Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/dec0bda2-8e4f-34a0-8a87-5be34cfc05e7.roa
File: dec0bda2-8e4f-34a0-8a87-5be34cfc05e7.roa (raw, json)
Hash identifier: mVn6Oiq0QBu1D4v1EO+Zp9Hsum/08Zj+jbENnyfrsao=
Subject key identifier: 0E:9B:F4:FD:12:50:7D:BB:3F:25:81:7C:D7:4B:A4:42:A6:DF:AE:C0
Certificate issuer: /CN=f9c87fef-d8f8-4134-a4ec-f2a073567030
Certificate serial: 010D0C9F43285848626588415FA2F49FAB74D1C0
Authority key identifier: 92:BB:03:6F:12:A9:48:6F:48:A5:0D:56:FF:94:5E:2E:62:3C:1D:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/dec0bda2-8e4f-34a0-8a87-5be34cfc05e7.roa
Signing time: Tue 31 Dec 2024 02:00:40 +0000
ROA not before: Tue 31 Dec 2024 02:00:40 +0000
ROA not after: Mon 31 Mar 2025 01:00:40 +0000
asID: 30006
IP address blocks: 23.169.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:62:65:88:41:5f:a2:f4:9f:ab:74:d1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c87fef-d8f8-4134-a4ec-f2a073567030
Validity
Not Before: Dec 31 02:00:40 2024 GMT
Not After : Mar 31 01:00:40 2025 GMT
Subject: CN=afac8c29-251d-4dd3-9669-a4a5342ab322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d3:b1:fd:80:c3:1d:16:78:77:18:1d:f5:03:
00:38:5f:68:56:73:f3:4f:36:54:8c:f6:92:c7:56:
a6:61:0b:6e:ac:d2:fc:e4:a1:1b:04:e9:8e:05:18:
e8:a7:f5:1d:91:c8:f1:6a:5d:11:14:62:e2:a4:1f:
18:30:d7:45:91:28:3e:c2:25:3a:6c:74:84:ae:53:
20:09:24:ce:f4:90:30:5d:66:34:0f:61:a2:d0:51:
93:8e:51:ce:2f:c5:6e:23:58:ac:cd:fa:64:1f:a5:
3d:07:f2:53:19:e6:92:c3:21:f6:f1:99:87:b1:e3:
c3:4b:5a:66:32:e7:24:82:61:0c:ba:60:71:80:13:
b0:1e:e7:42:ef:19:9a:07:18:fe:f9:23:ab:85:ea:
05:e3:fe:88:e8:45:bc:ba:60:8e:ca:14:96:44:21:
9e:c8:34:cd:32:28:31:cc:f1:1d:ca:df:da:9b:0f:
16:d6:97:dc:65:2e:45:b2:23:02:0a:aa:73:9c:01:
cd:6e:75:53:d8:13:c4:d5:e6:82:79:ac:05:21:0a:
2d:bc:7e:e7:c9:9a:89:f2:5b:d1:8b:f6:f6:7f:f3:
53:2f:02:f6:ae:d9:f8:aa:a7:54:1e:2f:03:d5:9c:
9f:5d:12:db:df:3d:6b:22:98:76:3b:74:39:29:a8:
7d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9B:F4:FD:12:50:7D:BB:3F:25:81:7C:D7:4B:A4:42:A6:DF:AE:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/dec0bda2-8e4f-34a0-8a87-5be34cfc05e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/f9c87fef-d8f8-4134-a4ec-f2a073567030.crl
X509v3 Authority Key Identifier:
keyid:92:BB:03:6F:12:A9:48:6F:48:A5:0D:56:FF:94:5E:2E:62:3C:1D:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030.cer
sbgp-ipAddrBlock: critical
IPv4:
23.169.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:dd:66:64:70:22:0f:e8:68:a7:5c:9a:3e:74:78:f1:12:e2:
