Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/412a11c3-55d8-30a7-954e-7f92feb5901b.roa
File: 412a11c3-55d8-30a7-954e-7f92feb5901b.roa (raw, json)
Hash identifier: QwI+JGK6jnY8xfD7l5r+HGNCHmOCuyemAjSWWG2i5nM=
Subject key identifier: 8E:3C:7B:EC:66:FE:0C:6C:40:A5:5A:4B:E2:A4:77:36:FE:39:D6:BF
Certificate issuer: /CN=239e2a72-9347-4316-9be7-20bdf6512711
Certificate serial: 010D0C9F432858484EDACB95C4180EBEAFBD0E80
Authority key identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/412a11c3-55d8-30a7-954e-7f92feb5901b.roa
Signing time: Tue 24 Dec 2024 02:00:38 +0000
ROA not before: Tue 24 Dec 2024 02:00:38 +0000
ROA not after: Mon 24 Mar 2025 01:00:38 +0000
asID: 62164
IP address blocks: 23.129.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4e:da:cb:95:c4:18:0e:be:af:bd:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239e2a72-9347-4316-9be7-20bdf6512711
Validity
Not Before: Dec 24 02:00:38 2024 GMT
Not After : Mar 24 01:00:38 2025 GMT
Subject: CN=1a68212d-af4c-4a90-9599-11e103e61124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c3:15:09:62:aa:2e:7e:d2:1c:35:6b:bd:09:
6b:00:33:53:e6:1e:ba:dc:7f:9a:47:c1:cb:5f:34:
1c:1b:0a:0f:aa:a5:64:e0:d6:4e:64:90:92:71:e4:
9a:80:70:c6:d4:45:41:4e:91:6b:ec:8f:dd:bb:a7:
78:9e:6b:27:82:a3:61:81:c4:e1:3d:78:7b:a1:ad:
87:20:7e:74:4f:5d:e3:27:0d:91:dd:77:5d:03:42:
a1:92:b7:f7:76:fd:95:75:44:45:72:2c:c9:c0:b3:
cb:18:05:12:d2:dc:2d:09:a2:f2:b6:76:77:bd:cf:
59:a3:6d:f5:4b:13:89:35:6f:88:4b:27:c4:d2:4a:
7e:35:3d:f9:64:2a:00:e0:1c:cc:cc:76:64:f4:52:
3e:e8:ce:70:09:6e:79:b9:27:bd:76:42:df:ec:73:
38:c9:7e:0b:77:f4:30:60:b9:17:31:45:b5:f5:5a:
0e:81:fb:f6:94:8a:0c:ba:c9:ab:d7:1b:58:a5:d9:
60:7d:78:6d:0c:20:1e:ee:10:eb:52:24:ae:ec:80:
4b:1c:51:89:0a:5b:6f:f0:4a:79:c1:de:af:dc:0c:
cb:62:74:23:56:b8:68:3f:02:17:5e:62:e8:ab:a5:
28:f7:a6:30:bc:dd:aa:c2:5f:c8:a6:fd:63:d0:13:
c1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3C:7B:EC:66:FE:0C:6C:40:A5:5A:4B:E2:A4:77:36:FE:39:D6:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/412a11c3-55d8-30a7-954e-7f92feb5901b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl
X509v3 Authority Key Identifier:
keyid:C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
sbgp-ipAddrBlock: critical
IPv4:
23.129.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:94:e0:cc:69:73:c4:06:cf:31:bf:b6:69:3f:69:2c:31:ea:
1a:d9:a7:30:9f:17:80:aa:98:86:61:b6:8d:ba:e9:f5:1b:55:
