Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/8ec81666-b29e-37f5-93fa-ec08312dd538.roa
File: 8ec81666-b29e-37f5-93fa-ec08312dd538.roa (raw, json)
Hash identifier: yR7uses75kwVvL7iOsOdeY0KRxCUJt8HPWPDppFYp+E=
Subject key identifier: 22:90:94:B1:9F:DA:0B:33:CC:26:B6:E4:FF:05:09:7F:B0:6E:49:7F
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F43285848388549E33A6DA58F65DA9600
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/8ec81666-b29e-37f5-93fa-ec08312dd538.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 21866
IP address blocks: 23.239.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:49:e3:3a:6d:a5:8f:65:da:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=48c859f3-559a-437d-b8df-ba9dbd50948e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:be:70:ce:29:d7:e1:ea:39:dd:b9:1c:69:e4:
2e:bc:06:23:9c:ba:27:4e:ca:23:13:e2:88:1b:27:
5c:4d:eb:12:e3:0a:55:ac:ae:cf:5b:c0:76:49:da:
05:16:21:76:45:5e:b7:81:11:3f:df:32:11:ce:07:
40:66:72:b9:d0:67:65:52:a2:ad:34:ad:ff:6c:98:
64:64:36:0a:38:8e:2a:36:66:20:de:c0:1f:67:7f:
02:f8:cc:9c:49:37:cc:77:4e:34:11:49:c9:23:d4:
87:92:ac:aa:32:5f:c0:b8:24:cf:4d:d1:d0:9c:09:
e5:b9:2f:74:4e:1b:28:7a:80:fa:c9:b0:5d:d0:93:
45:b5:b7:88:30:d7:fb:12:bd:1b:dc:db:39:34:b1:
dc:cb:0c:ea:23:29:6f:a2:a2:ee:4d:7d:fc:2e:7a:
39:ba:d3:57:f3:44:d1:b2:47:5c:15:69:aa:4d:1f:
89:85:23:63:98:cd:2f:7c:34:dd:51:a5:6c:68:29:
78:ad:ab:c5:ad:b2:19:d6:78:a9:40:49:c1:94:94:
49:08:ce:ef:dc:49:0e:a8:d1:42:44:e4:56:62:ee:
f7:fa:1c:fc:e4:4d:39:9c:b5:10:87:f6:5d:a0:03:
f1:d6:43:8e:36:dc:01:f5:51:25:d6:63:31:f6:20:
bd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:90:94:B1:9F:DA:0B:33:CC:26:B6:E4:FF:05:09:7F:B0:6E:49:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/8ec81666-b29e-37f5-93fa-ec08312dd538.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
23.239.224.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:68:52:3f:dc:49:e0:10:8c:8d:ce:30:60:78:09:1f:63:48:
ed:fe:ac:e6:92:cd:0e:f5:32:de:47:cf:5f:61:ed:53:42:9e:
e7:24:26:5b:df:aa:b6:5b:d3:4e:d0:b6:ef:ae:ac:c3:e8:6b:
8d:b0:fa:13:8c:db:ff:fc:32:f5:c9:22:10:95:a0:63:87:37:
55:c7:99:63:39:83:c7:94:df:55:52:e5:e7:21:15:90:94:93:
ea:27:bf:b6:be:b8:a2:86:17:47:af:5b:89:b9:e5:21:cf:f4:
b1:b1:48:cf:d9:41:2e:59:26:d9:ce:5f:0a:1e:f3:0f:53:83:
92:42:08:db:77:74:19:04:16:92:eb:50:f6:04:b6:e8:f0:7c:
2b:aa:03:ee:7d:6f:c7:25:25:74:92:df:5e:9b:42:d2:a4:3f:
6c:a8:43:5e:f0:b1:45:17:b8:34:ce:69:40:fb:51:09:02:91:
e2:ec:90:3d:80:0e:8e:04:54:ab:72:1f:c6:e1:45:b6:1a:e3:
68:16:f2:6f:8d:30:80:c0:9c:a1:f3:44:ef:2d:e5:6e:bb:29:
2c:66:96:5d:7c:d1:f2:b2:23:33:cb:ed:8d:2e:b2:7d:74:6f:
8b:59:c8:8d:9a:4e:01:9c:2b:f2:16:af:03:6a:96:83:b4:2f:
8b:1b:63:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg4hUnjOm2lj2XalgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy
OWJmMB4XDTI0MTIxNjAyMDAzOVoXDTI1MDMxNjAxMDAzOVowLzEtMCsGA1UEAxMk
NDhjODU5ZjMtNTU5YS00MzdkLWI4ZGYtYmE5ZGJkNTA5NDhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo75wzinX4eo53bkcaeQuvAYjnLonTsojE+KI
GydcTesS4wpVrK7PW8B2SdoFFiF2RV63gRE/3zIRzgdAZnK50GdlUqKtNK3/bJhk
ZDYKOI4qNmYg3sAfZ38C+MycSTfMd040EUnJI9SHkqyqMl/AuCTPTdHQnAnluS90
ThsoeoD6ybBd0JNFtbeIMNf7Er0b3Ns5NLHcywzqIylvoqLuTX38Lno5utNX80TR
skdcFWmqTR+JhSNjmM0vfDTdUaVsaCl4ravFrbIZ1nipQEnBlJRJCM7v3EkOqNFC
RORWYu73+hz85E05nLUQh/ZdoAPx1kOONtwB9VEl1mMx9iC9UwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCKQlLGf2gszzCa25P8FCX+wbkl/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2
ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvOGVjODE2NjYtYjI5ZS0z
N2Y1LTkzZmEtZWMwODMxMmRkNTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx
NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4
MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx
YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+/gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMdoUj/cSeAQjI3OMGB4CR9jSO3+rOaSzQ71Mt5Hz19h7VNCnuckJlvf
qrZb007Qtu+urMPoa42w+hOM2//8MvXJIhCVoGOHN1XHmWM5g8eU31VS5echFZCU
k+onv7a+uKKGF0evW4m55SHP9LGxSM/ZQS5ZJtnOXwoe8w9Tg5JCCNt3dBkEFpLr
UPYEtujwfCuqA+59b8clJXSS316bQtKkP2yoQ17wsUUXuDTOaUD7UQkCkeLskD2A
Do4EVKtyH8bhRbYa42gW8m+NMIDAnKHzRO8t5W67KSxmll180fKyIzPL7Y0usn10
b4tZyI2aTgGcK/IWrwNqloO0L4sbYyo=
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:36:33 2025 by rpki-client