Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/ba52e8f3-4173-36c0-84cb-87aadf3975ce.roa
File: ba52e8f3-4173-36c0-84cb-87aadf3975ce.roa (raw, json)
Hash identifier: XdKk256kYMc3n4TA6xRbdsmqKwSMfSwWu5ViPC5IC8c=
Subject key identifier: 1C:A4:C8:4F:71:91:C7:C1:9F:FF:9E:F4:2E:47:AA:5E:A3:7E:AC:6C
Certificate issuer: /CN=aa1697fd-d88f-4851-bbc3-2c19067535ee
Certificate serial: 010D0C9F43285848E59BC17B0D36C1B19CDBA840
Authority key identifier: 4A:AA:8F:DD:F6:00:A9:F3:52:CD:BC:87:BE:D5:E2:A1:C8:26:16:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/ba52e8f3-4173-36c0-84cb-87aadf3975ce.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 29802
IP address blocks: 23.133.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:c1:7b:0d:36:c1:b1:9c:db:a8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1697fd-d88f-4851-bbc3-2c19067535ee
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=02e7bdbe-fd05-42bc-b997-b3872188cd14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c0:5a:cf:ee:0e:fd:47:94:6f:43:d5:6f:a6:
b2:22:a2:bf:cb:8f:64:2e:b6:64:c4:6b:45:1b:ea:
dc:59:69:21:2b:aa:85:2b:0c:a5:fc:e4:16:a8:2a:
1c:ea:09:62:bb:99:7a:e9:02:6b:8c:60:ec:69:63:
a0:8e:d8:a9:aa:28:67:71:cb:44:03:ac:16:a6:58:
01:59:c9:49:d9:67:4a:3f:4e:3c:20:6e:ca:81:07:
50:59:ed:33:54:c9:84:3a:99:b6:73:0a:06:6b:a3:
35:6e:d6:2e:55:cd:b4:a6:c2:21:ec:93:31:92:0b:
b7:a8:17:f0:8d:ae:c5:f7:c4:df:e4:f7:5d:34:f2:
94:da:4d:f3:d5:c9:94:0f:1f:fc:3e:a8:30:4a:6b:
0b:d4:ec:94:2b:3d:a6:37:b1:d3:cd:d6:03:6a:61:
49:7a:61:c3:80:9d:1f:7f:6b:1e:50:05:24:c4:37:
33:a6:34:83:8c:63:f0:6b:48:24:58:9e:0d:59:f7:
b8:52:ac:da:0e:88:a8:06:fe:a0:bd:4d:8d:9d:9d:
82:e2:85:e7:34:37:70:e4:70:9a:ba:1b:9e:16:6d:
5c:94:60:46:5a:2c:d8:0f:73:86:4d:1e:a5:60:3c:
fc:88:34:5d:4a:ac:d6:0c:99:8b:00:24:cb:54:09:
c0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A4:C8:4F:71:91:C7:C1:9F:FF:9E:F4:2E:47:AA:5E:A3:7E:AC:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/ba52e8f3-4173-36c0-84cb-87aadf3975ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.crl
X509v3 Authority Key Identifier:
keyid:4A:AA:8F:DD:F6:00:A9:F3:52:CD:BC:87:BE:D5:E2:A1:C8:26:16:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:10:61:64:04:ba:4b:0b:b4:e3:f0:83:11:b7:53:6a:eb:f5:
41:5a:51:7a:e8:5b:a4:cc:f0:63:56:1e:5c:fe:1a:3e:77:e1:
38:20:d3:21:ca:05:3a:7b:4a:46:fc:b4:18:c2:6d:a9:8f:c0:
