Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/27674023-4476-36dc-a656-b385ed05cbae.roa
File: 27674023-4476-36dc-a656-b385ed05cbae.roa (raw, json)
Hash identifier: 8fenNQOG+agpcb4C2JPmbf00Bu/bNIQyWa4QfGIV5Ws=
Subject key identifier: 3F:2F:A5:3B:12:42:33:4C:BB:1A:BE:24:2F:18:50:02:23:3F:E2:E0
Certificate issuer: /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Certificate serial: 010D0C9F432858481F6531F13392A1CBC66EC1F9
Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/27674023-4476-36dc-a656-b385ed05cbae.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 19257
IP address blocks: 23.252.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:31:f1:33:92:a1:cb:c6:6e:c1:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=df9cce4c-774e-4265-9d05-4c98b5f67671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:61:2a:3f:a5:36:33:8f:e3:42:4a:17:14:f8:
19:67:49:ec:ec:ca:83:49:3f:4f:e1:32:50:c8:a5:
71:18:9d:fe:83:b1:4e:13:c6:bc:75:15:09:7b:71:
bc:28:cb:cf:14:b3:e7:da:13:36:c2:ae:14:63:97:
b5:e5:f2:8d:a7:dc:fc:99:d1:ea:c3:eb:df:e5:c9:
ce:b6:08:8f:81:b4:48:48:08:49:c4:f1:63:54:f8:
71:5b:df:4f:b3:07:13:99:0b:d8:ad:e9:86:49:36:
50:e6:30:89:04:c5:e1:a7:0b:74:f1:ea:e0:0a:f6:
d1:5f:07:9e:22:46:6c:10:b3:da:70:c6:e0:56:52:
db:72:0e:f0:24:c6:cb:d0:92:53:18:02:6a:dc:39:
2b:c5:30:d8:ae:45:c4:df:02:26:4a:26:33:c4:14:
f5:04:7f:f9:7b:19:8c:1e:9c:ea:b4:c6:d1:0f:36:
d3:6e:3b:40:70:3a:20:97:32:8d:0d:8e:b6:36:b4:
1e:05:13:bb:03:eb:02:e8:87:f1:ef:22:a0:29:7b:
be:6c:44:d1:e3:4e:69:e9:19:6f:d5:6e:d5:ad:6d:
b6:0f:bc:aa:af:09:0b:42:4e:c6:ed:21:a7:13:8f:
27:07:05:9b:59:75:5c:2b:60:f2:36:53:59:43:a9:
69:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2F:A5:3B:12:42:33:4C:BB:1A:BE:24:2F:18:50:02:23:3F:E2:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/27674023-4476-36dc-a656-b385ed05cbae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl
X509v3 Authority Key Identifier:
keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.252.73.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:96:60:9b:f6:19:80:1c:be:6b:96:f7:fc:79:8e:09:f3:b3:
d0:98:4a:88:1d:a0:43:2e:97:44:66:8a:36:7e:0d:37:86:dc:
68:00:84:b5:09:54:b0:25:17:55:a9:58:cc:58:0e:1b:84:8d:
92:15:73:e8:12:79:46:79:c5:00:5e:e5:ae:0a:31:e5:ce:0e:
a2:24:99:69:52:05:41:e4:25:85:bd:00:f6:50:43:46:56:81:
80:d6:a3:8f:21:93:84:cf:8a:3c:40:91:73:95:85:6a:d2:b0:
f3:c2:5f:48:2d:df:88:db:19:df:72:c5:87:db:a4:9e:d1:d0:
86:69:87:f7:e2:a7:96:5a:47:36:12:dd:31:d4:8e:8f:8c:8b:
9d:a3:0b:16:fb:a2:3a:91:1d:90:79:f2:8b:28:ae:d2:cd:99:
a8:5a:17:7d:91:13:66:ec:4a:0a:58:65:4f:db:00:5a:93:0b:
ac:da:12:b1:2e:0b:6a:0a:49:a2:43:3d:8d:9e:c0:1c:69:c0:
3d:43:71:c1:15:77:c4:8e:36:74:47:f8:43:5d:bf:a3:78:14:
fc:33:af:ce:1e:d2:fe:b4:55:50:1f:ec:c7:b8:06:72:a7:3d:
e8:6d:55:d4:c4:b6:da:6c:f1:e5:35:08:41:f8:82:d3:e5:b3:
57:24:fe:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgfZTHxM5Khy8ZuwfkwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0
MjhhMB4XDTI0MTIwNzAyMDAzOVoXDTI1MDMwNzAyMDAzOVowLzEtMCsGA1UEAxMk
ZGY5Y2NlNGMtNzc0ZS00MjY1LTlkMDUtNGM5OGI1ZjY3NjcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WEqP6U2M4/jQkoXFPgZZ0ns7MqDST9P4TJQ
yKVxGJ3+g7FOE8a8dRUJe3G8KMvPFLPn2hM2wq4UY5e15fKNp9z8mdHqw+vf5cnO
tgiPgbRISAhJxPFjVPhxW99PswcTmQvYremGSTZQ5jCJBMXhpwt08ergCvbRXwee
IkZsELPacMbgVlLbcg7wJMbL0JJTGAJq3DkrxTDYrkXE3wImSiYzxBT1BH/5exmM
HpzqtMbRDzbTbjtAcDoglzKNDY62NrQeBRO7A+sC6Ifx7yKgKXu+bETR405p6Rlv
1W7VrW22D7yqrwkLQk7G7SGnE48nBwWbWXVcK2DyNlNZQ6lpZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD8vpTsSQjNMuxq+JC8YUAIjP+LgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1
YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvMjc2NzQwMjMtNDQ3Ni0z
NmRjLWE2NTYtYjM4NWVkMDVjYmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj
ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw
NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5
ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/xJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD2WYJv2GYAcvmuW9/x5jgnzs9CYSogdoEMul0RmijZ+DTeG3GgAhLUJ
VLAlF1WpWMxYDhuEjZIVc+gSeUZ5xQBe5a4KMeXODqIkmWlSBUHkJYW9APZQQ0ZW
gYDWo48hk4TPijxAkXOVhWrSsPPCX0gt34jbGd9yxYfbpJ7R0IZph/fip5ZaRzYS
3THUjo+Mi52jCxb7ojqRHZB58osortLNmahaF32RE2bsSgpYZU/bAFqTC6zaErEu
C2oKSaJDPY2ewBxpwD1DccEVd8SONnRH+ENdv6N4FPwzr84e0v60VVAf7Me4BnKn
PehtVdTEttps8eU1CEH4gtPls1ck/pY=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:35:01 2025 by rpki-client