Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/9d8a32ae-2de3-314d-9a4e-866bb69a053f.roa
File: 9d8a32ae-2de3-314d-9a4e-866bb69a053f.roa (raw, json)
Hash identifier: J2IEDqzDea9yz95Teow1QAQtTuFivtGtUS4WR6EZyeQ=
Subject key identifier: 79:4F:CA:0C:DF:E1:D0:F4:FD:AD:8E:EC:DD:4E:2C:DC:FE:54:E2:4D
Certificate issuer: /CN=4307d8eb-6c0f-40cf-b909-d61a3f0279c9
Certificate serial: 010D0C9F432858486C588424FF13519A591FF320
Authority key identifier: 11:36:E2:A0:EE:F9:56:65:4B:69:C3:E3:4F:A3:30:12:F5:C0:0F:39
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/9d8a32ae-2de3-314d-9a4e-866bb69a053f.roa
Signing time: Fri 03 Jan 2025 15:32:32 +0000
ROA not before: Fri 03 Jan 2025 15:32:32 +0000
ROA not after: Thu 03 Apr 2025 14:32:32 +0000
asID: 16509
IP address blocks: 23.131.60.0/24 maxlen: 24
2602:f763::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:58:84:24:ff:13:51:9a:59:1f:f3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4307d8eb-6c0f-40cf-b909-d61a3f0279c9
Validity
Not Before: Jan 3 15:32:32 2025 GMT
Not After : Apr 3 14:32:32 2025 GMT
Subject: CN=63842702-a9e5-4a44-a79f-0034cde8a776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8c:ce:be:4a:9b:4f:8e:6a:bc:9c:a2:f1:18:
d3:f0:9c:fd:2c:df:da:28:09:27:d4:d7:27:d1:cd:
07:75:c4:f3:85:4a:15:ba:29:07:5d:e4:aa:8e:27:
78:e3:b5:7d:6a:a4:09:07:97:07:04:b3:4e:a2:d9:
60:e6:76:52:02:a8:c9:52:4f:4f:04:21:d5:84:c3:
c3:a0:0b:24:97:14:37:ca:01:cb:a8:3c:e7:5c:a6:
4c:e7:96:f4:4a:bd:50:9d:9b:63:af:00:17:34:9a:
2b:bf:69:b4:7e:eb:af:c6:0c:c7:26:b7:3e:59:f6:
96:ff:d7:e8:0c:a9:64:5d:8f:6c:39:0e:38:ce:0d:
99:d2:b1:c7:d2:96:59:19:61:75:d4:b0:47:7c:81:
51:83:5e:fb:75:60:21:74:e2:fd:d1:f8:40:b2:c5:
47:73:f9:d9:9a:c2:ee:df:80:5a:78:f6:f8:c1:b3:
8b:ee:26:9a:cd:8f:ad:43:27:b7:fc:55:bc:a0:5a:
a8:ca:be:e6:90:eb:0e:f3:50:b3:42:77:87:73:b7:
f2:52:11:81:70:dc:96:3b:b7:2e:a2:b8:9a:4d:8f:
3a:d9:2a:30:b4:6b:76:91:ad:c3:da:1b:37:8b:4e:
35:a1:1c:9d:b5:10:d9:1e:67:6c:27:68:d1:2c:50:
08:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4F:CA:0C:DF:E1:D0:F4:FD:AD:8E:EC:DD:4E:2C:DC:FE:54:E2:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/9d8a32ae-2de3-314d-9a4e-866bb69a053f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.crl
X509v3 Authority Key Identifier:
keyid:11:36:E2:A0:EE:F9:56:65:4B:69:C3:E3:4F:A3:30:12:F5:C0:0F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.131.60.0/24
IPv6:
2602:f763::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:fb:7d:6b:14:be:cf:22:a4:af:17:90:9e:83:46:4a:7d:be:
4f:62:c6:6f:c5:3f:b8:29:78:93:ab:42:01:b3:19:09:e7:4a:
36:fd:37:aa:21:fd:a0:76:02:be:ad:bc:cb:01:91:05:1b:90:
b1:94:04:32:49:bc:62:be:89:a2:ad:31:78:17:26:ad:e4:37:
94:35:ef:93:05:fa:5b:98:99:00:e0:9c:70:e6:0b:6a:dd:36:
09:48:81:ee:3e:3b:3d:f0:2d:8e:1d:b9:b8:97:2a:9c:ae:d3:
69:af:9a:8a:8d:0a:49:e9:07:28:cc:c2:b5:f5:2d:e2:14:5b:
0f:07:a4:17:e4:cc:61:f3:72:35:c9:ab:82:ab:1f:21:eb:0a:
99:51:fb:57:a3:e6:be:17:73:c2:ba:f0:16:9b:08:39:cf:f3:
53:c5:b1:60:df:aa:09:2d:78:20:79:bc:cc:44:2a:c4:7a:a1:
1d:8b:48:88:a3:27:47:11:67:7b:74:f0:10:59:3f:00:5d:eb:
7d:86:6b:43:79:57:6a:ae:6b:70:0d:7d:74:7c:93:1e:4b:84:
1a:17:d8:ef:34:c8:3e:ac:3d:e4:09:43:13:15:73:a1:1f:0b:
05:42:f6:f0:ad:59:d4:5b:aa:f8:36:1d:b1:3d:06:75:78:f1:
a9:b5:56:70
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEhsWIQk/xNRmlkf8yAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDMwN2Q4ZWItNmMwZi00MGNmLWI5MDktZDYxYTNmMDI3
OWM5MB4XDTI1MDEwMzE1MzIzMloXDTI1MDQwMzE0MzIzMlowLzEtMCsGA1UEAxMk
NjM4NDI3MDItYTllNS00YTQ0LWE3OWYtMDAzNGNkZThhNzc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiozOvkqbT45qvJyi8RjT8Jz9LN/aKAkn1Ncn
0c0HdcTzhUoVuikHXeSqjid447V9aqQJB5cHBLNOotlg5nZSAqjJUk9PBCHVhMPD
oAsklxQ3ygHLqDznXKZM55b0Sr1QnZtjrwAXNJorv2m0fuuvxgzHJrc+WfaW/9fo
DKlkXY9sOQ44zg2Z0rHH0pZZGWF11LBHfIFRg177dWAhdOL90fhAssVHc/nZmsLu
34BaePb4wbOL7iaazY+tQye3/FW8oFqoyr7mkOsO81CzQneHc7fyUhGBcNyWO7cu
oriaTY862SowtGt2ka3D2hs3i041oRydtRDZHmdsJ2jRLFAIJwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFHlPygzf4dD0/a2O7N1OLNz+VOJNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80MzA3
ZDhlYi02YzBmLTQwY2YtYjkwOS1kNjFhM2YwMjc5YzkvOWQ4YTMyYWUtMmRlMy0z
MTRkLTlhNGUtODY2YmI2OWEwNTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDMwN2Q4ZWItNmMwZi00MGNmLWI5
MDktZDYxYTNmMDI3OWM5LzQzMDdkOGViLTZjMGYtNDBjZi1iOTA5LWQ2MWEzZjAy
NzljOS5jcmwwHwYDVR0jBBgwFoAUETbioO75VmVLacPjT6MwEvXADzkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi80MzA3ZDhlYi02YzBmLTQwY2YtYjkwOS1kNjFh
M2YwMjc5YzkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF4M8MA8E
AgACMAkDBwAmAvdjAAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPPt9axS+zyKkrxeQnoNGSn2+T2LGb8U/
uCl4k6tCAbMZCedKNv03qiH9oHYCvq28ywGRBRuQsZQEMkm8Yr6Joq0xeBcmreQ3
lDXvkwX6W5iZAOCccOYLat02CUiB7j47PfAtjh25uJcqnK7Taa+aio0KSekHKMzC
tfUt4hRbDwekF+TMYfNyNcmrgqsfIesKmVH7V6PmvhdzwrrwFpsIOc/zU8WxYN+q
CS14IHm8zEQqxHqhHYtIiKMnRxFne3TwEFk/AF3rfYZrQ3lXaq5rcA19dHyTHkuE
GhfY7zTIPqw95AlDExVzoR8LBUL28K1Z1Fuq+DYdsT0GdXjxqbVWcA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:17 2025 by rpki-client