Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/7e3d434b-4370-3a39-8b26-c3d433d2bd13.roa
File: 7e3d434b-4370-3a39-8b26-c3d433d2bd13.roa (raw, json)
Hash identifier: bR2QjUz0K2Tsl8bA5LLPEdhJitMLRRr5ESXAjZOZVy8=
Subject key identifier: 71:83:DE:12:0B:3D:41:E6:78:52:79:C9:85:2D:07:B6:5C:84:A8:BE
Certificate issuer: /CN=4307d8eb-6c0f-40cf-b909-d61a3f0279c9
Certificate serial: 010D0C9F432858486C58B62DCCF5B7995DA9E680
Authority key identifier: 11:36:E2:A0:EE:F9:56:65:4B:69:C3:E3:4F:A3:30:12:F5:C0:0F:39
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/7e3d434b-4370-3a39-8b26-c3d433d2bd13.roa
Signing time: Fri 03 Jan 2025 15:32:56 +0000
ROA not before: Fri 03 Jan 2025 15:32:56 +0000
ROA not after: Thu 03 Apr 2025 14:32:56 +0000
asID: 14618
IP address blocks: 23.131.60.0/24 maxlen: 24
2602:f763::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:58:b6:2d:cc:f5:b7:99:5d:a9:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4307d8eb-6c0f-40cf-b909-d61a3f0279c9
Validity
Not Before: Jan 3 15:32:56 2025 GMT
Not After : Apr 3 14:32:56 2025 GMT
Subject: CN=138257a6-b9be-49c0-9a67-6254e092e6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:03:a0:98:de:ff:bb:d3:be:98:d8:37:3b:3a:
12:b4:25:3b:7f:ad:d8:9e:24:d2:c3:c7:74:be:55:
33:cb:73:3f:d5:09:20:a7:fd:f1:5a:1f:cc:dd:58:
ec:4f:8d:dc:02:7b:cb:a6:b9:cd:5b:fb:1b:76:db:
bb:d0:3f:f1:03:87:8c:41:54:a3:4d:26:73:86:92:
24:bc:17:0c:33:c0:eb:55:3c:ff:46:bd:45:2c:46:
a1:04:6c:cc:16:9b:c1:16:09:f0:f8:80:7d:86:0f:
b7:2f:6e:e1:53:8e:f6:32:12:c4:d3:f2:56:19:53:
d6:e9:79:90:f9:cd:e8:9b:d7:dd:58:8f:0b:fd:ae:
58:bb:59:e0:fa:1c:0a:81:ef:af:77:62:39:7a:31:
44:80:1e:6f:ec:2b:db:00:97:56:68:09:3b:68:d2:
fb:25:7a:ec:d8:5c:58:85:9a:f0:0f:aa:7b:bb:4f:
84:37:5c:bb:39:7c:21:c1:99:3c:2a:bf:4f:f5:18:
77:f4:59:9b:5b:50:04:b3:ce:e3:d4:1d:a1:2d:51:
28:56:0a:6b:71:2b:c9:f7:65:98:21:c3:4d:b3:fa:
6b:2a:7b:c8:a9:e8:fe:d3:d6:55:92:c2:26:d5:87:
b2:d0:ca:8d:79:cb:f2:1b:93:1b:32:fd:8b:fa:b7:
44:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:83:DE:12:0B:3D:41:E6:78:52:79:C9:85:2D:07:B6:5C:84:A8:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/7e3d434b-4370-3a39-8b26-c3d433d2bd13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.crl
X509v3 Authority Key Identifier:
keyid:11:36:E2:A0:EE:F9:56:65:4B:69:C3:E3:4F:A3:30:12:F5:C0:0F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.131.60.0/24
IPv6:
2602:f763::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:01:57:52:bf:87:f4:27:b4:6e:f0:6f:03:22:00:ee:87:81:
