Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/1e32b471-1528-3ecf-b436-e5b4c0a808ed.roa
File: 1e32b471-1528-3ecf-b436-e5b4c0a808ed.roa (raw, json)
Hash identifier: zzvANj4Nj711DrdE0fyvHYdn4Kj7/ay7FT/Jo3V4nr4=
Subject key identifier: 0A:95:7F:AE:B8:3B:07:02:D0:E2:7D:BE:8A:14:78:8D:09:F4:11:C0
Certificate issuer: /CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
Certificate serial: 010D0C9F432858485B6AF65FB4AFF6FB9F9AAD80
Authority key identifier: F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/1e32b471-1528-3ecf-b436-e5b4c0a808ed.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 16552
IP address blocks: 23.128.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6a:f6:5f:b4:af:f6:fb:9f:9a:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=589de1c9-9e7c-4f46-9f7a-3bc6ba565396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7f:9e:a3:f3:60:9b:f3:fc:a5:63:04:27:2e:
d3:0c:4c:b7:20:33:8c:8e:a7:92:7a:92:21:74:39:
3d:b7:50:e0:e4:95:c0:fc:92:a8:cd:4d:b8:41:27:
f4:35:2d:a1:ba:89:b7:0c:69:81:8d:67:71:0d:49:
83:57:96:05:89:a9:74:3c:42:47:1f:24:37:6c:3f:
f7:1e:db:1f:00:45:d8:eb:7d:63:d2:a9:87:ed:b1:
96:a6:56:d5:a4:4d:a5:28:54:2c:ec:bf:80:eb:06:
64:7f:a4:17:f9:76:4d:f6:3c:45:cd:d7:e4:65:28:
91:10:95:5b:9f:61:48:60:7c:77:81:68:67:30:90:
03:6e:f9:da:dd:ae:48:c5:42:31:8f:fd:e3:6b:d1:
3b:a6:a9:7c:59:58:32:fe:49:ab:77:5d:a7:25:56:
4f:b8:a2:a1:fa:5d:b5:06:bf:95:8f:f0:37:c8:3a:
37:1a:1d:f8:88:f2:0d:c1:33:f5:5d:68:88:fe:cb:
cb:64:41:ec:09:aa:e0:08:98:ec:6c:c2:32:8a:81:
bf:60:82:91:53:0b:2b:45:6a:d4:11:34:1a:03:22:
c9:a8:cc:b9:fb:4a:bb:42:db:7c:fb:a1:18:b9:34:
31:01:2f:4a:ba:68:a5:88:59:42:1b:c9:52:2f:85:
0b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:95:7F:AE:B8:3B:07:02:D0:E2:7D:BE:8A:14:78:8D:09:F4:11:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/1e32b471-1528-3ecf-b436-e5b4c0a808ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl
X509v3 Authority Key Identifier:
keyid:F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
sbgp-ipAddrBlock: critical
IPv4:
23.128.122.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:a5:84:6a:49:b5:fe:5a:8f:51:bf:2b:46:4e:4b:a9:5e:b2:
44:bd:5e:03:2c:70:9a:74:ae:5b:70:5f:2e:e0:83:ce:63:14:
4a:10:f4:da:cb:8d:57:69:be:d4:10:e8:bf:32:db:07:43:b9:
56:f8:64:61:bb:0c:fd:dc:60:41:24:e3:0e:28:50:e0:20:04:
dc:15:f5:ba:20:e7:ce:4c:65:08:d0:76:f9:97:6b:0c:a5:72:
09:e8:4e:b5:9c:e4:5f:35:0d:36:27:e0:a3:3a:83:8f:de:87:
5e:3f:75:54:d3:57:38:b9:5d:e3:49:fd:b6:5a:5c:00:6f:67:
fc:88:0b:7f:be:ec:6b:33:ca:55:b9:0e:ce:e9:e6:9a:b0:44:
0f:54:62:c7:a7:ce:4f:c4:63:b6:29:91:5f:45:cc:fd:62:1b:
52:79:ae:f0:b5:e6:37:3b:ac:ec:cc:5b:d8:88:1e:12:65:b3:
3d:9d:52:a6:7d:f9:45:99:88:c9:ab:5e:0c:b5:15:33:cf:ad:
c9:f5:8c:95:1d:b9:d2:86:43:69:78:20:18:e2:0d:1d:14:38:
8e:24:f8:0a:13:43:54:33:39:8d:68:6f:97:d6:82:fb:d8:6a:
ab:38:34:5b:a7:15:56:37:81:20:40:b9:2a:a5:0f:42:80:34:
a0:59:82:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhbavZftK/2+5+arYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRmNmViZDctMGNjZC00YzA2LTgwYTAtNDVmZDc2MDc3
ZjU0MB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk
NTg5ZGUxYzktOWU3Yy00ZjQ2LTlmN2EtM2JjNmJhNTY1Mzk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8H+eo/Ngm/P8pWMEJy7TDEy3IDOMjqeSepIh
dDk9t1Dg5JXA/JKozU24QSf0NS2huom3DGmBjWdxDUmDV5YFial0PEJHHyQ3bD/3
HtsfAEXY631j0qmH7bGWplbVpE2lKFQs7L+A6wZkf6QX+XZN9jxFzdfkZSiREJVb
n2FIYHx3gWhnMJADbvna3a5IxUIxj/3ja9E7pql8WVgy/kmrd12nJVZPuKKh+l21
Br+Vj/A3yDo3Gh34iPINwTP1XWiI/svLZEHsCargCJjsbMIyioG/YIKRUwsrRWrU
ETQaAyLJqMy5+0q7Qtt8+6EYuTQxAS9KumiliFlCG8lSL4ULcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAqVf664OwcC0OJ9vooUeI0J9BHAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZGY2
ZWJkNy0wY2NkLTRjMDYtODBhMC00NWZkNzYwNzdmNTQvMWUzMmI0NzEtMTUyOC0z
ZWNmLWI0MzYtZTViNGMwYTgwOGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWRmNmViZDctMGNjZC00YzA2LTgw
YTAtNDVmZDc2MDc3ZjU0LzVkZjZlYmQ3LTBjY2QtNGMwNi04MGEwLTQ1ZmQ3NjA3
N2Y1NC5jcmwwHwYDVR0jBBgwFoAU+ZXymTKY5kpAyLxIzydJ7K1e/qcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZGY2ZWJkNy0wY2NkLTRjMDYtODBhMC00NWZk
NzYwNzdmNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4B6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABmlhGpJtf5aj1G/K0ZOS6leskS9XgMscJp0rltwXy7gg85jFEoQ9NrL
jVdpvtQQ6L8y2wdDuVb4ZGG7DP3cYEEk4w4oUOAgBNwV9bog585MZQjQdvmXawyl
cgnoTrWc5F81DTYn4KM6g4/eh14/dVTTVzi5XeNJ/bZaXABvZ/yIC3++7GszylW5
Ds7p5pqwRA9UYsenzk/EY7YpkV9FzP1iG1J5rvC15jc7rOzMW9iIHhJlsz2dUqZ9
+UWZiMmrXgy1FTPPrcn1jJUdudKGQ2l4IBjiDR0UOI4k+AoTQ1QzOY1ob5fWgvvY
aqs4NFunFVY3gSBAuSqlD0KANKBZgls=
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:50:37 2025 by rpki-client