Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/e5cfc55d-0fc5-3a20-aed5-2cbe2dc63b51.roa
File: e5cfc55d-0fc5-3a20-aed5-2cbe2dc63b51.roa (raw, json)
Hash identifier: JC8c1nEh9YAxhONHzUIlk7t2acUxeoLAskB1RBQnIJY=
Subject key identifier: DC:C6:1A:E9:86:27:24:6C:CF:61:91:88:C1:2D:65:87:BA:30:90:A3
Certificate issuer: /CN=42c8c6f3-4a22-4b09-90b8-6f74ee90beb5
Certificate serial: 010D0C9F43285848854B543944D79C50C4ADE680
Authority key identifier: CB:58:6C:B4:1F:C7:2C:0C:FE:27:FB:97:2D:BF:0B:EB:05:46:FB:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/e5cfc55d-0fc5-3a20-aed5-2cbe2dc63b51.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 400458
IP address blocks: 23.148.104.0/24 maxlen: 24
2602:fbc0::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:54:39:44:d7:9c:50:c4:ad:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c8c6f3-4a22-4b09-90b8-6f74ee90beb5
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=e51e719d-14fc-4285-b305-4fa19fa6c73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a5:8c:97:f9:38:89:13:04:9c:c6:73:39:ab:
26:8e:03:96:4f:2c:9f:b1:4a:73:ad:54:c5:45:2c:
53:a8:84:5c:eb:9d:2e:34:3c:2f:28:f5:76:0c:0b:
07:f1:8c:0c:41:67:f4:cc:22:64:fa:ca:78:d3:0c:
49:8a:72:c5:07:5f:3d:83:a3:92:8f:89:2e:ca:0c:
c6:ef:b6:aa:25:b0:02:be:3b:f5:39:51:94:04:51:
c3:aa:95:61:96:d9:cc:49:b7:10:41:88:d0:1b:19:
21:53:2b:e2:93:fa:2b:16:ee:5a:0e:c5:f3:59:8a:
c0:f7:8d:a2:8d:39:ad:f2:21:8d:1b:d5:62:75:56:
d4:3b:43:20:d9:92:a1:99:59:33:b7:9c:4c:a9:2e:
85:85:b4:d8:f5:a5:04:51:f4:ec:19:f7:dd:6d:98:
18:bb:f3:7e:ce:fb:64:aa:5f:26:72:5d:c0:16:44:
e6:a0:e5:bf:33:e4:d5:d9:fa:b9:02:00:d0:5d:09:
9f:4b:55:f9:ba:66:cf:1d:2c:03:52:56:44:43:a2:
d2:71:ae:54:68:bb:c6:19:de:3e:63:fb:77:4d:d7:
2f:b0:92:8e:ae:dc:7f:32:08:87:41:ab:bf:91:1e:
07:e9:e9:9c:d0:3b:11:e5:3a:44:ab:fc:dc:cf:5e:
cd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C6:1A:E9:86:27:24:6C:CF:61:91:88:C1:2D:65:87:BA:30:90:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/e5cfc55d-0fc5-3a20-aed5-2cbe2dc63b51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.crl
X509v3 Authority Key Identifier:
keyid:CB:58:6C:B4:1F:C7:2C:0C:FE:27:FB:97:2D:BF:0B:EB:05:46:FB:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.148.104.0/24
IPv6:
2602:fbc0::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:05:45:32:35:34:24:67:cf:76:0e:37:78:92:d5:a1:53:d2:
1b:0f:c4:dc:f5:c2:00:91:16:69:a7:77:41:62:5f:51:bf:bf:
c8:81:c3:1d:a3:af:d3:4c:c1:e0:75:97:49:80:d6:e3:75:29:
ac:b6:46:d7:b6:10:91:b6:33:31:3f:37:3c:61:16:56:eb:44:
b4:42:e9:61:1b:35:bb:ea:43:40:af:3c:d8:c2:25:aa:a8:4d:
d6:4b:9c:35:a7:40:f0:b8:84:1f:0b:60:56:e8:20:40:90:db:
cf:98:80:2c:55:cd:7c:aa:0e:d2:4c:0a:99:81:3b:7e:78:82:
74:e7:53:cb:2e:39:47:2c:d7:3f:01:33:3e:95:80:f9:04:55:
f2:4a:ac:af:a1:e3:e8:bb:47:6b:16:87:90:f4:d5:7c:2d:57:
55:a4:d6:41:89:4c:4b:b1:a0:c5:be:b4:3f:39:d1:23:c5:64:
f4:e1:a7:06:57:5a:4a:45:6a:30:0b:ff:a2:59:be:5f:c6:da:
79:2f:95:00:60:7a:af:83:9a:03:3c:52:40:96:cd:bc:a2:b8:
69:a5:bc:c6:7e:a0:39:a2:60:af:c2:b6:3d:34:8f:5b:5f:80:
7b:3d:c7:70:99:7f:21:8d:c2:2f:c3:03:a4:88:d3:0a:a2:fd:
75:59:01:97
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEiFS1Q5RNecUMSt5oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDJjOGM2ZjMtNGEyMi00YjA5LTkwYjgtNmY3NGVlOTBi
ZWI1MB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk
ZTUxZTcxOWQtMTRmYy00Mjg1LWIzMDUtNGZhMTlmYTZjNzNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqWMl/k4iRMEnMZzOasmjgOWTyyfsUpzrVTF
RSxTqIRc650uNDwvKPV2DAsH8YwMQWf0zCJk+sp40wxJinLFB189g6OSj4kuygzG
77aqJbACvjv1OVGUBFHDqpVhltnMSbcQQYjQGxkhUyvik/orFu5aDsXzWYrA942i
jTmt8iGNG9VidVbUO0Mg2ZKhmVkzt5xMqS6FhbTY9aUEUfTsGffdbZgYu/N+zvtk
ql8mcl3AFkTmoOW/M+TV2fq5AgDQXQmfS1X5umbPHSwDUlZEQ6LSca5UaLvGGd4+
Y/t3TdcvsJKOrtx/MgiHQau/kR4H6emc0DsR5TpEq/zcz17NzQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFNzGGumGJyRsz2GRiMEtZYe6MJCjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80MmM4
YzZmMy00YTIyLTRiMDktOTBiOC02Zjc0ZWU5MGJlYjUvZTVjZmM1NWQtMGZjNS0z
YTIwLWFlZDUtMmNiZTJkYzYzYjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDJjOGM2ZjMtNGEyMi00YjA5LTkw
YjgtNmY3NGVlOTBiZWI1LzQyYzhjNmYzLTRhMjItNGIwOS05MGI4LTZmNzRlZTkw
YmViNS5jcmwwHwYDVR0jBBgwFoAUy1hstB/HLAz+J/uXLb8L6wVG+14wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80MmM4YzZmMy00YTIyLTRiMDktOTBiOC02Zjc0
ZWU5MGJlYjUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5RoMA4E
AgACMAgDBgAmAvvAADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1BUUyNTQkZ892Djd4ktWhU9IbD8Tc9cIA
kRZpp3dBYl9Rv7/IgcMdo6/TTMHgdZdJgNbjdSmstkbXthCRtjMxPzc8YRZW60S0
QulhGzW76kNArzzYwiWqqE3WS5w1p0DwuIQfC2BW6CBAkNvPmIAsVc18qg7STAqZ
gTt+eIJ051PLLjlHLNc/ATM+lYD5BFXySqyvoePou0drFoeQ9NV8LVdVpNZBiUxL
saDFvrQ/OdEjxWT04acGV1pKRWowC/+iWb5fxtp5L5UAYHqvg5oDPFJAls28orhp
pbzGfqA5omCvwrY9NI9bX4B7PcdwmX8hjcIvwwOkiNMKov11WQGX
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:23:36 2025 by rpki-client