Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/ed3dafb9-fe19-377d-80aa-0e2a9b479a36.roa
File: ed3dafb9-fe19-377d-80aa-0e2a9b479a36.roa (raw, json)
Hash identifier: RbO0Uu0j9cNFs89Aw35rTdkit2g5KZ9hafh4sm2QPYQ=
Subject key identifier: 04:DD:7A:B5:F2:5B:B3:42:0C:33:64:75:1E:31:4F:57:AE:48:B5:72
Certificate issuer: /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial: 010D0C9F43285848748B1B1FC11669A57416F5C0
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/ed3dafb9-fe19-377d-80aa-0e2a9b479a36.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 17045
IP address blocks: 23.153.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:1b:1f:c1:16:69:a5:74:16:f5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=b25630d4-1a53-475c-b9a0-4b378b5663dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7a:84:f6:e5:be:0d:d8:d9:a2:0f:61:c4:e1:
48:61:b9:0e:ba:3b:10:fd:48:5c:a3:10:2c:a2:46:
25:86:f8:6e:5d:0a:82:66:9a:55:7c:ee:f7:a3:6f:
74:bb:70:72:89:dc:79:1d:af:10:02:bd:9b:51:7e:
fa:57:93:eb:de:75:57:2f:62:69:f6:a7:59:d1:ed:
b7:0e:5e:ac:76:43:5d:95:29:2c:59:b5:16:72:1d:
2b:6b:c0:4b:37:91:e0:4f:6b:6d:c1:7e:f6:0d:cd:
4e:75:05:c6:76:9c:8b:9b:9a:bd:ab:0c:39:cf:37:
1f:da:23:06:b8:4c:7d:85:9d:5d:99:65:ba:a3:99:
f1:cf:e1:70:3e:db:a0:01:3f:aa:8e:b2:32:0c:de:
97:2a:a7:b6:88:cd:1c:20:68:ea:cd:f0:8f:3e:ca:
10:a0:46:91:b6:45:9b:c8:7d:50:70:d0:4e:5a:da:
2c:ab:6c:07:cb:5b:50:74:83:01:7d:9f:76:c0:db:
ef:72:1f:1f:b6:9f:0c:b8:2b:07:35:44:ee:9c:30:
76:e2:b0:d6:ef:54:d9:a5:73:78:e5:66:cf:b2:ea:
7b:ab:f0:13:f7:07:e4:b2:c7:02:51:d2:e9:db:f1:
ad:9a:43:65:e9:4e:12:21:55:91:a5:79:5a:06:ce:
8c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DD:7A:B5:F2:5B:B3:42:0C:33:64:75:1E:31:4F:57:AE:48:B5:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/ed3dafb9-fe19-377d-80aa-0e2a9b479a36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
X509v3 Authority Key Identifier:
keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.153.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:17:6c:00:b1:b7:9f:e0:91:57:03:53:29:1d:dd:32:58:1b:
19:1b:e3:2f:fd:26:70:f7:94:02:e0:34:78:06:96:34:48:dd:
c5:a3:2a:86:e9:ff:09:79:33:17:de:c0:d5:c9:cb:38:7a:29:
60:54:4e:8c:78:78:a6:83:59:fd:d8:15:ac:21:b0:9b:c8:31:
3f:da:23:13:1f:bd:d8:38:ce:b3:b7:36:44:59:53:39:6d:80:
5e:ff:db:61:c2:85:60:76:da:67:46:9d:99:f7:8f:61:6f:71:
e7:79:f1:ac:08:18:50:0e:35:3c:44:ba:ea:cf:dc:8e:ba:01:
5c:ca:a3:83:9b:dc:d1:37:f0:6f:48:e5:a0:d1:ce:9f:42:df:
62:ff:de:9e:9b:e2:36:3f:23:9d:96:a9:2a:9f:a3:1d:eb:1d:
13:97:44:3a:e4:df:ba:fb:e5:40:06:36:fd:81:85:f7:46:2c:
95:be:c0:38:4c:97:44:0c:9f:44:68:66:2d:ee:97:7d:56:8b:
92:0f:56:e1:26:76:23:bb:21:f4:54:89:27:f1:1f:2a:75:55:
cd:68:a8:ff:74:8e:83:50:64:02:d0:7d:cd:5c:69:3b:e8:18:
a7:24:d2:cc:4e:62:d8:74:8b:de:46:ac:ab:ac:76:b8:82:4c:
5e:70:f4:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh0ixsfwRZppXQW9cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMzNzM5YTgtNGM4ZC00N2IwLTg0MTMtNzdlMjdhOTY3
MDBjMB4XDTI1MDEwNjE0MDA1MloXDTI1MDQwNjEzMDA1MlowLzEtMCsGA1UEAxMk
YjI1NjMwZDQtMWE1My00NzVjLWI5YTAtNGIzNzhiNTY2M2RkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHqE9uW+DdjZog9hxOFIYbkOujsQ/UhcoxAs
okYlhvhuXQqCZppVfO73o290u3Byidx5Ha8QAr2bUX76V5Pr3nVXL2Jp9qdZ0e23
Dl6sdkNdlSksWbUWch0ra8BLN5HgT2ttwX72Dc1OdQXGdpyLm5q9qww5zzcf2iMG
uEx9hZ1dmWW6o5nxz+FwPtugAT+qjrIyDN6XKqe2iM0cIGjqzfCPPsoQoEaRtkWb
yH1QcNBOWtosq2wHy1tQdIMBfZ92wNvvch8ftp8MuCsHNUTunDB24rDW71TZpXN4
5WbPsup7q/AT9wfksscCUdLp2/GtmkNl6U4SIVWRpXlaBs6MRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFATderXyW7NCDDNkdR4xT1euSLVyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85YzM3
MzlhOC00YzhkLTQ3YjAtODQxMy03N2UyN2E5NjcwMGMvZWQzZGFmYjktZmUxOS0z
NzdkLTgwYWEtMGUyYTliNDc5YTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWMzNzM5YTgtNGM4ZC00N2IwLTg0
MTMtNzdlMjdhOTY3MDBjLzljMzczOWE4LTRjOGQtNDdiMC04NDEzLTc3ZTI3YTk2
NzAwYy5jcmwwHwYDVR0jBBgwFoAU+wIdgT8j/hKbg5O+tBSlJ6W9WXkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85YzM3MzlhOC00YzhkLTQ3YjAtODQxMy03N2Uy
N2E5NjcwMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5nwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE0XbACxt5/gkVcDUykd3TJYGxkb4y/9JnD3lALgNHgGljRI3cWjKobp
/wl5MxfewNXJyzh6KWBUTox4eKaDWf3YFawhsJvIMT/aIxMfvdg4zrO3NkRZUzlt
gF7/22HChWB22mdGnZn3j2Fvced58awIGFAONTxEuurP3I66AVzKo4Ob3NE38G9I
5aDRzp9C32L/3p6b4jY/I52WqSqfox3rHROXRDrk37r75UAGNv2BhfdGLJW+wDhM
l0QMn0RoZi3ul31Wi5IPVuEmdiO7IfRUiSfxHyp1Vc1oqP90joNQZALQfc1caTvo
GKck0sxOYth0i95GrKusdriCTF5w9F8=
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:52:55 2025 by rpki-client