Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/3f25a7a7-5bbb-336a-a266-855eadcb523f.roa
File: 3f25a7a7-5bbb-336a-a266-855eadcb523f.roa (raw, json)
Hash identifier: tkp2ndyk+ZLxgS9O/9P3mloFx4SwWFIv14fMJQMOcAk=
Subject key identifier: 48:27:56:0E:C2:A3:6F:AF:5B:60:61:94:56:92:4F:F0:0F:52:8A:5B
Certificate issuer: /CN=9a52f880-7957-4bb9-b30a-78f30c289eb1
Certificate serial: 010D0C9F43285848143A806A56E9E038A1198680
Authority key identifier: A4:95:8B:E6:A3:B4:17:CC:5E:91:DD:87:95:AC:2E:7F:65:97:50:AC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/3f25a7a7-5bbb-336a-a266-855eadcb523f.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 16611
IP address blocks: 23.153.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:80:6a:56:e9:e0:38:a1:19:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a52f880-7957-4bb9-b30a-78f30c289eb1
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=4b4e8547-6c75-47a9-b05c-a30ab4bb181e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:65:06:c9:95:03:55:24:a5:98:15:3b:97:48:
80:f1:c5:bd:f7:3a:66:13:3a:a1:bf:e3:f4:63:2e:
db:d1:da:5b:e6:61:d6:62:ec:4f:c5:d8:69:3a:41:
1b:2e:7a:c7:d7:cf:4a:e5:d3:e0:5e:27:e3:94:69:
1f:3e:37:2d:19:29:ad:f1:ec:7e:0a:48:ac:f9:fa:
a8:85:6c:31:85:ca:e0:fe:7e:29:ac:67:d9:46:3d:
db:f6:de:43:1d:d7:db:6f:a0:0e:f0:38:b9:f1:43:
ac:63:c5:ba:35:5d:3a:21:d8:46:f3:ba:c5:a9:44:
75:10:76:1f:33:0d:1c:8f:b1:96:78:f1:65:67:0b:
e7:27:de:ef:ce:d1:1a:e0:61:06:41:ed:cb:c7:a8:
49:bf:3c:da:a8:6b:ba:cc:0a:e2:c9:56:0a:78:41:
cd:2a:24:b5:dc:31:78:37:ca:a6:f3:ec:c0:7f:a7:
bd:e7:63:ea:94:52:f4:80:dd:a5:51:76:4b:5f:1d:
e4:96:93:78:97:bb:14:87:84:08:27:78:11:cd:87:
92:54:32:dc:39:93:ad:86:59:d3:38:d0:28:3f:06:
e2:3a:c4:9b:f2:0d:34:a1:d9:5b:73:ee:1d:fb:70:
09:4a:95:6a:05:40:93:05:4c:ba:27:fe:db:9a:98:
bf:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:27:56:0E:C2:A3:6F:AF:5B:60:61:94:56:92:4F:F0:0F:52:8A:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/3f25a7a7-5bbb-336a-a266-855eadcb523f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.crl
X509v3 Authority Key Identifier:
keyid:A4:95:8B:E6:A3:B4:17:CC:5E:91:DD:87:95:AC:2E:7F:65:97:50:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer
sbgp-ipAddrBlock: critical
IPv4:
23.153.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:d1:1a:ac:76:0f:49:1b:0d:67:42:24:b4:5c:90:40:68:66:
00:ba:ed:74:cb:2d:95:d1:e9:f7:c7:73:58:70:6b:64:fd:78:
6a:6d:f2:2c:d7:86:d6:77:66:2d:18:45:b1:22:05:c4:eb:80:
a8:8f:5c:c3:af:df:80:60:1d:9a:8b:34:e3:67:d8:d4:f8:1f:
5f:06:5e:8c:04:2c:cf:8a:2f:68:69:17:41:6d:60:31:11:99:
95:a7:17:58:a5:32:8e:8b:01:08:b1:98:49:8c:dc:47:9b:33:
0d:c1:6f:03:bd:33:86:f9:1f:51:83:f6:2d:17:c8:c2:19:0f:
9f:48:b4:a4:23:15:32:eb:82:72:3b:59:1e:bc:61:47:24:2d:
4c:35:0c:a7:a3:b7:9c:36:34:c5:2d:4b:78:6c:cb:eb:fc:7c:
16:fc:6d:6a:ad:2a:2a:bb:2c:41:c4:6d:aa:0f:e3:cc:c5:32:
46:2f:e9:45:5a:2c:a0:3b:05:74:71:52:37:c4:bd:67:0e:bb:
97:d2:cc:73:46:df:d4:b5:f7:14:7b:50:c2:2a:d5:e7:67:39:
83:83:01:9b:62:b2:e3:1f:dc:14:32:6d:53:72:ec:78:71:40:
b6:ae:86:08:a5:7a:e1:95:b4:fe:15:22:61:aa:a3:93:a4:cc:
d5:4d:a8:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOoBqVungOKEZhoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWE1MmY4ODAtNzk1Ny00YmI5LWIzMGEtNzhmMzBjMjg5
ZWIxMB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
NGI0ZTg1NDctNmM3NS00N2E5LWIwNWMtYTMwYWI0YmIxODFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmUGyZUDVSSlmBU7l0iA8cW99zpmEzqhv+P0
Yy7b0dpb5mHWYuxPxdhpOkEbLnrH189K5dPgXifjlGkfPjctGSmt8ex+Ckis+fqo
hWwxhcrg/n4prGfZRj3b9t5DHdfbb6AO8Di58UOsY8W6NV06IdhG87rFqUR1EHYf
Mw0cj7GWePFlZwvnJ97vztEa4GEGQe3Lx6hJvzzaqGu6zAriyVYKeEHNKiS13DF4
N8qm8+zAf6e952PqlFL0gN2lUXZLXx3klpN4l7sUh4QIJ3gRzYeSVDLcOZOthlnT
ONAoPwbiOsSb8g00odlbc+4d+3AJSpVqBUCTBUy6J/7bmpi/4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEgnVg7Co2+vW2BhlFaST/APUopbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85YTUy
Zjg4MC03OTU3LTRiYjktYjMwYS03OGYzMGMyODllYjEvM2YyNWE3YTctNWJiYi0z
MzZhLWEyNjYtODU1ZWFkY2I1MjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOWE1MmY4ODAtNzk1Ny00YmI5LWIz
MGEtNzhmMzBjMjg5ZWIxLzlhNTJmODgwLTc5NTctNGJiOS1iMzBhLTc4ZjMwYzI4
OWViMS5jcmwwHwYDVR0jBBgwFoAUpJWL5qO0F8xekd2Hlawuf2WXUKwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS85YTUyZjg4MC03OTU3LTRiYjktYjMwYS03OGYz
MGMyODllYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5nZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACnRGqx2D0kbDWdCJLRckEBoZgC67XTLLZXR6ffHc1hwa2T9eGpt8izX
htZ3Zi0YRbEiBcTrgKiPXMOv34BgHZqLNONn2NT4H18GXowELM+KL2hpF0FtYDER
mZWnF1ilMo6LAQixmEmM3EebMw3BbwO9M4b5H1GD9i0XyMIZD59ItKQjFTLrgnI7
WR68YUckLUw1DKejt5w2NMUtS3hsy+v8fBb8bWqtKiq7LEHEbaoP48zFMkYv6UVa
LKA7BXRxUjfEvWcOu5fSzHNG39S19xR7UMIq1ednOYODAZtisuMf3BQybVNy7Hhx
QLauhgileuGVtP4VImGqo5OkzNVNqFA=
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:36 2025 by rpki-client