Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/0ca10f39-3db3-339e-a199-354a0dc2a78f.roa
File: 0ca10f39-3db3-339e-a199-354a0dc2a78f.roa (raw, json)
Hash identifier: FWcK7rWrJoWS2a2x8xt87ut999FzpmaNgfWVeK8QqkE=
Subject key identifier: 56:9A:79:E6:2E:61:8E:FB:31:63:66:54:9F:17:F0:FB:8E:75:0D:96
Certificate issuer: /CN=64faafdc-0ef2-4ca2-ab11-63c839e7aa72
Certificate serial: 010D0C9F43285847EFEF8E71372B5DE9E2B09700
Authority key identifier: D0:2C:70:62:10:03:4D:34:01:4E:E9:8F:3E:5F:BC:52:B7:27:8B:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/0ca10f39-3db3-339e-a199-354a0dc2a78f.roa
Signing time: Wed 20 Nov 2024 02:00:39 +0000
ROA not before: Wed 20 Nov 2024 02:00:39 +0000
ROA not after: Tue 18 Feb 2025 02:00:39 +0000
asID: 32673
IP address blocks: 23.170.104.0/24 maxlen: 24
2607:7c40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ef:ef:8e:71:37:2b:5d:e9:e2:b0:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64faafdc-0ef2-4ca2-ab11-63c839e7aa72
Validity
Not Before: Nov 20 02:00:39 2024 GMT
Not After : Feb 18 02:00:39 2025 GMT
Subject: CN=f770f798-776e-4425-966a-50ee6f5c8ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c0:fc:e9:58:4a:7e:d6:f1:c4:3c:00:2f:0a:
0a:72:3a:1e:d7:52:40:f1:0e:7e:a5:19:17:98:9e:
ef:a3:5e:24:19:1b:2f:d3:e2:07:d2:e0:28:d3:09:
3b:4e:b0:9d:81:9d:91:ee:86:e5:18:59:a9:06:e0:
0a:02:da:1b:aa:d6:ea:81:b8:1d:ce:c6:f0:56:7e:
dc:8f:b4:57:9a:18:20:d6:47:e3:95:a7:d6:5c:fb:
9c:7c:f5:4a:86:c2:cc:b1:61:7c:19:9c:e1:7a:d1:
9e:50:26:10:87:f4:ef:9a:d9:df:d7:47:0d:ee:25:
8a:7b:91:a4:29:57:23:e5:36:6a:c7:45:07:88:ee:
ef:54:f0:8a:c3:ae:4e:a6:4b:3a:1d:c7:12:21:ff:
91:35:5c:9a:5c:39:01:25:9c:23:4b:ba:79:b6:39:
45:09:5d:db:f5:1a:76:96:84:47:c0:aa:cb:15:71:
2a:20:54:59:f8:f5:d9:8c:cc:40:14:11:a0:59:da:
54:51:22:8f:21:fd:16:ed:49:0f:cd:d4:ce:65:5b:
c2:9c:00:d5:0c:8d:40:42:6c:ae:ae:e3:b8:a7:da:
ad:58:44:7f:f1:ef:ed:5d:d9:66:72:64:9d:64:d2:
f5:9e:6f:53:6e:fd:ae:bd:7e:3d:37:aa:c7:70:aa:
ed:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9A:79:E6:2E:61:8E:FB:31:63:66:54:9F:17:F0:FB:8E:75:0D:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/0ca10f39-3db3-339e-a199-354a0dc2a78f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.crl
X509v3 Authority Key Identifier:
keyid:D0:2C:70:62:10:03:4D:34:01:4E:E9:8F:3E:5F:BC:52:B7:27:8B:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.cer
sbgp-ipAddrBlock: critical
IPv4:
23.170.104.0/24
IPv6:
2607:7c40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:52:61:a1:b9:28:05:74:83:66:ca:d1:be:7c:15:31:32:2a:
