Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/394d8786-185c-3bfb-9e5a-2a4a57146ab1.roa
File: 394d8786-185c-3bfb-9e5a-2a4a57146ab1.roa (raw, json)
Hash identifier: 5MrArarZGdsCjlF9GBAh4kLR3zvjDWq6rQZy98PxTjw=
Subject key identifier: CA:4C:AB:CF:B8:E0:7E:61:DC:10:83:00:49:13:F9:93:9B:20:61:02
Certificate issuer: /CN=4009d93a-d9e7-4eb7-94cd-ffec0618c3ec
Certificate serial: 010D0C9F4328584823954A3177749DACBE032080
Authority key identifier: D9:29:B8:E6:CC:D4:23:43:46:47:89:33:97:4A:24:76:99:8C:AB:72
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/394d8786-185c-3bfb-9e5a-2a4a57146ab1.roa
Signing time: Sun 08 Dec 2024 14:00:51 +0000
ROA not before: Sun 08 Dec 2024 14:00:51 +0000
ROA not after: Sat 08 Mar 2025 14:00:51 +0000
asID: 63072
IP address blocks: 23.135.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:95:4a:31:77:74:9d:ac:be:03:20:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4009d93a-d9e7-4eb7-94cd-ffec0618c3ec
Validity
Not Before: Dec 8 14:00:51 2024 GMT
Not After : Mar 8 14:00:51 2025 GMT
Subject: CN=c704f695-9f66-4651-8c08-f9e9977fb0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:62:74:20:55:e8:03:39:99:01:a1:9f:ab:1c:
59:1a:71:af:a0:17:43:f3:e0:7e:55:96:d0:36:8b:
17:a0:f6:81:d2:60:93:00:06:2f:c6:58:00:b7:bb:
79:6a:9f:3a:e2:6a:83:ec:37:d1:03:ad:56:df:87:
e5:53:f1:a6:67:ea:15:d6:68:7d:82:9e:8e:24:84:
c8:86:45:9a:dc:b5:51:eb:4a:f5:0d:d3:d3:8f:41:
bf:ee:3c:9e:cb:21:d3:e8:93:16:cd:46:10:f1:59:
f9:96:8b:c5:b1:d8:b3:b0:7a:8e:84:69:9e:dc:82:
d0:55:8d:d4:84:ba:bf:50:ff:d7:b1:f3:93:15:f3:
00:76:ec:26:47:7b:f9:19:52:a7:b9:16:92:1c:a9:
65:2e:1b:a2:8a:c8:4f:3e:57:3a:59:12:7a:60:49:
1a:00:de:7e:65:e2:b0:6a:94:ef:3c:33:c5:83:bd:
92:4f:14:17:07:8f:6e:a1:3a:44:61:32:de:94:3d:
cd:3d:98:d9:e3:4d:df:a3:f9:c6:b8:22:4e:18:57:
e6:0e:24:77:21:4b:d0:02:e5:30:b0:1a:d1:10:65:
56:de:93:d2:0b:81:19:47:e0:e0:d6:0c:65:22:23:
07:27:4a:77:3b:0e:fe:26:5e:31:65:87:88:64:24:
00:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4C:AB:CF:B8:E0:7E:61:DC:10:83:00:49:13:F9:93:9B:20:61:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/394d8786-185c-3bfb-9e5a-2a4a57146ab1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.crl
X509v3 Authority Key Identifier:
keyid:D9:29:B8:E6:CC:D4:23:43:46:47:89:33:97:4A:24:76:99:8C:AB:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer
sbgp-ipAddrBlock: critical
IPv4:
23.135.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:94:26:03:09:15:24:8f:20:93:f6:e4:fb:70:ba:5a:d2:f4:
