Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/06e68cbb-a8d4-3468-8f6a-ada225c1f954.roa
File: 06e68cbb-a8d4-3468-8f6a-ada225c1f954.roa (raw, json)
Hash identifier: +NohzXk9n7PsA+IqRFK6J4b/u4+Z8vhlcLJmSJyaUBA=
Subject key identifier: 40:C4:DB:34:3A:8A:90:2F:04:7C:F8:DA:30:D3:22:A3:0D:0A:36:22
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F432858490CB16AC1CB69EFB160A52700
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/06e68cbb-a8d4-3468-8f6a-ada225c1f954.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 32696
IP address blocks: 8.22.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:6a:c1:cb:69:ef:b1:60:a5:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=1bef09fc-8324-491a-996e-6296f1cc4de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a2:10:1e:58:9c:70:78:85:bf:1e:0c:cb:ef:
16:a8:ab:59:3f:43:2a:ce:a8:4d:57:62:09:7f:d5:
07:f4:90:e5:54:96:61:4c:1a:cc:3a:88:3a:53:f9:
45:20:5b:27:dd:3b:a7:b0:63:05:60:ad:79:5d:cb:
46:4c:7e:61:95:74:15:ab:9e:88:f7:43:86:40:9f:
bb:a7:6e:fb:59:8c:59:c5:46:e0:d4:ab:d6:1a:9a:
90:ef:c5:3b:4d:a1:b8:e7:11:91:88:62:2d:f4:7b:
9b:56:7d:51:46:8d:98:fd:d6:ef:65:31:21:52:f9:
56:56:6c:ba:23:cf:33:9f:b2:cf:cc:8f:b5:74:de:
84:51:24:8e:af:ea:0c:3f:2c:09:51:e3:8d:0c:5d:
4f:77:fb:73:a2:d1:8c:9c:35:97:63:6a:df:b2:d2:
0c:01:97:1e:5e:35:27:3c:74:f4:64:02:0c:75:3c:
e1:c4:6b:a1:37:14:20:b2:61:41:09:65:c2:1d:a6:
b5:b2:b2:52:d0:b0:47:42:f4:35:55:62:07:44:3b:
62:6a:87:59:b3:38:c1:90:5b:60:2a:cd:90:fe:a1:
ba:2e:9f:7e:0d:3c:0f:47:fc:83:05:42:e2:ef:ae:
9a:49:af:6c:ec:ad:d5:9b:fc:54:4d:55:53:01:d4:
b3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C4:DB:34:3A:8A:90:2F:04:7C:F8:DA:30:D3:22:A3:0D:0A:36:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/06e68cbb-a8d4-3468-8f6a-ada225c1f954.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.22.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:b6:14:b6:2e:77:74:0e:72:47:52:7e:1e:8b:20:c7:69:de:
2f:ec:82:f2:1d:71:02:d8:cc:fe:31:e1:f0:a9:ed:a6:71:41:
df:89:0b:7c:f5:d1:0b:bd:c7:56:2d:03:f0:2c:db:c4:92:bd:
06:58:7b:94:06:8a:76:24:03:20:5a:61:fe:a3:f6:3c:cb:42:
7a:e3:85:a9:1d:17:e4:a1:8e:a2:20:e8:59:9b:21:ed:d9:3b:
ef:73:4f:ff:c7:57:9a:71:3a:3c:2d:b3:a3:c9:1d:ae:c0:22:
27:b1:4d:66:b0:77:19:e8:99:c9:1c:94:80:7b:fe:72:e3:88:
ef:68:34:79:99:6d:b5:07:dc:81:0f:84:74:24:d1:c4:f9:f3:
c5:f9:e6:d7:4a:1c:c4:97:d3:fe:f5:00:af:a9:09:cc:87:f1:
4d:8f:51:23:d0:19:b7:21:79:a6:f0:cf:bc:e7:84:60:2a:87:
07:eb:f2:9e:22:bd:d8:b3:61:58:07:86:9e:c9:7d:fc:f2:b1:
a4:ca:39:8a:c5:d4:d6:9b:c4:59:fb:0f:cb:36:ab:cf:b5:19:
f7:06:2a:eb:9e:6c:d3:41:34:1a:64:11:6e:51:30:60:b0:6e:
42:62:93:2f:28:be:7a:a1:f0:e4:f7:38:b2:be:d6:59:30:a5:
59:3c:d8:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsWrBy2nvsWClJwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk
MWJlZjA5ZmMtODMyNC00OTFhLTk5NmUtNjI5NmYxY2M0ZGUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6IQHliccHiFvx4My+8WqKtZP0MqzqhNV2IJ
f9UH9JDlVJZhTBrMOog6U/lFIFsn3TunsGMFYK15XctGTH5hlXQVq56I90OGQJ+7
p277WYxZxUbg1KvWGpqQ78U7TaG45xGRiGIt9HubVn1RRo2Y/dbvZTEhUvlWVmy6
I88zn7LPzI+1dN6EUSSOr+oMPywJUeONDF1Pd/tzotGMnDWXY2rfstIMAZceXjUn
PHT0ZAIMdTzhxGuhNxQgsmFBCWXCHaa1srJS0LBHQvQ1VWIHRDtiaodZszjBkFtg
Ks2Q/qG6Lp9+DTwPR/yDBULi766aSa9s7K3Vm/xUTVVTAdSz9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEDE2zQ6ipAvBHz42jDTIqMNCjYiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMDZlNjhjYmItYThkNC0z
NDY4LThmNmEtYWRhMjI1YzFmOTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACBaoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACy2FLYud3QOckdSfh6LIMdp3i/sgvIdcQLYzP4x4fCp7aZxQd+JC3z1
0Qu9x1YtA/As28SSvQZYe5QGinYkAyBaYf6j9jzLQnrjhakdF+ShjqIg6FmbIe3Z
O+9zT//HV5pxOjwts6PJHa7AIiexTWawdxnomckclIB7/nLjiO9oNHmZbbUH3IEP
hHQk0cT588X55tdKHMSX0/71AK+pCcyH8U2PUSPQGbcheabwz7znhGAqhwfr8p4i
vdizYVgHhp7JffzysaTKOYrF1NabxFn7D8s2q8+1GfcGKuuebNNBNBpkEW5RMGCw
bkJiky8ovnqh8OT3OLK+1lkwpVk82AY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:55:40 2025 by rpki-client