e6:c3:70:bc:10:bd:e3:92:9c:82:f8:53:f8:b2:2a:84:ea:20:
b6:08:03:a6:24:a4:c4:c7:b3:34:77:c0:31:65:1e:f3:d2:8e:
8e:9d:88:06:ec:c4:6e:cf:de:6e:bc:b2:e3:f1:a1:dc:d9:b2:
13:51:a7:4c:d8:76:8f:03:36:22:f1:cc:7f:9e:dd:4b:d8:90:
5f:e3:5c:86:f7:b7:a0:50:7e:ea:f2:3f:cb:8b:10:de:f8:68:
c2:f5:d2:6a:23:38:5e:4a:9d:e0:fc:c1:c8:9d:5b:bc:e9:ed:
b2:45:0d:e1:2f:a6:22:0e:b9:37:a7:5c:78:80:ee:fd:ee:07:
42:8a:e9:10:8e:0d:36:e1:47:bf:e3:7b:98:42:1a:da:75:4f:
ee:3c:e2:0c:69:bd:6a:4c:fa:79:47:c8:2c:15:e3:ac:8e:e0:
22:7a:75:ad:df:9e:1a:b0:f6:92:4d:4e:49:72:04:de:c8:80:
85:74:50:4d:7c:6e:36:d4:71:26:0b:df:50:ae:11:8b:0d:0d:
aa:0c:9b:bd:d1:7e:e8:b4:9b:f3:06:6b:e4:6c:05:67:e9:92:
85:88:14:b1:3a:d5:ee:77:be:14:83:38:5f:ad:b8:42:33:d7:
08:35:35:73
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEfv745xNytd6eKwlwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjRmYWFmZGMtMGVmMi00Y2EyLWFiMTEtNjNjODM5ZTdh
YTcyMB4XDTI0MTEyMDAyMDAzOVoXDTI1MDIxODAyMDAzOVowLzEtMCsGA1UEAxMk
Zjc3MGY3OTgtNzc2ZS00NDI1LTk2NmEtNTBlZTZmNWM4ZWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsD86VhKftbxxDwALwoKcjoe11JA8Q5+pRkX
mJ7vo14kGRsv0+IH0uAo0wk7TrCdgZ2R7oblGFmpBuAKAtobqtbqgbgdzsbwVn7c
j7RXmhgg1kfjlafWXPucfPVKhsLMsWF8GZzhetGeUCYQh/Tvmtnf10cN7iWKe5Gk
KVcj5TZqx0UHiO7vVPCKw65Opks6HccSIf+RNVyaXDkBJZwjS7p5tjlFCV3b9Rp2
loRHwKrLFXEqIFRZ+PXZjMxAFBGgWdpUUSKPIf0W7UkPzdTOZVvCnADVDI1AQmyu
ruO4p9qtWER/8e/tXdlmcmSdZNL1nm9Tbv2uvX49N6rHcKrtyQIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFFaaeeYuYY77MWNmVJ8X8PuOdQ2WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NGZh
YWZkYy0wZWYyLTRjYTItYWIxMS02M2M4MzllN2FhNzIvMGNhMTBmMzktM2RiMy0z
MzllLWExOTktMzU0YTBkYzJhNzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjRmYWFmZGMtMGVmMi00Y2EyLWFi
MTEtNjNjODM5ZTdhYTcyLzY0ZmFhZmRjLTBlZjItNGNhMi1hYjExLTYzYzgzOWU3
YWE3Mi5jcmwwHwYDVR0jBBgwFoAU0CxwYhADTTQBTumPPl+8Urcni9wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy82NGZhYWZkYy0wZWYyLTRjYTItYWIxMS02M2M4
MzllN2FhNzIuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF6poMA0E
AgACMAcDBQAmB3xAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAFNSYaG5KAV0g2bK0b58FTEyKubDcLwQveOS
nIL4U/iyKoTqILYIA6YkpMTHszR3wDFlHvPSjo6diAbsxG7P3m68suPxodzZshNR
p0zYdo8DNiLxzH+e3UvYkF/jXIb3t6BQfuryP8uLEN74aML10mojOF5KneD8wcid
W7zp7bJFDeEvpiIOuTenXHiA7v3uB0KK6RCODTbhR7/je5hCGtp1T+484gxpvWpM
+nlHyCwV46yO4CJ6da3fnhqw9pJNTklyBN7IgIV0UE18bjbUcSYL31CuEYsNDaoM
m73Rfui0m/MGa+RsBWfpkoWIFLE61e53vhSDOF+tuEIz1wg1NXM=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:53:49 2025 by rpki-client