Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/67b1901b-2ac7-3d4f-b910-9b7f3ee12d21.roa
File: 67b1901b-2ac7-3d4f-b910-9b7f3ee12d21.roa (raw, json)
Hash identifier: R8BJMKgzWaeeB+3YKCGKEgWNKop/LNb1pPerAOLyaWo=
Subject key identifier: F8:B2:62:85:6D:A1:37:6C:B6:8B:B5:6D:83:35:1A:02:FC:56:91:10
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E62A9C92E93E2CFC438E7180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/67b1901b-2ac7-3d4f-b910-9b7f3ee12d21.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 396982
IP address blocks: 23.251.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:9c:92:e9:3e:2c:fc:43:8e:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=aa6eb2e9-4d32-4f4b-9a95-ea1f22148670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:20:54:9d:85:21:1a:46:2d:bd:1f:f3:f8:c2:
d2:68:3f:f6:ac:1f:a9:90:b6:05:07:56:f6:5a:5d:
0e:41:3b:f1:fd:c5:0f:55:93:f4:93:d4:a0:01:76:
8a:c9:1a:f1:1e:89:21:02:e9:91:c0:26:8d:4f:3b:
80:2f:67:4e:7e:20:ee:b2:fd:ca:7a:e6:b8:a7:63:
95:50:94:c9:a8:38:81:77:b4:01:2c:c6:7d:9c:d2:
4e:3a:9c:b1:62:92:ea:04:7e:08:b1:f7:f9:67:fd:
92:f4:40:a0:c3:78:66:13:86:85:33:2d:9e:bf:74:
b9:d1:a8:04:99:56:cb:af:e3:32:e3:7d:93:f6:b0:
55:7a:2b:13:f9:3d:79:37:30:5e:77:71:9e:86:b4:
33:f7:2c:d2:ae:d6:e3:38:e4:38:8b:8a:3b:1d:83:
a2:20:16:91:18:e6:8d:d5:62:1e:1d:4e:15:98:e5:
4c:cb:59:e7:38:83:b6:ab:08:20:b3:00:16:3f:ae:
7e:80:64:a3:fd:ff:c5:bb:26:28:f5:f7:e2:54:83:
5c:46:b4:48:f4:cf:0e:01:fa:ac:1a:6c:6d:b3:00:
26:bc:28:22:d4:f5:bb:b8:9f:e0:5a:98:64:06:90:
16:99:65:a3:88:61:57:3f:39:08:44:4b:4a:91:ad:
d5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B2:62:85:6D:A1:37:6C:B6:8B:B5:6D:83:35:1A:02:FC:56:91:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/67b1901b-2ac7-3d4f-b910-9b7f3ee12d21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.251.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:64:e2:ce:c5:11:c2:c4:b7:ec:0f:38:b1:a4:c0:0c:3a:f9:
05:da:45:cb:23:b9:f2:25:86:5d:05:65:a6:0a:5a:ea:d6:2f:
00:d0:b3:ea:5f:dc:19:01:d6:9a:bd:78:f2:42:ca:ee:bf:35:
e3:1d:b8:26:70:cd:d4:e3:76:95:00:dc:6e:82:84:83:3d:e0:
96:3c:a4:32:69:71:96:e3:a7:87:0d:37:e3:e0:59:d7:b4:6f:
65:6d:b6:98:66:a4:f9:9e:f3:af:63:2e:94:31:d3:28:79:6f:
0d:1e:2e:9a:e3:de:3f:a6:b3:65:68:b9:a5:0e:62:a7:b4:cd:
cb:e2:38:98:7e:02:93:ac:43:8c:ba:26:f6:5a:d7:f5:da:fa:
0d:68:d2:7d:6b:db:8e:cc:00:2f:0e:0b:2a:8d:b5:f2:82:77:
83:d5:e6:53:3b:50:c6:30:52:cf:95:34:e4:4a:c6:c5:0e:a4:
32:fa:89:e1:59:ef:2c:20:ab:3e:9f:c8:ab:2a:53:58:41:91:
6f:d9:5c:e6:ae:fb:0f:5d:17:55:9e:9d:01:ef:f7:e0:82:89:
75:54:20:be:2c:99:df:3c:cc:1a:ab:81:ff:aa:da:86:20:8f:
28:2e:aa:49:fc:fc:f3:4b:be:54:0c:b6:21:3e:b3:ea:69:48:
1c:b3:b9:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKpyS6T4s/EOOcYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
YWE2ZWIyZTktNGQzMi00ZjRiLTlhOTUtZWExZjIyMTQ4NjcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviBUnYUhGkYtvR/z+MLSaD/2rB+pkLYFB1b2
Wl0OQTvx/cUPVZP0k9SgAXaKyRrxHokhAumRwCaNTzuAL2dOfiDusv3Keua4p2OV
UJTJqDiBd7QBLMZ9nNJOOpyxYpLqBH4Isff5Z/2S9ECgw3hmE4aFMy2ev3S50agE
mVbLr+My432T9rBVeisT+T15NzBed3GehrQz9yzSrtbjOOQ4i4o7HYOiIBaRGOaN
1WIeHU4VmOVMy1nnOIO2qwggswAWP65+gGSj/f/FuyYo9ffiVINcRrRI9M8OAfqs
GmxtswAmvCgi1PW7uJ/gWphkBpAWmWWjiGFXPzkIREtKka3VswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPiyYoVtoTdstou1bYM1GgL8VpEQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjdiMTkwMWItMmFjNy0z
ZDRmLWI5MTAtOWI3ZjNlZTEyZDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/uRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHxk4s7FEcLEt+wPOLGkwAw6+QXaRcsjufIlhl0FZaYKWurWLwDQs+pf
3BkB1pq9ePJCyu6/NeMduCZwzdTjdpUA3G6ChIM94JY8pDJpcZbjp4cNN+PgWde0
b2VttphmpPme869jLpQx0yh5bw0eLprj3j+ms2VouaUOYqe0zcviOJh+ApOsQ4y6
JvZa1/Xa+g1o0n1r247MAC8OCyqNtfKCd4PV5lM7UMYwUs+VNORKxsUOpDL6ieFZ
7ywgqz6fyKsqU1hBkW/ZXOau+w9dF1WenQHv9+CCiXVUIL4smd88zBqrgf+q2oYg
jyguqkn8/PNLvlQMtiE+s+ppSByzuWw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:22:11 2025 by rpki-client