Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/8dbc74e3-7582-3a14-8bd4-683c9256d6ce.roa
File: 8dbc74e3-7582-3a14-8bd4-683c9256d6ce.roa (raw, json)
Hash identifier: uRLAGOzYkrv8uYJfkgrEFExtDY4yXC0qNrSYNa6q4MM=
Subject key identifier: D0:C5:10:07:C8:D8:9D:5E:E9:7D:FB:85:32:0A:24:9A:BF:1F:44:2D
Certificate issuer: /CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41
Certificate serial: 010D0C9F4328584819CFC6444AB996E42C47A280
Authority key identifier: 42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/8dbc74e3-7582-3a14-8bd4-683c9256d6ce.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 54632
IP address blocks: 23.159.112.0/24 maxlen: 24
23.160.176.0/24 maxlen: 24
23.170.32.0/24 maxlen: 24
23.170.33.0/24 maxlen: 24
2602:fe6a::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:c6:44:4a:b9:96:e4:2c:47:a2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=63331b59-f718-42c5-95b5-e1cc9256ce8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5b:9d:b4:f1:6b:c4:3e:e9:2b:95:38:d5:8b:
4d:05:be:db:c9:fa:2c:7c:97:ed:a4:dd:d8:1a:51:
d0:6b:eb:19:34:ea:88:d5:de:cd:b0:14:20:6c:3d:
19:14:b2:75:be:bc:37:c3:34:de:dc:ef:23:cb:1c:
37:c8:bf:99:74:70:40:a3:bb:ae:a1:99:55:c5:d3:
6c:77:9a:c3:5c:35:ef:60:ca:78:03:9f:f8:6b:d0:
96:c6:45:95:c4:2d:5f:94:79:cd:da:8b:3b:e0:a9:
ca:11:66:26:8e:37:24:75:1d:84:af:43:86:56:f3:
e5:23:80:40:78:c4:39:a2:9b:fe:ec:8b:26:9e:4f:
6a:76:bd:0c:20:50:7e:32:b0:db:b2:4a:5a:e4:d4:
09:bc:db:a2:20:7b:e7:c5:93:1b:2d:4e:56:4c:ac:
0b:cc:45:9a:09:7c:8d:c9:03:36:0d:79:4a:51:db:
eb:32:f3:e9:cf:3b:50:48:5e:1f:91:ee:a6:9e:cb:
e5:55:31:e9:a6:c5:1a:03:ad:5b:61:bb:cc:64:e5:
8e:f5:fa:63:9b:d7:0d:97:82:42:55:ee:3a:eb:9b:
93:f8:fe:8c:ed:b7:f3:72:20:4a:7a:f6:de:2b:17:
b4:22:8c:ca:4a:b0:36:1e:72:1e:29:b9:13:5b:4e:
35:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C5:10:07:C8:D8:9D:5E:E9:7D:FB:85:32:0A:24:9A:BF:1F:44:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/8dbc74e3-7582-3a14-8bd4-683c9256d6ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl
X509v3 Authority Key Identifier:
keyid:42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer
sbgp-ipAddrBlock: critical
IPv4:
23.159.112.0/24
23.160.176.0/24
23.170.32.0/23
IPv6:
2602:fe6a::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:cb:ed:b0:e3:5c:b0:3a:d9:3d:b9:92:ab:bd:20:3b:00:3a:
55:1b:a6:e9:4f:fd:1d:d0:9f:07:80:c0:d9:44:4b:41:5e:42:
92:dd:dc:cd:49:25:ea:75:a1:dc:84:1d:4f:18:6e:35:47:0b:
ba:eb:75:90:84:dd:b0:74:9e:66:8f:fb:17:c8:a7:7f:74:e0:
97:86:a1:d1:b2:7e:6c:79:e7:7d:e1:1f:46:51:4e:ef:da:dc:
06:1e:ce:91:da:61:ec:c5:ef:d1:19:8a:0e:de:b3:b2:ac:52:
6a:b5:f3:88:a7:02:9b:f7:14:73:4b:9e:27:29:45:e4:f9:70:
32:1f:53:e2:b1:73:c2:12:ee:e5:98:0c:9e:d5:15:f7:fa:b1:
d0:06:41:fd:5e:7f:ef:a4:69:e0:a5:c0:59:ce:1c:2f:4d:ec:
b7:5f:19:57:e2:f3:a2:20:9e:23:e3:f7:88:81:0d:ad:3c:9b:
02:f9:8f:ed:0b:2d:e3:23:1d:5c:8f:dc:ff:3d:c5:01:4a:e3:
5d:9f:dc:39:06:89:c2:bc:5d:93:4b:6e:90:15:f5:a3:20:14:
b1:b9:67:2b:7f:41:3b:eb:6d:6f:7c:37:bb:86:9f:7d:7a:d0:
d8:6d:0e:72:49:dc:3b:e9:16:4b:52:c7:a4:8d:b1:2c:1f:8d:
fb:89:da:22
-----BEGIN CERTIFICATE-----
MIIGXzCCBUegAwIBAgIUAQ0Mn0MoWEgZz8ZESrmW5CxHooAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjIxMTJjZTAtYzkxYy00NDllLThiYmItMTJlNDRmNWEz
ZTQxMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
NjMzMzFiNTktZjcxOC00MmM1LTk1YjUtZTFjYzkyNTZjZThkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFudtPFrxD7pK5U41YtNBb7byfosfJftpN3Y
GlHQa+sZNOqI1d7NsBQgbD0ZFLJ1vrw3wzTe3O8jyxw3yL+ZdHBAo7uuoZlVxdNs
d5rDXDXvYMp4A5/4a9CWxkWVxC1flHnN2os74KnKEWYmjjckdR2Er0OGVvPlI4BA
eMQ5opv+7Ismnk9qdr0MIFB+MrDbskpa5NQJvNuiIHvnxZMbLU5WTKwLzEWaCXyN
yQM2DXlKUdvrMvPpzztQSF4fke6mnsvlVTHppsUaA61bYbvMZOWO9fpjm9cNl4JC
Ve4665uT+P6M7bfzciBKevbeKxe0IozKSrA2HnIeKbkTW0418wIDAQABo4IDcTCC
A20wHQYDVR0OBBYEFNDFEAfI2J1e6X37hTIKJJq/H0QtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMjEx
MmNlMC1jOTFjLTQ0OWUtOGJiYi0xMmU0NGY1YTNlNDEvOGRiYzc0ZTMtNzU4Mi0z
YTE0LThiZDQtNjgzYzkyNTZkNmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjIxMTJjZTAtYzkxYy00NDllLThi
YmItMTJlNDRmNWEzZTQxLzIyMTEyY2UwLWM5MWMtNDQ5ZS04YmJiLTEyZTQ0ZjVh
M2U0MS5jcmwwHwYDVR0jBBgwFoAUQrbxv8/ixWXOZWVoHK3h4/ijp1cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yMjExMmNlMC1jOTFjLTQ0OWUtOGJiYi0xMmU0
NGY1YTNlNDEuY2VyMDsGCCsGAQUFBwEHAQH/BCwwKjAYBAIAATASAwQAF59wAwQA
F6CwAwQBF6ogMA4EAgACMAgDBgQmAv5qADBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAVy+2w41ywOtk9uZKr
vSA7ADpVG6bpT/0d0J8HgMDZREtBXkKS3dzNSSXqdaHchB1PGG41Rwu663WQhN2w
dJ5mj/sXyKd/dOCXhqHRsn5seed94R9GUU7v2twGHs6R2mHsxe/RGYoO3rOyrFJq
tfOIpwKb9xRzS54nKUXk+XAyH1PisXPCEu7lmAye1RX3+rHQBkH9Xn/vpGngpcBZ
zhwvTey3XxlX4vOiIJ4j4/eIgQ2tPJsC+Y/tCy3jIx1cj9z/PcUBSuNdn9w5BonC
vF2TS26QFfWjIBSxuWcrf0E7621vfDe7hp99etDYbQ5ySdw76RZLUsekjbEsH437
idoi
-----END CERTIFICATE-----
Generated at Tue Apr 29 23:31:50 2025 by rpki-client