28:ee:d5:df:51:57:f5:be:e2:f3:cf:f2:d8:ea:d6:12:a8:f1:
3c:02:aa:c4:73:ee:62:30:6f:eb:2b:7a:46:30:94:ce:bf:d9:
b0:87:19:d3:7e:db:f2:9c:5a:3a:85:b9:61:14:bb:22:54:18:
13:a6:69:87:90:f2:53:3d:4d:ac:3b:82:48:fd:a9:ab:f3:88:
0d:f5:87:17:3e:18:b0:16:11:b9:6e:f8:95:7d:cf:4d:90:2a:
2e:2d:26:a6:66:98:5d:73:6e:e6:78:d1:d4:76:8c:82:7d:82:
c6:fc:1b:29:f9:a5:41:14:65:f0:83:e0:ec:86:af:b3:2a:2f:
61:98:4e:a9:70:74:3b:81:7f:b9:8f:48:ca:12:48:ee:da:65:
a8:3c:a9:2a:db:75:b5:a3:96:a9:70:19:f3:de:49:bf:cb:a4:
ea:52:d1:df:47:fb:55:35:3c:02:fd:35:d2:de:1d:de:0f:17:
5a:14:ce:d0:80:bd:f6:57:6e:bc:44:8e:c1:d2:7c:d5:de:db:
ad:44:c0:ec:9c:40:7f:a6:5f:e8:01:a6:5f:fc:eb:ea:3f:bf:
51:08:12:b6:43:4a:ec:08:e3:a5:14:c7:03:fd:b5:c8:03:ac:
67:e0:4e:21
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEhsWLYtzPW3mV2p5oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDMwN2Q4ZWItNmMwZi00MGNmLWI5MDktZDYxYTNmMDI3
OWM5MB4XDTI1MDEwMzE1MzI1NloXDTI1MDQwMzE0MzI1NlowLzEtMCsGA1UEAxMk
MTM4MjU3YTYtYjliZS00OWMwLTlhNjctNjI1NGUwOTJlNmM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AOgmN7/u9O+mNg3OzoStCU7f63YniTSw8d0
vlUzy3M/1Qkgp/3xWh/M3VjsT43cAnvLprnNW/sbdtu70D/xA4eMQVSjTSZzhpIk
vBcMM8DrVTz/Rr1FLEahBGzMFpvBFgnw+IB9hg+3L27hU472MhLE0/JWGVPW6XmQ
+c3om9fdWI8L/a5Yu1ng+hwKge+vd2I5ejFEgB5v7CvbAJdWaAk7aNL7JXrs2FxY
hZrwD6p7u0+EN1y7OXwhwZk8Kr9P9Rh39FmbW1AEs87j1B2hLVEoVgprcSvJ92WY
IcNNs/prKnvIqej+09ZVksIm1Yey0MqNecvyG5MbMv2L+rdEOwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFHGD3hILPUHmeFJ5yYUtB7ZchKi+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80MzA3
ZDhlYi02YzBmLTQwY2YtYjkwOS1kNjFhM2YwMjc5YzkvN2UzZDQzNGItNDM3MC0z
YTM5LThiMjYtYzNkNDMzZDJiZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDMwN2Q4ZWItNmMwZi00MGNmLWI5
MDktZDYxYTNmMDI3OWM5LzQzMDdkOGViLTZjMGYtNDBjZi1iOTA5LWQ2MWEzZjAy
NzljOS5jcmwwHwYDVR0jBBgwFoAUETbioO75VmVLacPjT6MwEvXADzkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi80MzA3ZDhlYi02YzBmLTQwY2YtYjkwOS1kNjFh
M2YwMjc5YzkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF4M8MA8E
AgACMAkDBwAmAvdjAAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARQFXUr+H9Ce0bvBvAyIA7oeBKO7V31FX
9b7i88/y2OrWEqjxPAKqxHPuYjBv6yt6RjCUzr/ZsIcZ037b8pxaOoW5YRS7IlQY
E6Zph5DyUz1NrDuCSP2pq/OIDfWHFz4YsBYRuW74lX3PTZAqLi0mpmaYXXNu5njR
1HaMgn2CxvwbKfmlQRRl8IPg7IavsyovYZhOqXB0O4F/uY9IyhJI7tplqDypKtt1
taOWqXAZ895Jv8uk6lLR30f7VTU8Av010t4d3g8XWhTO0IC99lduvESOwdJ81d7b
rUTA7JxAf6Zf6AGmX/zr6j+/UQgStkNK7AjjpRTHA/21yAOsZ+BOIQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:22:24 2025 by rpki-client