ab:03:ce:48:ba:02:1c:11:90:b8:ea:c0:4a:3c:96:1f:2c:61:
fa:3b:3c:07:36:f8:8f:6c:ca:af:dd:97:9d:fe:cf:d2:d6:e7:
e1:3a:e5:c8:f7:23:9a:23:71:24:d5:b4:5e:e7:b8:0e:7e:cc:
a7:57:9b:1f:d7:7b:04:91:1c:ff:3d:3b:00:a9:5f:fd:00:4f:
85:3d:5c:d5:4f:d8:60:17:2e:4e:0c:02:d4:cd:34:c4:c1:51:
c8:eb:fe:ac:aa:40:ae:10:fe:92:8e:ac:15:08:c7:b5:3c:bd:
a9:f9:e6:b4:bc:91:bb:f0:c5:5c:98:c1:40:18:48:3f:c8:76:
df:b1:e0:95:99:16:7d:a9:ca:00:7a:61:49:0a:9e:4e:80:a4:
38:c2:68:90:8d:b7:f7:68:07:97:78:48:5e:af:c8:7c:2d:24:
85:f4:58:f8:d8:e8:4d:4e:2e:3e:d0:f6:d0:7d:f9:11:73:f4:
1d:62:44:47:66:a5:50:53:61:e6:5e:c3:bc:6a:6f:ae:b9:e7:
3c:0c:b1:67:91:d6:99:74:02:9e:1a:4e:08:22:54:9e:7a:6e:
23:82:5c:29:16:e8:74:eb:0a:0f:fc:c2:2c:a3:a1:b2:7c:5a:
88:6e:1d:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgjlUoxd3SdrL4DIIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDAwOWQ5M2EtZDllNy00ZWI3LTk0Y2QtZmZlYzA2MThj
M2VjMB4XDTI0MTIwODE0MDA1MVoXDTI1MDMwODE0MDA1MVowLzEtMCsGA1UEAxMk
YzcwNGY2OTUtOWY2Ni00NjUxLThjMDgtZjllOTk3N2ZiMGVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmJ0IFXoAzmZAaGfqxxZGnGvoBdD8+B+VZbQ
NosXoPaB0mCTAAYvxlgAt7t5ap864mqD7DfRA61W34flU/GmZ+oV1mh9gp6OJITI
hkWa3LVR60r1DdPTj0G/7jyeyyHT6JMWzUYQ8Vn5lovFsdizsHqOhGme3ILQVY3U
hLq/UP/XsfOTFfMAduwmR3v5GVKnuRaSHKllLhuiishPPlc6WRJ6YEkaAN5+ZeKw
apTvPDPFg72STxQXB49uoTpEYTLelD3NPZjZ403fo/nGuCJOGFfmDiR3IUvQAuUw
sBrREGVW3pPSC4EZR+Dg1gxlIiMHJ0p3Ow7+Jl4xZYeIZCQApQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMpMq8+44H5h3BCDAEkT+ZObIGECMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MDA5
ZDkzYS1kOWU3LTRlYjctOTRjZC1mZmVjMDYxOGMzZWMvMzk0ZDg3ODYtMTg1Yy0z
YmZiLTllNWEtMmE0YTU3MTQ2YWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDAwOWQ5M2EtZDllNy00ZWI3LTk0
Y2QtZmZlYzA2MThjM2VjLzQwMDlkOTNhLWQ5ZTctNGViNy05NGNkLWZmZWMwNjE4
YzNlYy5jcmwwHwYDVR0jBBgwFoAU2Sm45szUI0NGR4kzl0okdpmMq3IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80MDA5ZDkzYS1kOWU3LTRlYjctOTRjZC1mZmVj
MDYxOGMzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4ewMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAISUJgMJFSSPIJP25PtwulrS9KsDzki6AhwRkLjqwEo8lh8sYfo7PAc2
+I9syq/dl53+z9LW5+E65cj3I5ojcSTVtF7nuA5+zKdXmx/XewSRHP89OwCpX/0A
T4U9XNVP2GAXLk4MAtTNNMTBUcjr/qyqQK4Q/pKOrBUIx7U8van55rS8kbvwxVyY
wUAYSD/Idt+x4JWZFn2pygB6YUkKnk6ApDjCaJCNt/doB5d4SF6vyHwtJIX0WPjY
6E1OLj7Q9tB9+RFz9B1iREdmpVBTYeZew7xqb6655zwMsWeR1pl0Ap4aTggiVJ56
biOCXCkW6HTrCg/8wiyjobJ8WohuHRU=
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:28:00 2025 by rpki-client