc:4e:16:
24:bd:c1:ed:55:37:64:e5:bc:01:c2:91:50:ee:88:
9f:76:93:6d:f8:e0:0c:91:d6:58:81:e5:aa:c4:73:
88:ff:61:e7:aa:33:36:0f:06:4d:ae:15:4f:41:8e:
5e:87:e4:7c:be:1d:19:cb:5f:64:73:b6:bb:d7:75:
55:5d:f0:b6:38:46:05:cf:48:e7:ab:41:d1:36:0b:
38:4e:59:9f:b1:d2:d9:21:84:bd:d6:ff:36:aa:76:
b3:0c:23:ba:7a:9f:38:6f:3e:d7:8a:9e:22:b9:76:
df:90:f3:30:77:b6:45:39:0a:8c:db:d4:f9:77:b3:
df:02:32:93:7a:bc:90:4c:16:0e:b7:82:2f:eb:ea:
76:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:25:93:30:93:FA:6E:54:07:AD:4B:94:2A:91:9A:36:60:CA:44:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/233bb268-ff26-3cd5-8c27-2d9dfd777e24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.22.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:56:df:2e:f9:77:68:3a:c3:93:5b:5a:13:ff:b5:8d:1e:6c:
6f:71:a1:c0:b8:05:9c:d5:c3:d9:ac:9c:a1:29:bc:7a:dd:ad:
98:9f:7b:70:45:d8:84:bf:a0:8c:ca:4e:cb:f3:10:f7:8f:85:
e3:bb:e9:e5:23:c6:8d:35:9c:74:f6:d2:00:5e:15:e5:94:fe:
dc:93:69:82:de:06:99:51:98:b9:71:e6:77:31:31:4a:69:35:
bc:f1:e5:9f:6a:5e:f6:37:ae:28:c3:75:27:79:41:8a:de:4f:
0a:95:9e:ff:2b:ba:52:ef:34:06:1b:41:22:22:5d:89:85:8d:
ba:c3:5b:f7:c2:52:a8:3f:19:79:86:25:56:27:46:87:cc:37:
98:8d:41:5f:e9:a6:c8:12:2e:d9:3c:cc:44:3e:5e:38:4a:f2:
b9:0b:43:61:bf:b1:f0:8a:d0:a1:2a:70:f5:57:9f:2b:15:d9:
fc:f9:bd:fe:36:0b:27:52:bd:f7:b5:78:ce:82:95:ff:c5:fa:
eb:84:1a:e8:e7:3c:04:11:1e:a3:5b:4f:2c:8b:e5:f4:53:48:
8b:3d:cb:52:75:20:04:12:5e:3b:d4:8f:85:18:13:81:5e:ca:
00:9e:20:d3:2b:7e:de:95:88:87:7e:2d:7a:85:c6:c8:bb:8a:
40:86:a5:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhhfDKYGJtEXrZRVQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTIzMDE4MTAzMloXDTI1MDMzMDE3MTAzMlowLzEtMCsGA1UEAxMk
Nzk1YmZmNzgtYTUyNS00MjAwLWIzNmEtZTU4NmY3YTcxMzQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFmAaz9U9KIJb40pywCN+YXV9sY0nYQ4PCJB
lrx3A83uhwEPlI5XfDVxTJQu8yvokwZJyRIxeyFyBbBIyrnocwJNPfiLMdxWmFPE
rIXItzWioClbGlBYRrFxU6L6dry+OSYPG3B0TJCZ4aGJxP2U+UgASKDMThYkvcHt
VTdk5bwBwpFQ7oifdpNt+OAMkdZYgeWqxHOI/2HnqjM2DwZNrhVPQY5eh+R8vh0Z
y19kc7a713VVXfC2OEYFz0jnq0HRNgs4TlmfsdLZIYS91v82qnazDCO6ep84bz7X
ip4iuXbfkPMwd7ZFOQqM29T5d7PfAjKTeryQTBYOt4Iv6+p2VwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG0lkzCT+m5UB61LlCqRmjZgykRLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMjMzYmIyNjgtZmYyNi0z
Y2Q1LThjMjctMmQ5ZGZkNzc3ZTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmBbgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACBW3y75d2g6w5NbWhP/tY0ebG9xocC4BZzVw9msnKEpvHrdrZife3BF
2IS/oIzKTsvzEPePheO76eUjxo01nHT20gBeFeWU/tyTaYLeBplRmLlx5ncxMUpp
Nbzx5Z9qXvY3rijDdSd5QYreTwqVnv8rulLvNAYbQSIiXYmFjbrDW/fCUqg/GXmG
JVYnRofMN5iNQV/ppsgSLtk8zEQ+XjhK8rkLQ2G/sfCK0KEqcPVXnysV2fz5vf42
CydSvfe1eM6Clf/F+uuEGujnPAQRHqNbTyyL5fRTSIs9y1J1IAQSXjvUj4UYE4Fe
ygCeINMrft6ViId+LXqFxsi7ikCGpQ0=
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:18:41 2025 by rpki-client