e1:86:c6:cb:6d:98:7e:0e:e6:ca:56:c7:56:5f:b3:5d:8e:8d:
6b:d2:a5:be:ee:62:c4:09:88:95:1b:db:7b:56:95:a7:a8:a2:
55:41:df:aa:b4:d9:6a:55:a9:83:a1:b7:bd:27:6f:4d:ee:90:
7e:4b:36:bc:8f:13:1f:51:b1:30:0f:e7:a7:d1:76:37:de:df:
9c:8f:07:dc:c6:7b:c3:ec:47:5f:7f:79:3e:fd:11:63:88:ea:
bc:18:71:8d:b6:a7:3d:87:ba:b3:59:76:9e:61:c8:76:26:7a:
7b:34:6a:39:03:b0:0f:04:24:b6:5c:a3:60:a2:4b:b3:c1:8c:
0a:6f:79:77:dd:c6:91:a1:59:1f:89:8c:f1:37:8c:5b:c9:75:
0f:90:8e:d0:00:9f:8b:19:a4:51:70:3f:64:7c:28:61:c4:43:
93:b5:eb:2c:79:d7:86:df:58:13:2e:2f:d3:7a:5b:a2:1b:3f:
e0:0d:77:48:73:a0:e0:51:e4:4e:c2:c5:42:61:89:ed:fd:14:
07:53:77:d0:fb:1e:bb:b9:60:82:f4:95:78:b4:9f:d1:2b:c5:
d8:1f:68:05:23:e7:dd:fb:6e:53:98:57:9d:d0:46:2c:0e:10:
70:0c:bd:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhiZYhBX6L0n6t00cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjljODdmZWYtZDhmOC00MTM0LWE0ZWMtZjJhMDczNTY3
MDMwMB4XDTI0MTIzMTAyMDA0MFoXDTI1MDMzMTAxMDA0MFowLzEtMCsGA1UEAxMk
YWZhYzhjMjktMjUxZC00ZGQzLTk2NjktYTRhNTM0MmFiMzIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtOx/YDDHRZ4dxgd9QMAOF9oVnPzTzZUjPaS
x1amYQturNL85KEbBOmOBRjop/Udkcjxal0RFGLipB8YMNdFkSg+wiU6bHSErlMg
CSTO9JAwXWY0D2Gi0FGTjlHOL8VuI1iszfpkH6U9B/JTGeaSwyH28ZmHsePDS1pm
MuckgmEMumBxgBOwHudC7xmaBxj++SOrheoF4/6I6EW8umCOyhSWRCGeyDTNMigx
zPEdyt/amw8W1pfcZS5FsiMCCqpznAHNbnVT2BPE1eaCeawFIQotvH7nyZqJ8lvR
i/b2f/NTLwL2rtn4qqdUHi8D1ZyfXRLb3z1rIph2O3Q5Kah9NQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA6b9P0SUH27PyWBfNdLpEKm367AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOWM4
N2ZlZi1kOGY4LTQxMzQtYTRlYy1mMmEwNzM1NjcwMzAvZGVjMGJkYTItOGU0Zi0z
NGEwLThhODctNWJlMzRjZmMwNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjljODdmZWYtZDhmOC00MTM0LWE0
ZWMtZjJhMDczNTY3MDMwL2Y5Yzg3ZmVmLWQ4ZjgtNDEzNC1hNGVjLWYyYTA3MzU2
NzAzMC5jcmwwHwYDVR0jBBgwFoAUkrsDbxKpSG9IpQ1W/5ReLmI8HbIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOWM4N2ZlZi1kOGY4LTQxMzQtYTRlYy1mMmEw
NzM1NjcwMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6k4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADDdZmRwIg/oaKdcmj50ePES4uGGxsttmH4O5spWx1Zfs12OjWvSpb7u
YsQJiJUb23tWlaeoolVB36q02WpVqYOht70nb03ukH5LNryPEx9RsTAP56fRdjfe
35yPB9zGe8PsR19/eT79EWOI6rwYcY22pz2HurNZdp5hyHYmens0ajkDsA8EJLZc
o2CiS7PBjApveXfdxpGhWR+JjPE3jFvJdQ+QjtAAn4sZpFFwP2R8KGHEQ5O16yx5
14bfWBMuL9N6W6IbP+ANd0hzoOBR5E7CxUJhie39FAdTd9D7Hru5YIL0lXi0n9Er
xdgfaAUj5937blOYV53QRiwOEHAMvXI=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:41:30 2025 by rpki-client