Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/fb1bf863-b3b2-359d-831e-d305657e8de3.roa
File: fb1bf863-b3b2-359d-831e-d305657e8de3.roa (raw, json)
Hash identifier: LxL6Ge29wrMN1P3x9gSBpedW+gJPt9QpYWlrlNu+7PY=
Subject key identifier: A1:39:D1:AC:4F:E4:3C:78:66:D3:CA:A5:BD:59:E6:4C:D2:B4:B5:CF
Certificate issuer: /CN=aeb681ac-ce83-4588-bbed-2877bf5a43ae
Certificate serial: 010D0C9F4328584847C37B11160C0BBD13087C80
Authority key identifier: E9:49:D7:DF:8A:86:E5:D6:7F:AC:98:03:AE:C2:6F:4B:08:DD:0B:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/fb1bf863-b3b2-359d-831e-d305657e8de3.roa
Signing time: Sat 21 Dec 2024 13:03:09 +0000
ROA not before: Sat 21 Dec 2024 13:03:09 +0000
ROA not after: Fri 21 Mar 2025 12:03:09 +0000
asID: 26006
IP address blocks: 23.168.136.0/24 maxlen: 24
2602:f9bd::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:47:c3:7b:11:16:0c:0b:bd:13:08:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb681ac-ce83-4588-bbed-2877bf5a43ae
Validity
Not Before: Dec 21 13:03:09 2024 GMT
Not After : Mar 21 12:03:09 2025 GMT
Subject: CN=b655e6e1-387d-4640-a10b-d0b1a814e97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3a:41:66:09:e3:63:71:70:12:37:7b:9a:4b:
ee:e9:04:b7:b7:0b:af:be:6b:27:cd:d4:3e:28:6b:
09:ac:8c:cd:7e:f5:fa:81:9b:6b:fc:c9:3a:44:7c:
75:b3:db:4a:4d:72:24:6f:5b:0b:f5:e0:53:35:c4:
27:7a:16:fd:7f:de:4f:53:b5:1d:0e:80:d9:3c:a3:
c4:c4:ed:99:1f:d4:c8:cd:d5:c9:13:38:82:74:6c:
e3:70:5c:4d:5f:4a:66:74:27:cb:83:00:4e:68:0f:
0b:8c:8b:9b:7d:7f:7c:57:a0:32:2a:fd:09:d8:d2:
91:2a:e0:f4:05:06:e6:de:3d:5a:dc:33:77:e8:2c:
70:ba:5a:87:87:5a:f0:91:b5:d2:c3:e6:68:9f:b2:
76:2f:16:bd:d6:18:81:36:c4:76:3c:f0:89:18:7e:
75:62:9f:af:61:64:c2:e9:1c:30:54:dc:20:9e:c0:
c7:81:db:08:99:91:4f:46:ba:cf:76:a3:7e:58:ee:
1a:f8:9c:2d:fc:8a:33:5a:79:dd:52:d5:16:ae:38:
ee:ab:3e:b3:f4:aa:78:ec:93:31:8a:15:43:ea:a1:
0e:09:25:8a:c4:09:5c:ef:68:6f:8d:d0:9d:e4:e5:
d8:7c:1f:b0:2a:ef:4e:c5:04:a9:78:99:14:fa:22:
e8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:39:D1:AC:4F:E4:3C:78:66:D3:CA:A5:BD:59:E6:4C:D2:B4:B5:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/fb1bf863-b3b2-359d-831e-d305657e8de3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.crl
X509v3 Authority Key Identifier:
keyid:E9:49:D7:DF:8A:86:E5:D6:7F:AC:98:03:AE:C2:6F:4B:08:DD:0B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer
sbgp-ipAddrBlock: critical
IPv4:
23.168.136.0/24
IPv6:
2602:f9bd::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:2a:c5:79:3e:e6:0c:c0:72:5b:0d:98:ad:15:86:58:64:02:
f0:e0:5e:da:f7:54:68:c9:de:85:e6:ad:58:a8:99:20:02:c7:
2a:89:4b:86:32:b8:f7:04:34:63:5e:73:34:3c:d1:f0:ac:28:
df:fe:7b:93:62:c3:fa:f0:18:08:29:58:80:2e:41:8d:a9:ea:
60:41:10:d2:8e:05:75:8c:22:5d:62:11:23:37:a6:98:78:09:
cd:a9:f6:9c:00:03:0d:89:1f:ee:d0:a0:0b:cd:8f:76:a0:7e:
0d:30:8f:5d:dc:ff:91:37:e0:f3:f3:5d:3d:ae:4f:eb:e2:e2:
f2:37:67:12:4e:5d:44:e5:3f:55:8e:14:dc:51:9a:61:d5:00:
c9:55:6c:e3:70:66:c5:27:47:d6:0d:c2:36:c4:c7:a5:24:e3:
a2:38:63:ae:f8:32:b9:d7:bb:91:27:09:42:87:7b:04:8a:77:
03:d4:e8:64:57:b2:80:67:e9:5d:93:de:9f:a1:7d:bd:0c:13:
3f:c6:75:38:2d:77:3f:3e:8d:0d:43:61:fa:ee:06:5d:bf:e2:
9b:ed:81:07:8a:2c:d8:a4:74:60:67:c4:35:be:64:72:59:b5:
69:30:e2:ea:2b:0f:25:c6:6f:c7:23:7f:d2:4e:ed:36:f8:5c:
02:ac:f9:39
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEhHw3sRFgwLvRMIfIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWViNjgxYWMtY2U4My00NTg4LWJiZWQtMjg3N2JmNWE0
M2FlMB4XDTI0MTIyMTEzMDMwOVoXDTI1MDMyMTEyMDMwOVowLzEtMCsGA1UEAxMk
YjY1NWU2ZTEtMzg3ZC00NjQwLWExMGItZDBiMWE4MTRlOTdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzpBZgnjY3FwEjd7mkvu6QS3twuvvmsnzdQ+
KGsJrIzNfvX6gZtr/Mk6RHx1s9tKTXIkb1sL9eBTNcQnehb9f95PU7UdDoDZPKPE
xO2ZH9TIzdXJEziCdGzjcFxNX0pmdCfLgwBOaA8LjIubfX98V6AyKv0J2NKRKuD0
BQbm3j1a3DN36CxwulqHh1rwkbXSw+Zon7J2Lxa91hiBNsR2PPCJGH51Yp+vYWTC
6RwwVNwgnsDHgdsImZFPRrrPdqN+WO4a+Jwt/IozWnndUtUWrjjuqz6z9Kp47JMx
ihVD6qEOCSWKxAlc72hvjdCd5OXYfB+wKu9OxQSpeJkU+iLofQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFKE50axP5Dx4ZtPKpb1Z5kzStLXPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hZWI2
ODFhYy1jZTgzLTQ1ODgtYmJlZC0yODc3YmY1YTQzYWUvZmIxYmY4NjMtYjNiMi0z
NTlkLTgzMWUtZDMwNTY1N2U4ZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWViNjgxYWMtY2U4My00NTg4LWJi
ZWQtMjg3N2JmNWE0M2FlL2FlYjY4MWFjLWNlODMtNDU4OC1iYmVkLTI4NzdiZjVh
NDNhZS5jcmwwHwYDVR0jBBgwFoAU6UnX34qG5dZ/rJgDrsJvSwjdC0UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hZWI2ODFhYy1jZTgzLTQ1ODgtYmJlZC0yODc3
YmY1YTQzYWUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6iIMA4E
AgACMAgDBgAmAvm9ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAQKsV5PuYMwHJbDZitFYZYZALw4F7a91Ro
yd6F5q1YqJkgAscqiUuGMrj3BDRjXnM0PNHwrCjf/nuTYsP68BgIKViALkGNqepg
QRDSjgV1jCJdYhEjN6aYeAnNqfacAAMNiR/u0KALzY92oH4NMI9d3P+RN+Dz8109
rk/r4uLyN2cSTl1E5T9VjhTcUZph1QDJVWzjcGbFJ0fWDcI2xMelJOOiOGOu+DK5
17uRJwlCh3sEincD1OhkV7KAZ+ldk96foX29DBM/xnU4LXc/Po0NQ2H67gZdv+Kb
7YEHiizYpHRgZ8Q1vmRyWbVpMOLqKw8lxm/HI3/STu02+FwCrPk5
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:27:55 2025 by rpki-client