86:df:84:9d:b7:9d:61:d8:41:af:c2:42:92:b0:f2:1c:46:f1:
e6:d5:36:11:26:cb:60:26:39:93:c6:71:4a:8d:9f:6b:b0:02:
e8:50:da:46:1e:a8:f8:92:70:b5:2a:ec:0a:24:66:c4:d9:16:
67:b2:bd:6e:73:b5:fa:72:66:3e:c1:30:2d:37:4b:a0:4e:e6:
71:6f:19:57:14:36:a5:68:13:e9:c6:93:25:2d:03:49:e8:76:
d9:af:a9:ee:bd:17:23:e7:0e:95:91:24:d6:9a:2d:7d:6f:c7:
6b:14:39:4d:fd:99:cc:28:8d:86:05:10:39:d7:91:d0:fe:7a:
0c:ab:3c:a4:5c:d7:90:6e:18:57:7f:9b:b3:3f:be:c1:11:a7:
ee:72:c8:d6:41:af:c7:a1:2f:10:02:9f:6a:de:62:f3:e7:44:
a9:c8:6a:ef:b1:ba:4a:bc:54:22:db:ed:2a:d3:69:34:0d:51:
32:ec:f9:b0:b6:dc:e8:95:0d:7d:45:de:57:64:1d:7e:cd:bd:
2c:94:ae:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm8F7DTbBsZzbqEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWExNjk3ZmQtZDg4Zi00ODUxLWJiYzMtMmMxOTA2NzUz
NWVlMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk
MDJlN2JkYmUtZmQwNS00MmJjLWI5OTctYjM4NzIxODhjZDE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMBaz+4O/UeUb0PVb6ayIqK/y49kLrZkxGtF
G+rcWWkhK6qFKwyl/OQWqCoc6gliu5l66QJrjGDsaWOgjtipqihncctEA6wWplgB
WclJ2WdKP048IG7KgQdQWe0zVMmEOpm2cwoGa6M1btYuVc20psIh7JMxkgu3qBfw
ja7F98Tf5PddNPKU2k3z1cmUDx/8PqgwSmsL1OyUKz2mN7HTzdYDamFJemHDgJ0f
f2seUAUkxDczpjSDjGPwa0gkWJ4NWfe4UqzaDoioBv6gvU2NnZ2C4oXnNDdw5HCa
uhueFm1clGBGWizYD3OGTR6lYDz8iDRdSqzWDJmLACTLVAnAcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBykyE9xkcfBn/+e9C5Hql6jfqxsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTE2
OTdmZC1kODhmLTQ4NTEtYmJjMy0yYzE5MDY3NTM1ZWUvYmE1MmU4ZjMtNDE3My0z
NmMwLTg0Y2ItODdhYWRmMzk3NWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWExNjk3ZmQtZDg4Zi00ODUxLWJi
YzMtMmMxOTA2NzUzNWVlL2FhMTY5N2ZkLWQ4OGYtNDg1MS1iYmMzLTJjMTkwNjc1
MzVlZS5jcmwwHwYDVR0jBBgwFoAUSqqP3fYAqfNSzbyHvtXiocgmFskwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTE2OTdmZC1kODhmLTQ4NTEtYmJjMy0yYzE5
MDY3NTM1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4XgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACcQYWQEuksLtOPwgxG3U2rr9UFaUXroW6TM8GNWHlz+Gj534Tgg0yHK
BTp7Skb8tBjCbamPwIbfhJ23nWHYQa/CQpKw8hxG8ebVNhEmy2AmOZPGcUqNn2uw
AuhQ2kYeqPiScLUq7AokZsTZFmeyvW5ztfpyZj7BMC03S6BO5nFvGVcUNqVoE+nG
kyUtA0nodtmvqe69FyPnDpWRJNaaLX1vx2sUOU39mcwojYYFEDnXkdD+egyrPKRc
15BuGFd/m7M/vsERp+5yyNZBr8ehLxACn2reYvPnRKnIau+xukq8VCLb7SrTaTQN
UTLs+bC23OiVDX1F3ldkHX7NvSyUrmY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:28:28 2025 by rpki-client