Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/0be9c008-0b81-3981-bdaa-c2c0d0ec1e7a.roa
File: 0be9c008-0b81-3981-bdaa-c2c0d0ec1e7a.roa (raw, json)
Hash identifier: YLJJMOsHP7Bl9pDqxWH8aLXEHmgUsr1+dq7fEymc0PY=
Subject key identifier: A2:EE:28:C3:9D:13:2E:AC:05:9B:7A:8B:AF:B4:F3:19:B3:6B:1A:33
Certificate issuer: /CN=20defc99-73f1-4ccf-93ff-ac08b7301a18
Certificate serial: 010D0C9F432858482A8FDF74E1F3515C3AE1B280
Authority key identifier: 19:52:F4:3C:BD:DA:D0:41:D8:6F:9A:EA:9A:E8:5C:4C:55:4D:78:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/0be9c008-0b81-3981-bdaa-c2c0d0ec1e7a.roa
Signing time: Wed 11 Dec 2024 02:00:38 +0000
ROA not before: Wed 11 Dec 2024 02:00:38 +0000
ROA not after: Tue 11 Mar 2025 01:00:38 +0000
asID: 29757
IP address blocks: 23.168.193.0/24 maxlen: 24
104.153.44.0/24 maxlen: 24
104.153.45.0/24 maxlen: 24
104.153.46.0/24 maxlen: 24
104.153.47.0/24 maxlen: 24
162.217.144.0/24 maxlen: 24
162.217.145.0/24 maxlen: 24
162.217.146.0/24 maxlen: 24
162.217.147.0/24 maxlen: 24
192.231.255.0/24 maxlen: 24
199.231.92.0/24 maxlen: 24
199.231.93.0/24 maxlen: 24
199.231.94.0/24 maxlen: 24
199.231.95.0/24 maxlen: 24
208.72.20.0/22 maxlen: 22
208.93.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8f:df:74:e1:f3:51:5c:3a:e1:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20defc99-73f1-4ccf-93ff-ac08b7301a18
Validity
Not Before: Dec 11 02:00:38 2024 GMT
Not After : Mar 11 01:00:38 2025 GMT
Subject: CN=5e88bc8c-9076-4d08-9915-2d3b30f1b50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:86:a7:bd:b6:2e:c9:86:67:dd:ea:79:ad:c6:
e6:79:86:79:b2:8c:22:ef:93:19:19:27:37:b6:23:
db:41:f3:d4:d9:33:cc:3e:77:11:da:bf:c8:79:7a:
0f:75:e1:17:03:69:d4:73:8d:b9:fb:7d:af:3d:55:
53:dd:bb:11:66:10:7a:2b:fb:88:cd:01:0b:59:85:
9e:52:3c:82:6e:6a:14:56:29:db:88:01:b8:71:17:
c0:52:12:1d:fa:73:81:2c:9e:9d:2c:6c:f6:d0:81:
90:88:cd:af:d3:5e:d6:f8:e5:0f:3b:52:ec:77:8f:
89:e1:06:10:97:8c:16:c4:79:5b:b5:c5:96:84:2e:
75:06:b4:87:fb:1c:56:63:20:42:c0:1c:bf:aa:0b:
a4:80:a2:d7:fd:61:e1:3e:bc:eb:e0:84:dd:5b:c5:
e4:88:24:a2:9f:27:e7:44:e2:2b:4a:51:b1:8f:50:
74:f5:46:a0:50:78:c1:5d:47:6f:f8:a5:9a:7c:cc:
2e:ca:2d:40:a7:da:e2:2d:3f:a8:af:fa:dc:9b:dc:
a8:2d:db:5e:f3:30:e1:1e:4a:9c:b0:29:5f:1d:8e:
9c:42:07:d3:5d:d2:30:55:0f:cd:cb:2f:8f:26:30:
4a:20:21:54:30:0e:9b:44:1d:f4:4d:d0:51:c7:17:
71:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EE:28:C3:9D:13:2E:AC:05:9B:7A:8B:AF:B4:F3:19:B3:6B:1A:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/0be9c008-0b81-3981-bdaa-c2c0d0ec1e7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/20defc99-73f1-4ccf-93ff-ac08b7301a18.crl
X509v3 Authority Key Identifier:
keyid:19:52:F4:3C:BD:DA:D0:41:D8:6F:9A:EA:9A:E8:5C:4C:55:4D:78:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18.cer
sbgp-ipAddrBlock: critical
