Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/8e117f76-b87c-37a0-a202-b1ce407bf7a8.roa
File: 8e117f76-b87c-37a0-a202-b1ce407bf7a8.roa (raw, json)
Hash identifier: k4lfdzwX+uk2f+WHLE3a383LhRR1hDicPZTFtoqwWlw=
Subject key identifier: A8:06:52:2F:8A:51:8F:02:EC:8A:56:F2:CB:EC:60:4D:BA:EB:5B:8A
Certificate issuer: /CN=0c061d8c-3838-415d-8bbc-20962c789d81
Certificate serial: 010D0C9F43285848ADC61C515306BADAED1EB560
Authority key identifier: 65:B3:C6:31:F3:A8:02:B1:B2:7C:15:AD:5A:4E:B8:FB:EF:9C:3E:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/8e117f76-b87c-37a0-a202-b1ce407bf7a8.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 61228
IP address blocks: 23.141.88.0/24 maxlen: 24
2602:fb0d::/44 maxlen: 48
2602:fb0d:99::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:1c:51:53:06:ba:da:ed:1e:b5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c061d8c-3838-415d-8bbc-20962c789d81
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=e71c20cd-1ec4-4671-8db7-b671a2ac8702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:36:db:3c:40:e7:e7:e5:1d:4e:b9:c0:e3:d7:
00:60:96:5c:90:bd:00:38:40:62:52:8a:2e:fc:67:
78:c5:3f:ab:f8:4c:80:7f:c6:e0:ac:27:19:b6:d9:
6b:ae:78:d4:32:7d:19:d1:1a:b3:e9:68:75:35:e0:
5c:9a:e6:1d:b7:6c:e6:a3:4d:ae:e2:2b:8e:b6:da:
48:68:9c:15:24:52:8f:78:2e:ef:1c:80:5f:24:75:
47:3e:5e:72:82:62:f6:af:f1:99:93:16:19:d0:ee:
c9:49:61:2d:66:fb:66:27:cf:da:d8:98:ee:f1:af:
a8:16:18:fa:0b:93:35:f4:cb:33:91:22:03:65:a1:
38:74:30:7e:4f:9e:36:fb:19:ee:a0:01:04:92:3d:
0a:ba:e0:1c:55:52:80:a3:3b:4a:f6:59:ce:f2:78:
93:22:d2:3b:dd:02:fc:8a:bf:8f:25:c7:0e:a7:67:
ae:35:9f:76:07:fb:56:47:d2:ec:45:66:7e:8d:da:
d8:85:79:cf:bb:75:63:88:67:fa:8c:d2:64:78:e2:
23:f1:c5:d1:35:be:e4:13:b0:32:12:60:b6:02:1c:
8b:4b:ad:99:63:05:fb:63:52:07:c6:d9:70:2a:e0:
7d:ae:96:89:82:fb:17:a2:62:e2:0e:26:0c:1e:5e:
d3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:06:52:2F:8A:51:8F:02:EC:8A:56:F2:CB:EC:60:4D:BA:EB:5B:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/8e117f76-b87c-37a0-a202-b1ce407bf7a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/0c061d8c-3838-415d-8bbc-20962c789d81.crl
X509v3 Authority Key Identifier:
keyid:65:B3:C6:31:F3:A8:02:B1:B2:7C:15:AD:5A:4E:B8:FB:EF:9C:3E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81.cer
sbgp-ipAddrBlock: critical
IPv4:
23.141.88.0/24
IPv6:
2602:fb0d::/44
2602:fb0d:99::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:9b:0c:71:70:dd:62:0f:12:7f:46:b0:fd:e6:37:eb:56:21:
18:f3:06:61:ef:df:f5:32:b4:7d:1a:ac:76:62:db:07:76:be:
5b:1e:3e:f9:42:94:0f:d9:91:ea:df:a7:4e:7c:c5:84:46:bf:
bb:9a:af:04:fc:b1:db:07:49:01:c9:ba:ae:f0:b6:80:d2:fb:
e7:5e:e1:f0:4f:89:af:cf:2f:e3:08:4c:15:c1:9d:f1:1c:0d:
9d:cb:a7:7b:d0:5f:d2:e4:2a:f0:d2:86:2a:11:60:84:ef:a6:
d1:3e:c7:9c:54:33:ff:74:e5:82:06:85:86:95:ca:ea:93:f1:
0d:93:c0:df:ba:d2:99:4c:d8:d4:d2:2d:b7:64:c4:eb:e9:66:
8d:c3:d9:53:4d:0b:69:65:05:06:aa:4c:7a:0c:84:ce:5c:8c:
47:00:57:3b:eb:da:69:bd:bd:b3:69:2c:81:27:ab:d3:b9:6b:
f8:ad:b8:27:2a:5b:ea:24:dd:f5:90:a0:4e:56:75:5f:58:dc:
fa:6e:d4:7d:cf:8f:04:e9:86:7b:7d:d8:df:3b:e2:e2:9e:e6:
12:48:da:0b:6e:46:ce:e7:d9:3b:ea:8b:6c:b1:cf:5e:30:3d:
31:2f:57:0c:0f:de:05:e9:98:96:1d:a8:8a:df:25:3f:d2:7d:
c7:50:43:b1
-----BEGIN CERTIFICATE-----
MIIGXTCCBUWgAwIBAgIUAQ0Mn0MoWEitxhxRUwa62u0etWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGMwNjFkOGMtMzgzOC00MTVkLThiYmMtMjA5NjJjNzg5
ZDgxMB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk
ZTcxYzIwY2QtMWVjNC00NjcxLThkYjctYjY3MWEyYWM4NzAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDbbPEDn5+UdTrnA49cAYJZckL0AOEBiUoou
/Gd4xT+r+EyAf8bgrCcZttlrrnjUMn0Z0Rqz6Wh1NeBcmuYdt2zmo02u4iuOttpI
aJwVJFKPeC7vHIBfJHVHPl5ygmL2r/GZkxYZ0O7JSWEtZvtmJ8/a2Jju8a+oFhj6
C5M19MszkSIDZaE4dDB+T542+xnuoAEEkj0KuuAcVVKAoztK9lnO8niTItI73QL8
ir+PJccOp2euNZ92B/tWR9LsRWZ+jdrYhXnPu3VjiGf6jNJkeOIj8cXRNb7kE7Ay
EmC2AhyLS62ZYwX7Y1IHxtlwKuB9rpaJgvsXomLiDiYMHl7TYwIDAQABo4IDbzCC
A2swHQYDVR0OBBYEFKgGUi+KUY8C7IpW8svsYE2661uKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wYzA2
MWQ4Yy0zODM4LTQxNWQtOGJiYy0yMDk2MmM3ODlkODEvOGUxMTdmNzYtYjg3Yy0z
N2EwLWEyMDItYjFjZTQwN2JmN2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMGMwNjFkOGMtMzgzOC00MTVkLThi
YmMtMjA5NjJjNzg5ZDgxLzBjMDYxZDhjLTM4MzgtNDE1ZC04YmJjLTIwOTYyYzc4
OWQ4MS5jcmwwHwYDVR0jBBgwFoAUZbPGMfOoArGyfBWtWk64+++cPowwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wYzA2MWQ4Yy0zODM4LTQxNWQtOGJiYy0yMDk2
MmM3ODlkODEuY2VyMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAF41YMBgE
AgACMBIDBwQmAvsNAAADBwAmAvsNAJkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAg5sMcXDdYg8Sf0aw/eY3
61YhGPMGYe/f9TK0fRqsdmLbB3a+Wx4++UKUD9mR6t+nTnzFhEa/u5qvBPyx2wdJ
Acm6rvC2gNL7517h8E+Jr88v4whMFcGd8RwNncune9Bf0uQq8NKGKhFghO+m0T7H
nFQz/3TlggaFhpXK6pPxDZPA37rSmUzY1NItt2TE6+lmjcPZU00LaWUFBqpMegyE
zlyMRwBXO+vaab29s2ksgSer07lr+K24Jypb6iTd9ZCgTlZ1X1jc+m7Ufc+PBOmG
e33Y3zvi4p7mEkjaC25GzufZO+qLbLHPXjA9MS9XDA/eBemYlh2oit8lP9J9x1BD
sQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:28:08 2025 by rpki-client