Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd043f47-7524-4b11-a109-6bba895f6e1c/13ee82f5-89fe-3243-a686-2132e4e2271a.roa
File: 13ee82f5-89fe-3243-a686-2132e4e2271a.roa (raw, json)
Hash identifier: JVPmScwxVK9iK4HUOnOWqjjRJcLBBHO1MN/brfDLdRM=
Subject key identifier: 25:1D:E3:D8:0F:9A:81:92:25:01:82:03:9B:75:C7:DC:F9:C1:DB:94
Certificate issuer: /CN=cd043f47-7524-4b11-a109-6bba895f6e1c
Certificate serial: 010D0C9F432858487B85BAC265C5C29ADCFA0F00
Authority key identifier: F7:81:22:5B:63:96:02:E9:BD:55:DC:50:B5:4B:81:A9:0A:FA:73:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd043f47-7524-4b11-a109-6bba895f6e1c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd043f47-7524-4b11-a109-6bba895f6e1c/13ee82f5-89fe-3243-a686-2132e4e2271a.roa
Signing time: Thu 09 Jan 2025 02:00:40 +0000
ROA not before: Thu 09 Jan 2025 02:00:40 +0000
ROA not after: Wed 09 Apr 2025 01:00:40 +0000
asID: 47055
IP address blocks: 23.185.136.0/24 maxlen: 24
2602:f85b::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7b:85:ba:c2:65:c5:c2:9a:dc:fa:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd043f47-7524-4b11-a109-6bba895f6e1c
Validity
Not Before: Jan 9 02:00:40 2025 GMT
Not After : Apr 9 01:00:40 2025 GMT
Subject: CN=fab2f689-45f0-4e35-bcde-28ce67b7169c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:70:1a:bb:8b:1e:01:7f:f9:d7:c7:00:ea:3c:
e1:e9:f7:1e:cd:f3:0e:86:ef:db:9c:5b:20:d2:81:
fe:8c:fb:8a:dc:bd:45:5f:d4:c0:41:0a:43:c2:3d:
9b:2b:3e:aa:78:29:b1:34:ae:a5:e3:f2:c2:4f:62:
c4:96:db:d3:f8:39:bf:c1:7f:b9:6a:a0:aa:5d:bb:
39:15:de:09:04:0a:f5:1e:98:e1:2b:21:6f:1c:ef:
6b:10:da:ba:80:40:06:68:7a:1a:68:52:b1:87:cf:
b3:8a:db:11:8b:c1:52:b1:0a:24:b2:d9:86:29:ff:
ac:b5:46:16:59:02:08:73:45:fb:8d:a4:58:3a:91:
82:a8:e7:83:aa:6e:23:6a:bb:d4:a8:48:6e:5d:fc:
50:38:cb:fe:d0:eb:50:a9:97:f0:8b:a6:87:dd:40:
8f:d1:ed:a5:42:37:23:37:17:48:3c:20:ea:95:6b:
03:ea:e3:8e:63:ce:80:f1:2e:2f:87:a5:fa:e2:cf:
2f:12:44:4c:c8:44:de:3d:61:bb:6f:c2:30:e9:c3:
98:55:ae:36:93:eb:eb:8c:70:e5:94:f9:e3:b6:6e:
19:15:29:29:e8:63:98:11:1e:a1:db:88:0e:05:ca:
6e:ed:49:ee:ff:ec:6d:4b:17:fd:cf:24:de:fa:8b:
e2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1D:E3:D8:0F:9A:81:92:25:01:82:03:9B:75:C7:DC:F9:C1:DB:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd043f47-7524-4b11-a109-6bba895f6e1c/13ee82f5-89fe-3243-a686-2132e4e2271a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd043f47-7524-4b11-a109-6bba895f6e1c/cd043f47-7524-4b11-a109-6bba895f6e1c.crl
X509v3 Authority Key Identifier:
keyid:F7:81:22:5B:63:96:02:E9:BD:55:DC:50:B5:4B:81:A9:0A:FA:73:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd043f47-7524-4b11-a109-6bba895f6e1c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.185.136.0/24
