Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/c7fb0120-8473-316e-81b4-70f9121c05f9.roa
File: c7fb0120-8473-316e-81b4-70f9121c05f9.roa (raw, json)
Hash identifier: BF/9iWMJplkq5xiIFh+TCAI3sHYHoE5KyghwtfBunAo=
Subject key identifier: 5C:15:5B:38:86:DD:3A:95:5B:45:0D:12:C7:30:C2:F8:6E:A7:62:AC
Certificate issuer: /CN=a120b5d4-da56-49b1-8ae1-7987a6afde99
Certificate serial: 010D0C9F432858484C1037043B351C725ED549E0
Authority key identifier: C0:D7:33:E0:5D:4C:05:6E:3A:7E:94:33:2D:C4:6B:E8:01:48:68:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/c7fb0120-8473-316e-81b4-70f9121c05f9.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 394989
IP address blocks: 23.151.192.0/24 maxlen: 24
23.151.193.0/24 maxlen: 24
2602:febb::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:37:04:3b:35:1c:72:5e:d5:49:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a120b5d4-da56-49b1-8ae1-7987a6afde99
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=558d35c5-5086-4bd1-a116-06ecd16d5f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0c:d9:7a:64:f2:85:6d:6c:61:57:50:cd:5e:
04:c1:82:ff:66:98:e0:40:15:93:c1:a7:af:83:85:
54:0c:1d:49:1a:4e:05:c5:74:28:ce:0a:f5:19:ea:
6f:cd:58:70:59:17:ca:81:40:1a:5d:45:0e:7b:a4:
2e:de:a2:35:cb:09:bf:74:af:f3:07:30:71:d5:fa:
7f:f7:9a:bc:f6:b4:13:f7:05:6e:16:0b:d3:c7:2d:
92:1f:01:a1:b0:49:bc:53:04:28:58:16:5b:f2:66:
26:64:b2:61:0a:fe:61:41:46:3d:f5:56:de:23:c1:
76:a9:04:30:83:29:ca:86:11:6d:12:32:01:9a:b9:
7b:a2:57:43:ee:b7:0f:ec:a5:44:fe:4b:3f:84:6c:
26:c4:89:b6:5c:eb:9e:ef:53:3c:0c:44:2f:5d:16:
62:98:25:5a:f8:3a:62:fa:90:c1:46:bd:d3:a0:1e:
b5:8a:81:8d:00:6b:76:86:c5:1b:1c:f5:12:1a:16:
69:d1:06:2a:13:b4:53:7b:30:30:3b:72:84:69:85:
06:b1:b1:51:a9:e4:c5:80:6c:22:f6:17:2c:7d:34:
77:ae:e6:06:6c:aa:72:05:d0:14:d5:78:84:41:00:
d6:e8:47:67:64:b0:74:72:9d:8f:2e:87:d0:61:78:
80:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:15:5B:38:86:DD:3A:95:5B:45:0D:12:C7:30:C2:F8:6E:A7:62:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/c7fb0120-8473-316e-81b4-70f9121c05f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/a120b5d4-da56-49b1-8ae1-7987a6afde99.crl
X509v3 Authority Key Identifier:
keyid:C0:D7:33:E0:5D:4C:05:6E:3A:7E:94:33:2D:C4:6B:E8:01:48:68:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99.cer
sbgp-ipAddrBlock: critical
IPv4:
23.151.192.0/23
IPv6:
2602:febb::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:39:9e:e0:fc:89:dc:b5:03:46:ba:cf:40:5a:26:27:e3:3b:
17:da:5f:29:61:83:94:9d:c0:94:55:b5:d1:1c:e9:c4:d4:8a:
46:0b:36:dc:2b:44:11:d9:2f:9f:3d:88:9e:7b:39:0b:30:cb:
ea:33:8a:07:24:a3:29:4c:d8:e9:37:fb:55:e2:0a:17:f0:b5:
48:f7:43:f0:fe:b2:71:f2:4b:d5:67:0b:81:3d:23:d9:86:c8:
2a:ba:bd:18:dc:c5:8e:5e:3c:a0:12:2e:f0:a3:56:d5:b8:d9:
ef:e7:64:c3:61:90:40:62:3c:b2:71:a6:96:1d:11:24:cd:62:
24:1e:21:87:1f:d0:09:02:3e:15:78:97:3e:ff:85:7f:f6:4b:
13:09:5e:f2:1f:a9:89:86:66:db:aa:10:ba:35:5b:f6:21:ac:
d1:c7:f0:1e:bc:9c:44:f0:76:6f:11:8a:4e:49:03:38:d2:02:
4c:30:83:1e:da:0d:c9:3a:25:3a:95:95:70:3e:f0:89:22:37:
8d:b2:d3:0a:26:d4:e3:8e:01:ac:cb:ef:53:c6:d3:8d:6c:39:
5d:6a:c1:04:b8:b1:e9:c7:d2:c7:2b:f9:ef:53:b1:92:d4:00:
32:5c:f4:63:b4:e0:69:4c:43:1b:da:2f:78:56:43:50:bc:1b:
d7:be:47:d6
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEhMEDcEOzUccl7VSeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTEyMGI1ZDQtZGE1Ni00OWIxLThhZTEtNzk4N2E2YWZk
ZTk5MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
NTU4ZDM1YzUtNTA4Ni00YmQxLWExMTYtMDZlY2QxNmQ1ZjExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQzZemTyhW1sYVdQzV4EwYL/ZpjgQBWTwaev
g4VUDB1JGk4FxXQozgr1GepvzVhwWRfKgUAaXUUOe6Qu3qI1ywm/dK/zBzBx1fp/
95q89rQT9wVuFgvTxy2SHwGhsEm8UwQoWBZb8mYmZLJhCv5hQUY99VbeI8F2qQQw
gynKhhFtEjIBmrl7oldD7rcP7KVE/ks/hGwmxIm2XOue71M8DEQvXRZimCVa+Dpi
+pDBRr3ToB61ioGNAGt2hsUbHPUSGhZp0QYqE7RTezAwO3KEaYUGsbFRqeTFgGwi
9hcsfTR3ruYGbKpyBdAU1XiEQQDW6EdnZLB0cp2PLofQYXiACwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFFwVWziG3TqVW0UNEscwwvhup2KsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMTIw
YjVkNC1kYTU2LTQ5YjEtOGFlMS03OTg3YTZhZmRlOTkvYzdmYjAxMjAtODQ3My0z
MTZlLTgxYjQtNzBmOTEyMWMwNWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTEyMGI1ZDQtZGE1Ni00OWIxLThh
ZTEtNzk4N2E2YWZkZTk5L2ExMjBiNWQ0LWRhNTYtNDliMS04YWUxLTc5ODdhNmFm
ZGU5OS5jcmwwHwYDVR0jBBgwFoAUwNcz4F1MBW46fpQzLcRr6AFIaIowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hMTIwYjVkNC1kYTU2LTQ5YjEtOGFlMS03OTg3
YTZhZmRlOTkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBF5fAMA4E
AgACMAgDBgQmAv67ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBOZ7g/InctQNGus9AWiYn4zsX2l8pYYOU
ncCUVbXRHOnE1IpGCzbcK0QR2S+fPYieezkLMMvqM4oHJKMpTNjpN/tV4goX8LVI
90Pw/rJx8kvVZwuBPSPZhsgqur0Y3MWOXjygEi7wo1bVuNnv52TDYZBAYjyycaaW
HREkzWIkHiGHH9AJAj4VeJc+/4V/9ksTCV7yH6mJhmbbqhC6NVv2IazRx/AevJxE
8HZvEYpOSQM40gJMMIMe2g3JOiU6lZVwPvCJIjeNstMKJtTjjgGsy+9TxtONbDld
asEEuLHpx9LHK/nvU7GS1AAyXPRjtOBpTEMb2i94VkNQvBvXvkfW
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:40:18 2025 by rpki-client