Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/34d5b2cf-fe8c-3a23-80b2-aac6d65f948e.roa
File: 34d5b2cf-fe8c-3a23-80b2-aac6d65f948e.roa (raw, json)
Hash identifier: LFWWRvdaZtFQ5vP1rQbmFznvJK9gFx9aYZCXMuT1qaM=
Subject key identifier: 4C:66:6D:8B:06:F8:46:5C:56:8D:BA:05:62:14:8F:9C:C0:53:DB:18
Certificate issuer: /CN=6d54b36a-c725-4c18-93e1-825afc645e2c
Certificate serial: 010D0C9F4328584832F0296361C230B9953E00C0
Authority key identifier: 38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/34d5b2cf-fe8c-3a23-80b2-aac6d65f948e.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 396982
IP address blocks: 23.227.56.0/24 maxlen: 24
23.227.57.0/24 maxlen: 24
23.227.58.0/24 maxlen: 24
23.227.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:29:63:61:c2:30:b9:95:3e:00:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d54b36a-c725-4c18-93e1-825afc645e2c
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=c034effd-60e9-473d-8353-b395311d68b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c8:7d:45:89:ea:7d:c9:89:fe:37:5b:8a:0a:
c1:d6:6e:b0:99:be:14:ff:07:14:88:f2:c8:37:fa:
70:b0:ae:87:4d:fc:c5:02:ca:0a:d4:1c:27:cd:a8:
b0:29:81:eb:f4:44:98:f5:f5:73:b6:5b:0a:61:37:
1a:1d:8a:39:27:52:8a:41:36:d0:3a:5d:c4:77:cf:
58:23:d7:6c:c5:ff:ca:9a:95:47:82:1d:13:7d:b7:
a6:68:02:15:5a:b1:7a:27:bd:e5:1e:09:00:3c:9d:
05:0b:5f:c9:f5:60:0c:3b:1b:90:8f:17:c2:a9:92:
7d:a6:8d:d6:03:7c:9e:33:9f:60:35:5d:8e:b8:d1:
9c:f6:f9:ad:c4:f5:5c:b1:44:7c:70:8c:fc:28:61:
ab:de:96:49:f4:d8:04:8e:53:82:aa:63:38:c6:c3:
fe:3e:20:af:21:86:5f:3c:c8:9c:66:c2:40:81:43:
65:dc:50:0c:79:c4:8e:14:a3:92:10:c8:77:da:80:
b0:e4:c0:fd:ea:a0:20:db:c6:83:90:e9:b9:17:b4:
39:d1:42:82:bf:e6:fe:aa:5d:dc:27:88:a2:8d:23:
8c:81:bf:12:7b:b7:e1:da:30:4d:57:da:7e:12:7f:
68:91:7e:d9:47:64:7a:8d:eb:b1:65:42:7b:fe:ac:
d9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:66:6D:8B:06:F8:46:5C:56:8D:BA:05:62:14:8F:9C:C0:53:DB:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/34d5b2cf-fe8c-3a23-80b2-aac6d65f948e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl
X509v3 Authority Key Identifier:
keyid:38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.227.56.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:93:4b:f6:86:1c:99:30:03:df:d2:85:53:e7:ae:d5:78:aa:
99:03:41:e6:7a:c8:20:ed:01:87:fd:db:24:e8:e2:86:f6:64:
f1:55:24:17:4d:4f:6c:e1:43:66:96:6a:90:e0:6c:ba:75:ec:
22:45:71:d4:fb:3f:b2:e9:39:61:19:58:23:24:11:7f:af:ce:
44:ba:4b:51:10:04:82:04:ac:6b:ab:90:8d:61:cc:ef:7b:c0:
17:eb:72:d9:e5:4d:85:96:81:21:51:fb:be:18:c8:07:6b:c5:
bb:1f:26:46:9c:56:f5:a7:a9:22:23:2a:96:23:f5:ea:ac:1f:
18:c6:de:aa:fc:1d:71:4f:7e:88:6f:a3:1a:00:90:0b:6d:d4:
63:4e:22:1c:fa:50:51:66:7c:be:44:ac:88:6b:05:c9:1c:f4:
30:3e:ab:19:9c:c6:bd:fd:b1:32:e6:7b:15:2d:3b:50:b5:fb:
08:4e:1c:e2:1b:3e:d0:db:84:42:39:d6:45:f1:49:01:93:1e:
f2:c4:c2:fd:8d:b8:07:db:f2:4f:6f:0c:13:1c:7a:71:6e:b1:
4f:ef:3d:35:24:c8:ef:62:90:a1:00:b8:d1:0b:e8:ba:9c:73:
51:d8:cb:d5:c2:a1:5d:ef:6c:ec:61:16:61:26:ce:03:29:cd:
1d:e4:c4:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8CljYcIwuZU+AMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ1NGIzNmEtYzcyNS00YzE4LTkzZTEtODI1YWZjNjQ1
ZTJjMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
YzAzNGVmZmQtNjBlOS00NzNkLTgzNTMtYjM5NTMxMWQ2OGI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Mh9RYnqfcmJ/jdbigrB1m6wmb4U/wcUiPLI
N/pwsK6HTfzFAsoK1BwnzaiwKYHr9ESY9fVztlsKYTcaHYo5J1KKQTbQOl3Ed89Y
I9dsxf/KmpVHgh0TfbemaAIVWrF6J73lHgkAPJ0FC1/J9WAMOxuQjxfCqZJ9po3W
A3yeM59gNV2OuNGc9vmtxPVcsUR8cIz8KGGr3pZJ9NgEjlOCqmM4xsP+PiCvIYZf
PMicZsJAgUNl3FAMecSOFKOSEMh32oCw5MD96qAg28aDkOm5F7Q50UKCv+b+ql3c
J4iijSOMgb8Se7fh2jBNV9p+En9okX7ZR2R6jeuxZUJ7/qzZKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFExmbYsG+EZcVo26BWIUj5zAU9sYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82ZDU0
YjM2YS1jNzI1LTRjMTgtOTNlMS04MjVhZmM2NDVlMmMvMzRkNWIyY2YtZmU4Yy0z
YTIzLTgwYjItYWFjNmQ2NWY5NDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmQ1NGIzNmEtYzcyNS00YzE4LTkz
ZTEtODI1YWZjNjQ1ZTJjLzZkNTRiMzZhLWM3MjUtNGMxOC05M2UxLTgyNWFmYzY0
NWUyYy5jcmwwHwYDVR0jBBgwFoAUOFjVJZUYEHsaUpZxvbiCe8GGfbIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82ZDU0YjM2YS1jNzI1LTRjMTgtOTNlMS04MjVh
ZmM2NDVlMmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+M4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADOTS/aGHJkwA9/ShVPnrtV4qpkDQeZ6yCDtAYf92yTo4ob2ZPFVJBdN
T2zhQ2aWapDgbLp17CJFcdT7P7LpOWEZWCMkEX+vzkS6S1EQBIIErGurkI1hzO97
wBfrctnlTYWWgSFR+74YyAdrxbsfJkacVvWnqSIjKpYj9eqsHxjG3qr8HXFPfohv
oxoAkAtt1GNOIhz6UFFmfL5ErIhrBckc9DA+qxmcxr39sTLmexUtO1C1+whOHOIb
PtDbhEI51kXxSQGTHvLEwv2NuAfb8k9vDBMcenFusU/vPTUkyO9ikKEAuNEL6Lqc
c1HYy9XCoV3vbOxhFmEmzgMpzR3kxMU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:17:07 2025 by rpki-client