a3:b9:4f:ef:d0:1d:a6:78:4f:52:c6:ab:55:08:f1:0f:41:71:
db:16:a5:9f:c5:0b:02:67:c5:2b:71:7e:f5:9c:7f:e9:8d:1b:
10:bb:85:82:e5:84:b9:d7:73:13:b2:77:fc:ca:cf:0f:a0:c9:
ae:50:8e:87:52:49:80:0f:5b:cb:7b:ae:1c:80:2a:e1:fe:4d:
39:08:39:48:dd:ed:5b:b9:48:01:dc:e1:8e:a1:1c:ae:2f:9d:
c6:13:30:aa:cf:28:05:4f:80:13:61:f1:da:de:52:21:8b:01:
2a:d2:cf:69:b3:66:9e:4a:9e:6b:30:ed:85:ff:a6:c6:e1:cd:
d9:fb:a9:c2:6a:95:5c:de:ac:56:f5:a2:a9:84:7c:24:0f:1d:
5e:ab:e3:5e:32:72:46:c2:1e:0c:bc:ef:ee:43:92:75:ac:af:
ee:48:67:e9:98:37:b3:9a:08:20:bb:4f:26:86:b2:da:51:05:
95:d4:fd:31:40:cb:b3:a2:16:88:9d:11:7a:92:39:cf:f9:cf:
c1:fe:fa:a4:03:ca:4e:c9:8b:08:02:d0:3f:43:f6:f0:10:a1:
4d:30:a1:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhO2suVxBgOvq+9DoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjM5ZTJhNzItOTM0Ny00MzE2LTliZTctMjBiZGY2NTEy
NzExMB4XDTI0MTIyNDAyMDAzOFoXDTI1MDMyNDAxMDAzOFowLzEtMCsGA1UEAxMk
MWE2ODIxMmQtYWY0Yy00YTkwLTk1OTktMTFlMTAzZTYxMTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcMVCWKqLn7SHDVrvQlrADNT5h663H+aR8HL
XzQcGwoPqqVk4NZOZJCSceSagHDG1EVBTpFr7I/du6d4nmsngqNhgcThPXh7oa2H
IH50T13jJw2R3XddA0Khkrf3dv2VdURFcizJwLPLGAUS0twtCaLytnZ3vc9Zo231
SxOJNW+ISyfE0kp+NT35ZCoA4BzMzHZk9FI+6M5wCW55uSe9dkLf7HM4yX4Ld/Qw
YLkXMUW19VoOgfv2lIoMusmr1xtYpdlgfXhtDCAe7hDrUiSu7IBLHFGJCltv8Ep5
wd6v3AzLYnQjVrhoPwIXXmLoq6Uo96YwvN2qwl/Ipv1j0BPBUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI48e+xm/gxsQKVaS+Kkdzb+Oda/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMzll
MmE3Mi05MzQ3LTQzMTYtOWJlNy0yMGJkZjY1MTI3MTEvNDEyYTExYzMtNTVkOC0z
MGE3LTk1NGUtN2Y5MmZlYjU5MDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjM5ZTJhNzItOTM0Ny00MzE2LTli
ZTctMjBiZGY2NTEyNzExLzIzOWUyYTcyLTkzNDctNDMxNi05YmU3LTIwYmRmNjUx
MjcxMS5jcmwwHwYDVR0jBBgwFoAUxwBadkJgEZ/tem9/Z5RiZOwta1QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMzllMmE3Mi05MzQ3LTQzMTYtOWJlNy0yMGJk
ZjY1MTI3MTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4HoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKCU4Mxpc8QGzzG/tmk/aSwx6hrZpzCfF4CqmIZhto266fUbVaO5T+/Q
HaZ4T1LGq1UI8Q9BcdsWpZ/FCwJnxStxfvWcf+mNGxC7hYLlhLnXcxOyd/zKzw+g
ya5QjodSSYAPW8t7rhyAKuH+TTkIOUjd7Vu5SAHc4Y6hHK4vncYTMKrPKAVPgBNh
8dreUiGLASrSz2mzZp5Knmsw7YX/psbhzdn7qcJqlVzerFb1oqmEfCQPHV6r414y
ckbCHgy87+5DknWsr+5IZ+mYN7OaCCC7TyaGstpRBZXU/TFAy7OiFoidEXqSOc/5
z8H++qQDyk7JiwgC0D9D9vAQoU0wofI=
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:31:05 2025 by rpki-client