Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5c67a956-f5e7-32cd-b3eb-4a2a3ff9c7ec.roa
File: 5c67a956-f5e7-32cd-b3eb-4a2a3ff9c7ec.roa (raw, json)
Hash identifier: b5EuPtp4qW79coUhSWK3Rm5rVn+mM6TTFcaF6QCuaY0=
Subject key identifier: 8B:8C:CE:AB:FB:75:5D:03:00:66:3C:F9:86:FC:79:1E:B9:90:98:0C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E62B3E1DA3ABE7BEF6CBAD80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5c67a956-f5e7-32cd-b3eb-4a2a3ff9c7ec.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 396982
IP address blocks: 23.251.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:3e:1d:a3:ab:e7:be:f6:cb:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=548d55d6-b72a-4bc4-b55d-37ee57222830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d4:c0:75:d8:9e:be:83:42:9b:17:31:81:2e:
31:15:bd:b6:8d:c6:b4:ac:8d:ce:87:b9:f9:53:e1:
5a:7c:00:3a:cf:2e:ae:ab:11:01:19:25:32:9f:a9:
83:6d:e1:56:a0:bf:ed:31:cc:0f:2d:0f:72:24:f6:
aa:75:e2:9a:25:26:6f:e8:4f:3b:a2:1c:32:2f:1c:
e3:ac:39:e6:19:26:56:97:55:d3:73:ea:b3:c8:e5:
b7:cb:f2:fa:ba:41:72:2d:4d:52:a6:b7:5a:c7:27:
58:10:23:9e:58:05:d3:f5:ae:76:f8:19:2b:a5:cd:
0b:9a:ca:28:cf:8f:a6:3c:cf:25:20:0a:44:e2:87:
20:1f:e3:b0:50:51:ee:a1:c5:a7:8d:ad:cb:05:8e:
7f:48:12:af:9c:39:2f:3b:1d:c1:77:41:c4:2c:77:
6c:f1:df:90:a9:7f:04:9a:8a:dc:1c:81:c1:bf:74:
c3:d8:d6:a9:02:a7:f5:16:d3:4f:c2:31:27:09:ef:
03:97:8a:ef:f8:69:92:81:80:c6:a4:06:43:8f:c3:
1c:f1:e5:9c:72:53:54:b2:5e:8b:2b:64:fd:e0:56:
7d:33:6c:44:2b:1a:51:45:a1:1e:6e:64:e8:2d:b1:
7c:ea:50:1e:09:56:46:d4:93:a6:41:8e:62:09:2a:
6d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8C:CE:AB:FB:75:5D:03:00:66:3C:F9:86:FC:79:1E:B9:90:98:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5c67a956-f5e7-32cd-b3eb-4a2a3ff9c7ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.251.150.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:de:fe:06:ec:13:96:71:21:84:94:04:79:ca:cf:d6:1c:02:
ad:82:51:2f:81:c8:2b:38:81:dc:e4:f4:9f:47:85:28:d1:75:
b3:da:12:41:d2:4a:49:a6:30:28:3d:6e:b0:c8:44:fc:e2:4d:
7b:90:00:92:72:45:b4:5a:ab:de:7b:79:f0:48:a3:f3:ca:9f:
58:98:cd:2e:69:05:c9:9e:a9:df:01:2b:79:8c:c5:46:e1:ac:
d2:3e:f2:bd:bd:d1:f6:e2:78:89:39:28:35:80:a7:bf:32:9d:
c5:b8:4c:78:9f:f3:00:65:31:42:5f:b0:42:f4:bf:b1:bf:14:
92:78:9b:c2:6c:f2:fc:b0:4b:1f:77:5e:9b:89:5b:00:7a:a3:
e6:bf:00:f6:24:44:e2:64:be:95:05:33:ca:9f:6e:4f:f1:46:
10:62:10:4c:ae:cd:88:2a:bc:4c:57:9b:8a:12:cb:4e:42:8d:
0b:d9:89:9b:95:e1:20:01:0e:ef:3f:c0:ab:5a:a2:e1:b3:20:
b4:ea:14:68:f1:19:5c:d3:c8:7a:ae:2d:b3:81:9f:e8:7d:d8:
db:a7:c9:b3:9a:97:c6:c9:83:17:99:a0:26:49:0a:f2:13:92:
10:89:7a:0e:38:07:a1:97:a0:09:ef:9f:d3:16:17:ac:d5:35:
f3:fd:ce:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKz4do6vnvvbLrYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
NTQ4ZDU1ZDYtYjcyYS00YmM0LWI1NWQtMzdlZTU3MjIyODMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNTAddievoNCmxcxgS4xFb22jca0rI3Oh7n5
U+FafAA6zy6uqxEBGSUyn6mDbeFWoL/tMcwPLQ9yJPaqdeKaJSZv6E87ohwyLxzj
rDnmGSZWl1XTc+qzyOW3y/L6ukFyLU1SprdaxydYECOeWAXT9a52+Bkrpc0Lmsoo
z4+mPM8lIApE4ocgH+OwUFHuocWnja3LBY5/SBKvnDkvOx3Bd0HELHds8d+QqX8E
morcHIHBv3TD2NapAqf1FtNPwjEnCe8Dl4rv+GmSgYDGpAZDj8Mc8eWcclNUsl6L
K2T94FZ9M2xEKxpRRaEebmToLbF86lAeCVZG1JOmQY5iCSptsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIuMzqv7dV0DAGY8+Yb8eR65kJgMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWM2N2E5NTYtZjVlNy0z
MmNkLWIzZWItNGEyYTNmZjljN2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/uWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJDe/gbsE5ZxIYSUBHnKz9YcAq2CUS+ByCs4gdzk9J9HhSjRdbPaEkHS
SkmmMCg9brDIRPziTXuQAJJyRbRaq957efBIo/PKn1iYzS5pBcmeqd8BK3mMxUbh
rNI+8r290fbieIk5KDWAp78yncW4THif8wBlMUJfsEL0v7G/FJJ4m8Js8vywSx93
XpuJWwB6o+a/APYkROJkvpUFM8qfbk/xRhBiEEyuzYgqvExXm4oSy05CjQvZiZuV
4SABDu8/wKtaouGzILTqFGjxGVzTyHquLbOBn+h92NunybOal8bJgxeZoCZJCvIT
khCJeg44B6GXoAnvn9MWF6zVNfP9zh8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:16 2025 by rpki-client