IPv6:
2602:f85b::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:27:ef:a8:8e:98:45:f1:2d:79:62:58:72:c9:0a:bc:8b:c0:
ab:90:2f:d1:38:b9:c0:0f:2a:0d:a0:23:98:55:ba:e2:f8:ef:
21:b3:2c:98:00:e2:a3:ec:8c:c2:d0:96:67:c8:57:44:84:7d:
23:9e:6d:4e:98:b6:fb:b1:18:30:93:d2:a5:4f:e9:d1:1d:09:
12:26:99:cc:5b:67:62:1b:d3:ba:f7:5d:a7:1f:2a:7b:92:76:
46:0b:07:c0:59:47:94:cc:dd:9e:04:e5:86:40:70:06:77:41:
01:93:8a:87:63:a6:46:d6:66:b2:62:64:ca:0c:17:00:a7:f8:
36:c4:23:5f:f5:25:88:f0:28:fb:fd:32:33:aa:b6:f4:dd:46:
62:9f:f5:0d:60:47:5c:12:11:d6:61:27:37:bb:85:49:2f:88:
fc:d6:3a:ff:60:3d:d3:d0:ee:eb:21:aa:80:e8:11:4f:68:3e:
25:3d:f4:e5:90:84:cd:39:8e:50:c6:27:5b:ef:d7:44:f6:0d:
5b:68:b0:73:7d:0b:65:17:77:20:76:94:42:cd:b1:cd:bf:bf:
70:cd:93:13:77:62:88:35:1a:6e:53:d1:59:44:02:0d:15:45:
2c:bf:4e:7a:ca:92:2b:5a:b2:61:8c:08:38:51:fb:c6:92:9b:
db:da:08:01
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEh7hbrCZcXCmtz6DwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2QwNDNmNDctNzUyNC00YjExLWExMDktNmJiYTg5NWY2
ZTFjMB4XDTI1MDEwOTAyMDA0MFoXDTI1MDQwOTAxMDA0MFowLzEtMCsGA1UEAxMk
ZmFiMmY2ODktNDVmMC00ZTM1LWJjZGUtMjhjZTY3YjcxNjljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA93Aau4seAX/518cA6jzh6fcezfMOhu/bnFsg
0oH+jPuK3L1FX9TAQQpDwj2bKz6qeCmxNK6l4/LCT2LEltvT+Dm/wX+5aqCqXbs5
Fd4JBAr1HpjhKyFvHO9rENq6gEAGaHoaaFKxh8+zitsRi8FSsQokstmGKf+stUYW
WQIIc0X7jaRYOpGCqOeDqm4jarvUqEhuXfxQOMv+0OtQqZfwi6aH3UCP0e2lQjcj
NxdIPCDqlWsD6uOOY86A8S4vh6X64s8vEkRMyETePWG7b8Iw6cOYVa42k+vrjHDl
lPnjtm4ZFSkp6GOYER6h24gOBcpu7Unu/+xtSxf9zyTe+ovioQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFCUd49gPmoGSJQGCA5t1x9z5wduUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jZDA0
M2Y0Ny03NTI0LTRiMTEtYTEwOS02YmJhODk1ZjZlMWMvMTNlZTgyZjUtODlmZS0z
MjQzLWE2ODYtMjEzMmU0ZTIyNzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2QwNDNmNDctNzUyNC00YjExLWEx
MDktNmJiYTg5NWY2ZTFjL2NkMDQzZjQ3LTc1MjQtNGIxMS1hMTA5LTZiYmE4OTVm
NmUxYy5jcmwwHwYDVR0jBBgwFoAU94EiW2OWAum9VdxQtUuBqQr6cwAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9jZDA0M2Y0Ny03NTI0LTRiMTEtYTEwOS02YmJh
ODk1ZjZlMWMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7mIMA4E
AgACMAgDBgAmAvhbADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCUJ++ojphF8S15YlhyyQq8i8CrkC/ROLnA
DyoNoCOYVbri+O8hsyyYAOKj7IzC0JZnyFdEhH0jnm1OmLb7sRgwk9KlT+nRHQkS
JpnMW2diG9O6912nHyp7knZGCwfAWUeUzN2eBOWGQHAGd0EBk4qHY6ZG1mayYmTK
DBcAp/g2xCNf9SWI8Cj7/TIzqrb03UZin/UNYEdcEhHWYSc3u4VJL4j81jr/YD3T
0O7rIaqA6BFPaD4lPfTlkITNOY5Qxidb79dE9g1baLBzfQtlF3cgdpRCzbHNv79w
zZMTd2KINRpuU9FZRAINFUUsv056ypIrWrJhjAg4UfvGkpvb2ggB
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:01:42 2025 by rpki-client