Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1a058e05-5d24-38e1-8868-0e2b4b598073.roa
File: 1a058e05-5d24-38e1-8868-0e2b4b598073.roa (raw, json)
Hash identifier: qxj0slwLJmkwu2iQjjVCgm7lBU2fy84zxv9jAGtf8gs=
Subject key identifier: 19:A2:8B:9E:2B:36:2F:24:ED:FD:75:75:D8:9D:1D:09:80:0F:45:2E
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F432858483E1AA483B6681ED842CD2500
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1a058e05-5d24-38e1-8868-0e2b4b598073.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 1239
IP address blocks: 23.237.198.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:a4:83:b6:68:1e:d8:42:cd:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=9f6e1c34-56de-4eb8-b2fb-9b76323a7115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a0:b0:9e:dc:cd:5f:0d:e0:2a:67:f9:6e:66:
f5:b9:a4:07:8c:f3:44:10:b6:98:8c:0e:7f:9f:db:
4d:d4:a3:fd:07:5d:8d:42:5a:ed:40:14:dd:e8:bf:
72:8e:61:4a:4d:f0:92:45:e1:6f:ee:22:c9:fc:45:
b4:4e:2b:5c:f7:74:a4:82:36:13:2c:fe:2f:36:6e:
11:86:d2:a5:30:07:e8:4e:5b:9a:5f:db:0a:d2:47:
ed:b6:aa:78:1a:2d:0c:1d:c1:66:f5:49:d4:1b:57:
7a:20:06:11:20:4d:2f:b2:96:99:02:5b:e6:29:be:
f4:a0:08:d1:75:40:ca:95:3d:86:d8:68:0c:4d:58:
a2:c9:bc:8d:04:73:93:30:31:e9:75:9d:0f:5a:81:
b5:84:fe:55:52:35:c7:f5:98:f7:34:41:55:4c:ce:
06:c4:e9:f1:95:a8:ee:7e:04:c7:bf:04:e0:b6:2a:
39:c5:db:a9:70:86:ba:fd:d0:cb:10:22:16:91:74:
48:ce:50:9d:ea:0d:49:82:4f:b6:c0:5c:fe:72:23:
78:37:c4:85:48:95:a0:ea:6c:c0:97:8e:48:78:bb:
09:f0:d5:1d:ec:a5:6e:0c:53:80:02:de:3f:95:f1:
90:38:74:d5:23:54:a7:6a:46:ee:b6:c5:8d:84:8d:
ec:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A2:8B:9E:2B:36:2F:24:ED:FD:75:75:D8:9D:1D:09:80:0F:45:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1a058e05-5d24-38e1-8868-0e2b4b598073.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
23.237.198.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:c4:e4:11:0e:21:c1:cf:9f:35:47:94:86:41:79:90:79:94:
c2:1a:65:97:56:43:d8:1c:0c:a9:98:c0:56:26:74:52:b7:ca:
94:2a:b0:e8:c2:3b:b1:ad:18:4f:7f:6c:9b:95:94:ca:94:a8:
2a:d2:f8:d2:e7:b7:4a:6b:4f:01:08:b6:3e:9c:05:de:24:26:
37:86:3f:c0:e4:a3:fa:f9:34:c0:ed:33:16:4b:5b:b8:29:39:
c5:00:53:61:e6:40:d5:c9:4b:ac:3c:2c:97:68:e8:a8:1b:4e:
2d:4d:05:76:64:d4:56:c6:e3:66:40:ee:e9:cd:9f:ec:98:e4:
4e:ca:1b:f3:d0:57:f1:58:fd:ee:12:4d:bd:33:e0:1e:c5:a6:
72:50:52:55:c0:e9:51:c2:76:9f:f7:49:78:56:4b:93:14:77:
f7:99:37:a0:49:bc:9a:13:17:06:26:bd:6f:23:41:4b:58:00:
a8:c6:0f:32:94:3b:7e:48:0b:bb:de:7b:70:7a:ce:4e:61:21:
91:c7:7d:2f:b4:ca:26:6f:4c:3c:47:de:e2:50:6d:9e:d3:41:
91:61:d3:7e:ff:80:90:ab:2a:12:14:f2:f6:04:69:18:c5:9b:
63:b4:28:57:23:71:76:63:d6:06:0e:6d:cc:41:a5:4b:c2:1f:
6d:76:e7:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+GqSDtmge2ELNJQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk
OWY2ZTFjMzQtNTZkZS00ZWI4LWIyZmItOWI3NjMyM2E3MTE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aCwntzNXw3gKmf5bmb1uaQHjPNEELaYjA5/
n9tN1KP9B12NQlrtQBTd6L9yjmFKTfCSReFv7iLJ/EW0Titc93SkgjYTLP4vNm4R
htKlMAfoTluaX9sK0kfttqp4Gi0MHcFm9UnUG1d6IAYRIE0vspaZAlvmKb70oAjR
dUDKlT2G2GgMTViiybyNBHOTMDHpdZ0PWoG1hP5VUjXH9Zj3NEFVTM4GxOnxlaju
fgTHvwTgtio5xdupcIa6/dDLECIWkXRIzlCd6g1Jgk+2wFz+ciN4N8SFSJWg6mzA
l45IeLsJ8NUd7KVuDFOAAt4/lfGQOHTVI1SnakbutsWNhI3sYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBmii54rNi8k7f11ddidHQmAD0UuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMWEwNThlMDUtNWQyNC0z
OGUxLTg4NjgtMGUyYjRiNTk4MDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+3GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFLE5BEOIcHPnzVHlIZBeZB5lMIaZZdWQ9gcDKmYwFYmdFK3ypQqsOjC
O7GtGE9/bJuVlMqUqCrS+NLnt0prTwEItj6cBd4kJjeGP8Dko/r5NMDtMxZLW7gp
OcUAU2HmQNXJS6w8LJdo6KgbTi1NBXZk1FbG42ZA7unNn+yY5E7KG/PQV/FY/e4S
Tb0z4B7FpnJQUlXA6VHCdp/3SXhWS5MUd/eZN6BJvJoTFwYmvW8jQUtYAKjGDzKU
O35IC7vee3B6zk5hIZHHfS+0yiZvTDxH3uJQbZ7TQZFh037/gJCrKhIU8vYEaRjF
m2O0KFcjcXZj1gYObcxBpUvCH2125wA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:21 2025 by rpki-client