IPv4:
23.168.193.0/24
104.153.44.0/22
162.217.144.0/22
192.231.255.0/24
199.231.92.0/22
208.72.20.0/22
208.93.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:94:88:d4:e1:5a:ac:72:eb:54:96:df:8b:cf:cb:b3:cd:5a:
3b:5b:95:e1:bc:ff:c8:7c:47:59:de:78:7b:aa:00:50:c7:33:
2d:03:d7:c5:3e:23:aa:00:bf:43:fb:9f:38:11:b9:0a:6e:5b:
15:ba:70:7d:6e:5b:9b:f4:c9:48:0d:c9:dc:60:46:f1:75:3b:
38:22:0b:c7:f1:c0:d4:24:86:45:2f:49:f4:ce:81:ba:4d:36:
e9:0b:57:32:fa:95:3a:34:23:d6:1e:62:68:ec:14:94:f2:86:
2f:73:7a:f6:59:f5:74:95:95:85:d0:8a:a5:b5:86:77:7e:aa:
1a:61:bf:ff:65:42:5c:82:63:7e:49:6e:b8:9a:f1:3f:29:8a:
3d:ab:f5:a6:a6:a6:80:ca:25:3d:8b:f1:74:e4:c9:ed:0a:45:
d9:57:e3:46:32:20:bc:82:aa:23:d6:55:3b:6e:b1:4b:e6:2e:
2f:85:99:88:3e:c0:f1:db:f2:47:86:36:5a:e3:c2:fd:f5:21:
52:d4:3e:99:4d:76:0c:68:79:23:8d:e0:e3:f4:65:fe:f3:28:
fd:1e:ae:d9:91:51:e4:2a:8f:6a:0f:b4:68:bc:eb:c8:73:e4:
03:85:fc:5c:ef:16:33:f2:83:60:3a:d6:d4:4f:09:4d:60:94:
50:7f:6a:f0
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWEgqj9904fNRXDrhsoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjBkZWZjOTktNzNmMS00Y2NmLTkzZmYtYWMwOGI3MzAx
YTE4MB4XDTI0MTIxMTAyMDAzOFoXDTI1MDMxMTAxMDAzOFowLzEtMCsGA1UEAxMk
NWU4OGJjOGMtOTA3Ni00ZDA4LTk5MTUtMmQzYjMwZjFiNTBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYanvbYuyYZn3ep5rcbmeYZ5sowi75MZGSc3
tiPbQfPU2TPMPncR2r/IeXoPdeEXA2nUc425+32vPVVT3bsRZhB6K/uIzQELWYWe
UjyCbmoUVinbiAG4cRfAUhId+nOBLJ6dLGz20IGQiM2v017W+OUPO1Lsd4+J4QYQ
l4wWxHlbtcWWhC51BrSH+xxWYyBCwBy/qgukgKLX/WHhPrzr4ITdW8XkiCSinyfn
ROIrSlGxj1B09UagUHjBXUdv+KWafMwuyi1Ap9riLT+or/rcm9yoLdte8zDhHkqc
sClfHY6cQgfTXdIwVQ/Nyy+PJjBKICFUMA6bRB30TdBRxxdxtwIDAQABo4IDeTCC
A3UwHQYDVR0OBBYEFKLuKMOdEy6sBZt6i6+08xmzaxozMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGRl
ZmM5OS03M2YxLTRjY2YtOTNmZi1hYzA4YjczMDFhMTgvMGJlOWMwMDgtMGI4MS0z
OTgxLWJkYWEtYzJjMGQwZWMxZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBkZWZjOTktNzNmMS00Y2NmLTkz
ZmYtYWMwOGI3MzAxYTE4LzIwZGVmYzk5LTczZjEtNGNjZi05M2ZmLWFjMDhiNzMw
MWExOC5jcmwwHwYDVR0jBBgwFoAUGVL0PL3a0EHYb5rqmuhcTFVNeGMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGRlZmM5OS03M2YxLTRjY2YtOTNmZi1hYzA4
YjczMDFhMTguY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAF6jBAwQC
aJksAwQCotmQAwQAwOf/AwQCx+dcAwQC0EgUAwQC0F3YMFQGA1UdIAEB/wRKMEgw
RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv
cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEOUiNTh
Wqxy61SW34vPy7PNWjtbleG8/8h8R1neeHuqAFDHMy0D18U+I6oAv0P7nzgRuQpu
WxW6cH1uW5v0yUgNydxgRvF1OzgiC8fxwNQkhkUvSfTOgbpNNukLVzL6lTo0I9Ye
YmjsFJTyhi9zevZZ9XSVlYXQiqW1hnd+qhphv/9lQlyCY35Jbria8T8pij2r9aam
poDKJT2L8XTkye0KRdlX40YyILyCqiPWVTtusUvmLi+FmYg+wPHb8keGNlrjwv31
IVLUPplNdgxoeSON4OP0Zf7zKP0ertmRUeQqj2oPtGi868hz5AOF/FzvFjPyg2A6
1tRPCU1glFB/avA=
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:26:11 2025 by rpki-client