Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3f3593ee-3773-397b-a47c-3d02f42f64d4.roa
File: 3f3593ee-3773-397b-a47c-3d02f42f64d4.roa (raw, json)
Hash identifier: bqAih7YO6caKTzFtYDlMpOs53DlO5mvICF6xpeqLIME=
Subject key identifier: 7F:C7:A0:36:E6:87:D3:1F:57:22:DE:00:6A:D2:74:13:68:35:AB:6E
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F4328584863CB0717BDB461DE8495FF00
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3f3593ee-3773-397b-a47c-3d02f42f64d4.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 1239
IP address blocks: 141.193.96.0/23 maxlen: 23
158.115.228.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:07:17:bd:b4:61:de:84:95:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=5936e7a6-2791-482b-b963-f9f7f3f6c94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:72:80:24:7c:cf:48:89:35:5a:84:83:75:69:
5c:30:0b:28:c6:7f:81:3c:71:56:a6:ad:58:90:da:
e6:7d:a5:e7:1a:f9:1f:7e:fe:51:aa:d5:ad:73:a4:
46:7e:47:06:ec:da:e5:ac:81:e6:09:d6:b4:3f:f0:
14:ac:c0:b0:60:58:89:dd:1a:66:94:d1:34:a5:1a:
f5:c9:bd:15:9a:70:29:1f:f7:67:37:05:34:ff:28:
22:79:69:12:b6:62:91:d4:43:af:e3:9c:66:20:9d:
1b:29:9d:58:1b:b1:65:d0:b4:e2:96:b8:b3:61:1b:
01:00:94:9f:04:96:f0:86:9e:73:94:80:4a:bc:f5:
94:af:2d:53:a4:54:c3:3a:3a:c0:c7:18:d2:18:06:
21:5d:9e:16:9e:c7:1b:57:e0:c1:20:08:ec:c5:4c:
d5:1b:a5:50:32:60:71:d5:fc:08:67:8a:6d:93:64:
a3:42:72:19:c6:09:fb:24:e9:09:8d:d2:74:8b:79:
7d:d0:94:fc:e6:9a:5d:07:1d:e2:50:a6:97:59:bc:
c2:d5:fc:7c:a2:95:18:ec:97:3d:02:b4:f0:ba:38:
c9:73:b0:de:cd:7c:71:d3:3e:0e:59:5a:53:3e:f8:
7e:ae:4a:ba:4f:93:c6:63:2f:7c:e2:23:2a:2c:d1:
fb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C7:A0:36:E6:87:D3:1F:57:22:DE:00:6A:D2:74:13:68:35:AB:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3f3593ee-3773-397b-a47c-3d02f42f64d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
141.193.96.0/23
158.115.228.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:05:61:65:84:fa:e2:07:fd:20:a9:9c:8a:6e:27:38:00:b7:
87:8a:d5:35:77:5d:f0:38:65:b3:d9:a2:c3:91:08:10:50:af:
1d:87:f6:2a:e8:90:e3:a0:a7:74:be:26:e8:e7:e0:e7:c0:09:
e0:12:e5:0d:9c:8b:76:8b:60:75:30:71:d0:ba:7d:4e:3a:6d:
28:cf:2e:d9:31:3a:ff:ce:7a:39:19:c2:f4:53:6f:74:70:0f:
19:93:2c:3c:2c:79:18:60:ce:e5:a8:52:52:9b:d7:d6:22:34:
35:9b:44:d1:07:2e:59:93:b4:e8:38:3f:58:e1:fe:4f:93:cb:
a2:53:ae:d2:26:91:c4:81:63:3a:c7:72:18:af:e3:d3:61:76:
18:91:a2:8f:ac:74:3f:c2:68:ac:9a:8f:90:b8:6a:c0:c9:17:
09:64:2e:73:0d:37:71:d5:c6:4e:4b:f0:7a:2c:33:ce:20:b9:
07:2a:a5:24:48:fd:39:a8:5b:dd:f2:ef:fb:17:ab:c0:6a:a4:
50:9b:2f:c5:ab:6e:a6:c3:71:89:8d:d5:4b:b7:31:d0:cc:ed:
f0:fe:5f:47:11:2e:45:98:c2:d8:0d:c1:ba:e2:09:48:15:58:
ef:4f:b3:82:9d:7c:ee:f5:3f:c5:31:cc:1b:56:68:df:48:96:
13:ae:cf:cb
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEhjywcXvbRh3oSV/wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTI0MTIzMTE0MDA1M1oXDTI1MDMzMTEzMDA1M1owLzEtMCsGA1UEAxMk
NTkzNmU3YTYtMjc5MS00ODJiLWI5NjMtZjlmN2YzZjZjOTRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHKAJHzPSIk1WoSDdWlcMAsoxn+BPHFWpq1Y
kNrmfaXnGvkffv5RqtWtc6RGfkcG7NrlrIHmCda0P/AUrMCwYFiJ3RpmlNE0pRr1
yb0VmnApH/dnNwU0/ygieWkStmKR1EOv45xmIJ0bKZ1YG7Fl0LTilrizYRsBAJSf
BJbwhp5zlIBKvPWUry1TpFTDOjrAxxjSGAYhXZ4WnscbV+DBIAjsxUzVG6VQMmBx
1fwIZ4ptk2SjQnIZxgn7JOkJjdJ0i3l90JT85ppdBx3iUKaXWbzC1fx8opUY7Jc9
ArTwujjJc7DezXxx0z4OWVpTPvh+rkq6T5PGYy984iMqLNH7owIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFH/HoDbmh9MfVyLeAGrSdBNoNatuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvM2YzNTkzZWUtMzc3My0z
OTdiLWE0N2MtM2QwMmY0MmY2NGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBjcFgAwQB
nnPkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAAcFYWWE+uIH/SCpnIpuJzgAt4eK1TV3XfA4ZbPZosORCBBQ
rx2H9irokOOgp3S+Jujn4OfACeAS5Q2ci3aLYHUwcdC6fU46bSjPLtkxOv/OejkZ
wvRTb3RwDxmTLDwseRhgzuWoUlKb19YiNDWbRNEHLlmTtOg4P1jh/k+Ty6JTrtIm
kcSBYzrHchiv49NhdhiRoo+sdD/CaKyaj5C4asDJFwlkLnMNN3HVxk5L8HosM84g
uQcqpSRI/TmoW93y7/sXq8BqpFCbL8WrbqbDcYmN1Uu3MdDM7fD+X0cRLkWYwtgN
wbriCUgVWO9Ps4KdfO71P8UxzBtWaN9IlhOuz8s=
-----END CERTIFICATE-----
Generated at Sun May 4 04:42:39 2025 by rpki-client