Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/8b31b81d-fea4-39b5-ae00-10422f17363c.roa
File: 8b31b81d-fea4-39b5-ae00-10422f17363c.roa (raw, json)
Hash identifier: 6HXEZYgs/A+nVWdBPBv8aZY78TZekDv9YGNppzEeJhM=
Subject key identifier: F1:30:64:99:88:F6:39:71:88:1B:7F:7A:77:C0:25:75:36:CD:01:8F
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F432858487325AEAE1580D02D5C6BAC60
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/8b31b81d-fea4-39b5-ae00-10422f17363c.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 16509
IP address blocks: 173.199.8.0/23 maxlen: 24
173.199.29.0/24 maxlen: 24
173.199.38.0/24 maxlen: 24
173.199.56.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:ae:ae:15:80:d0:2d:5c:6b:ac:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=c388a121-d852-4dbf-958d-fab0212f4a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:86:b5:ba:47:b1:36:7a:40:d4:c5:fd:98:0b:
26:c0:df:ed:0c:5f:23:f7:e0:43:c5:af:2f:7d:31:
e3:b4:55:93:e7:15:9c:26:5b:0c:41:c6:65:bc:84:
79:48:e8:de:b0:9e:dd:76:2a:98:b2:18:73:cf:02:
87:50:47:21:8d:1a:41:3e:60:00:92:a2:df:b9:cd:
e7:4d:89:57:fd:87:9f:af:d7:df:5d:d3:08:8f:67:
89:92:e4:3e:58:3b:9d:44:3e:03:cc:2c:7f:36:51:
fc:7d:76:f5:7f:44:c1:f2:bc:59:01:35:02:a9:d9:
aa:d5:2f:9c:ff:a2:b4:ef:29:1e:53:53:c3:12:6f:
03:b9:98:65:5e:c5:07:fb:c8:b8:25:e9:ea:04:42:
62:28:b7:c7:fa:b0:7a:d2:08:1c:8b:3c:f7:11:b2:
91:c9:fb:a2:e1:71:a6:03:47:b0:9e:a3:eb:06:ba:
89:19:a0:18:a0:95:5f:d2:4b:e5:00:d1:fa:80:17:
8b:00:b8:ab:17:9b:9d:d3:4c:81:69:cb:85:ec:47:
1f:ee:0e:f8:b1:10:d8:39:86:57:52:c1:54:7f:f0:
02:59:47:ca:9f:30:ae:f5:ce:ca:10:11:11:11:c3:
09:a8:ea:c8:50:e2:16:07:a6:5c:ca:e7:54:e4:e3:
91:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:30:64:99:88:F6:39:71:88:1B:7F:7A:77:C0:25:75:36:CD:01:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/8b31b81d-fea4-39b5-ae00-10422f17363c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
173.199.8.0/23
173.199.29.0/24
173.199.38.0/24
173.199.56.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:e9:3e:7d:cd:b4:a9:d1:4e:72:6b:b0:27:af:ab:d1:7c:90:
08:11:f2:59:f6:e5:67:d9:1d:4d:96:8f:4b:ae:db:79:0a:2d:
d2:83:42:ae:1e:72:b1:82:ab:31:96:b1:40:c8:df:2b:49:8b:
a9:b4:c5:27:87:d9:c4:17:d1:6d:3e:69:94:49:27:e5:00:15:
56:92:57:8c:39:3f:49:a1:78:5c:f6:60:43:76:4f:03:ac:4b:
b6:c4:e5:1f:d3:21:4a:8d:29:33:ae:1b:d9:dd:a0:e9:40:de:
c0:b4:d8:fb:cf:94:dd:57:72:13:8c:e6:ce:18:eb:bb:4a:ad:
db:bd:95:6a:fa:68:2f:7e:7e:e5:37:e0:eb:5b:ee:fd:21:d4:
1c:32:92:e1:f6:25:7b:97:19:6e:ca:98:b9:be:a8:e6:68:73:
a0:8b:da:9f:5c:5c:c1:fa:40:3b:45:25:92:9f:1e:4a:a1:6f:
98:32:bd:ff:c6:de:39:85:14:8d:2a:e2:f9:b2:90:d4:34:d3:
92:ee:01:a5:7f:a2:83:b7:4d:07:bc:1f:de:03:da:2c:2b:bc:
f1:3f:2f:47:c5:11:e7:73:a5:63:99:83:2c:b6:02:ab:6a:14:
0d:c1:39:d2:86:9a:50:a8:88:6b:95:09:11:67:f9:e5:4d:02:
ba:a0:2b:d4
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEhzJa6uFYDQLVxrrGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy
OWJmMB4XDTI1MDEwNjAyMDA0MFoXDTI1MDQwNjAxMDA0MFowLzEtMCsGA1UEAxMk
YzM4OGExMjEtZDg1Mi00ZGJmLTk1OGQtZmFiMDIxMmY0YTdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYa1ukexNnpA1MX9mAsmwN/tDF8j9+BDxa8v
fTHjtFWT5xWcJlsMQcZlvIR5SOjesJ7ddiqYshhzzwKHUEchjRpBPmAAkqLfuc3n
TYlX/Yefr9ffXdMIj2eJkuQ+WDudRD4DzCx/NlH8fXb1f0TB8rxZATUCqdmq1S+c
/6K07ykeU1PDEm8DuZhlXsUH+8i4JenqBEJiKLfH+rB60ggcizz3EbKRyfui4XGm
A0ewnqPrBrqJGaAYoJVf0kvlANH6gBeLALirF5ud00yBacuF7Ecf7g74sRDYOYZX
UsFUf/ACWUfKnzCu9c7KEBEREcMJqOrIUOIWB6ZcyudU5OOR6QIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFPEwZJmI9jlxiBt/enfAJXU2zQGPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2
ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvOGIzMWI4MWQtZmVhNC0z
OWI1LWFlMDAtMTA0MjJmMTczNjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx
NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4
MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx
YzIxODI5YmYuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBrccIAwQA
rccdAwQArccmAwQBrcc4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAMfpPn3NtKnRTnJrsCevq9F8kAgR8ln2
5WfZHU2Wj0uu23kKLdKDQq4ecrGCqzGWsUDI3ytJi6m0xSeH2cQX0W0+aZRJJ+UA
FVaSV4w5P0mheFz2YEN2TwOsS7bE5R/TIUqNKTOuG9ndoOlA3sC02PvPlN1XchOM
5s4Y67tKrdu9lWr6aC9+fuU34Otb7v0h1BwykuH2JXuXGW7KmLm+qOZoc6CL2p9c
XMH6QDtFJZKfHkqhb5gyvf/G3jmFFI0q4vmykNQ005LuAaV/ooO3TQe8H94D2iwr
vPE/L0fFEedzpWOZgyy2AqtqFA3BOdKGmlCoiGuVCRFn+eVNArqgK9Q=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:06:45 2025 by rpki-client