Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/74fa8d9f-77f3-3dc5-be77-70d9b41f878a.roa
File: 74fa8d9f-77f3-3dc5-be77-70d9b41f878a.roa (raw, json)
Hash identifier: IvWuvayjd6drh56J1GVI0MEafXN27Q0lQlMyH2XS34w=
Subject key identifier: 73:3C:20:8E:28:C5:43:5C:B7:E3:96:FA:9A:F6:F4:B1:F5:41:D3:4F
Certificate issuer: /CN=9ababe4f-43a3-4db9-8e35-b85a7e592168
Certificate serial: 010D0C9F43285848143A81CF965505F6C97DB280
Authority key identifier: 23:5E:2D:51:36:B3:25:5E:9F:20:37:D6:36:11:40:2A:4A:0F:E4:A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/74fa8d9f-77f3-3dc5-be77-70d9b41f878a.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 19905
IP address blocks: 23.134.176.0/24 maxlen: 24
45.41.208.0/23 maxlen: 23
66.248.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:81:cf:96:55:05:f6:c9:7d:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ababe4f-43a3-4db9-8e35-b85a7e592168
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=7d4ff4b9-7b51-4263-8c26-3dd7e77d983a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:1b:33:aa:63:2b:7b:26:ea:b0:94:c8:28:7f:
5d:c2:34:a7:35:fd:c7:f2:1c:a7:46:e9:b4:f3:40:
be:50:32:b6:49:3b:aa:66:ba:0d:48:69:5f:b7:c0:
eb:77:11:81:d9:22:55:49:76:a0:37:2d:5d:8d:ad:
c2:da:80:7b:f7:29:3e:c2:82:09:4e:9f:c8:89:46:
30:83:2d:d5:ce:ff:7b:93:79:dc:08:90:59:53:64:
37:b4:f1:31:e8:54:8c:c0:02:b3:0f:d7:3a:61:6f:
3d:9a:ac:a2:cc:d1:c4:47:f3:43:1a:ab:4e:03:75:
e1:04:99:d5:22:2d:fa:3a:9b:dc:d0:87:11:9a:20:
42:61:6e:11:4f:7b:a2:51:c3:59:3a:f7:72:18:5f:
fb:81:5a:3a:20:2b:e9:38:9d:c1:2f:31:52:4d:85:
3f:f0:ae:3c:4b:69:d8:e1:bd:66:11:9e:67:42:cc:
5a:f5:3b:fb:7b:4c:cd:9d:c0:02:b4:e6:61:cd:6a:
50:79:97:4e:2e:6b:c0:9a:44:6b:df:c2:6a:13:c0:
7e:02:1a:fd:c4:84:73:36:50:ab:f0:1c:78:ca:80:
a6:de:d8:a3:fd:37:10:72:e6:69:ca:08:dc:83:82:
ec:83:93:d5:8b:5e:1a:54:8c:ec:61:04:bb:fb:a6:
d4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3C:20:8E:28:C5:43:5C:B7:E3:96:FA:9A:F6:F4:B1:F5:41:D3:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/74fa8d9f-77f3-3dc5-be77-70d9b41f878a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/9ababe4f-43a3-4db9-8e35-b85a7e592168.crl
X509v3 Authority Key Identifier:
keyid:23:5E:2D:51:36:B3:25:5E:9F:20:37:D6:36:11:40:2A:4A:0F:E4:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168.cer
sbgp-ipAddrBlock: critical
IPv4:
23.134.176.0/24
45.41.208.0/23
66.248.247.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:52:dd:19:b5:b4:fd:35:f0:1f:e4:6e:43:c7:bb:d0:97:81:
71:89:d9:d1:a7:4f:d8:90:97:74:4c:bf:d1:31:99:41:4e:08:
d7:46:d8:d2:a2:fa:97:d2:6d:8b:56:e7:0f:16:51:7a:01:ce:
fc:bb:05:fa:18:18:58:81:58:fb:92:e1:55:f0:0b:31:dc:fe:
ca:82:4d:0e:06:bb:ab:4a:b2:d4:33:b5:25:a9:6a:07:83:0a:
96:91:63:d4:79:2a:ad:7e:ec:8d:37:a2:22:c2:5e:35:48:24:
e8:51:68:5d:b9:11:2c:cc:67:64:18:ef:91:67:cd:9d:ff:36:
98:f7:92:e0:33:1f:07:4f:07:62:9a:de:4f:f0:16:43:30:b1:
59:4d:26:bc:b2:fd:a3:c3:01:a2:de:6d:71:79:2a:f0:75:ea:
9a:33:17:8a:db:75:31:c1:1c:0d:73:aa:b9:ee:55:25:6d:ed:
7c:7c:62:8f:69:54:fe:d7:af:22:45:6e:93:42:25:e2:2b:14:
8b:75:fb:bf:9d:6d:71:44:b5:16:46:f6:e2:76:26:b6:b2:5c:
5b:46:06:02:a6:ff:08:96:31:31:58:50:6b:35:bc:12:88:34:
f5:cc:6f:61:a5:2a:00:d9:10:84:c0:b6:82:68:8c:92:0e:aa:
db:b7:ef:05
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEgUOoHPllUF9sl9soAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWFiYWJlNGYtNDNhMy00ZGI5LThlMzUtYjg1YTdlNTky
MTY4MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
N2Q0ZmY0YjktN2I1MS00MjYzLThjMjYtM2RkN2U3N2Q5ODNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9xszqmMreybqsJTIKH9dwjSnNf3H8hynRum0
80C+UDK2STuqZroNSGlft8DrdxGB2SJVSXagNy1dja3C2oB79yk+woIJTp/IiUYw
gy3Vzv97k3ncCJBZU2Q3tPEx6FSMwAKzD9c6YW89mqyizNHER/NDGqtOA3XhBJnV
Ii36Opvc0IcRmiBCYW4RT3uiUcNZOvdyGF/7gVo6ICvpOJ3BLzFSTYU/8K48S2nY
4b1mEZ5nQsxa9Tv7e0zNncACtOZhzWpQeZdOLmvAmkRr38JqE8B+Ahr9xIRzNlCr
8Bx4yoCm3tij/TcQcuZpygjcg4Lsg5PVi14aVIzsYQS7+6bUGQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFHM8II4oxUNct+OW+pr29LH1QdNPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YWJh
YmU0Zi00M2EzLTRkYjktOGUzNS1iODVhN2U1OTIxNjgvNzRmYThkOWYtNzdmMy0z
ZGM1LWJlNzctNzBkOWI0MWY4NzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWFiYWJlNGYtNDNhMy00ZGI5LThl
MzUtYjg1YTdlNTkyMTY4LzlhYmFiZTRmLTQzYTMtNGRiOS04ZTM1LWI4NWE3ZTU5
MjE2OC5jcmwwHwYDVR0jBBgwFoAUI14tUTazJV6fIDfWNhFAKkoP5KEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85YWJhYmU0Zi00M2EzLTRkYjktOGUzNS1iODVh
N2U1OTIxNjguY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAF4awAwQB
LSnQAwQAQvj3MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAHdS3Rm1tP018B/kbkPHu9CXgXGJ2dGnT9iQl3RM
v9ExmUFOCNdG2NKi+pfSbYtW5w8WUXoBzvy7BfoYGFiBWPuS4VXwCzHc/sqCTQ4G
u6tKstQztSWpageDCpaRY9R5Kq1+7I03oiLCXjVIJOhRaF25ESzMZ2QY75FnzZ3/
Npj3kuAzHwdPB2Ka3k/wFkMwsVlNJryy/aPDAaLebXF5KvB16pozF4rbdTHBHA1z
qrnuVSVt7Xx8Yo9pVP7XryJFbpNCJeIrFIt1+7+dbXFEtRZG9uJ2JrayXFtGBgKm
/wiWMTFYUGs1vBKINPXMb2GlKgDZEITAtoJojJIOqtu37wU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:28:47 2025 by rpki-client