Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/b8277726-63a8-3672-9533-c44e9d028822.roa
File: b8277726-63a8-3672-9533-c44e9d028822.roa (raw, json)
Hash identifier: XTZk/JLi3i3GWtVVQkkaxCnlfNcoEHCralBduxMDsso=
Subject key identifier: 97:C7:AE:9D:F1:AB:8A:EB:ED:BC:DC:97:78:69:4F:46:8E:1E:7D:A0
Certificate issuer: /CN=22d5f618-5b64-4804-88ef-e125dd90d7e2
Certificate serial: 010D0C9F432858494B6411ACA9765F49D15A17C0
Authority key identifier: 51:F3:B4:5D:AB:73:A3:7E:EC:9A:47:7B:05:74:05:B7:39:6D:E9:2C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/b8277726-63a8-3672-9533-c44e9d028822.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 988
IP address blocks: 23.138.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:11:ac:a9:76:5f:49:d1:5a:17:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d5f618-5b64-4804-88ef-e125dd90d7e2
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=3a394b97-7c04-4c6f-b44c-bb54cf39f593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:95:7c:79:00:98:f3:71:f3:c3:6e:a1:88:20:
8f:ed:f4:81:a9:03:9e:0d:09:60:26:ff:a5:3a:93:
d6:da:36:4e:72:20:56:e6:40:fe:da:8c:3c:2a:c4:
f3:f6:14:1a:ff:d8:2d:13:9a:54:cf:0f:69:99:07:
33:26:5b:8e:83:e5:28:80:03:21:25:e3:25:bb:19:
a9:48:a0:a6:5a:04:00:db:93:3b:c1:da:55:12:c5:
e9:85:52:bb:7c:8a:a2:97:39:d5:b8:f9:ee:b7:5d:
eb:8c:c7:15:c6:5e:dc:24:da:45:01:83:c3:ce:ac:
a8:89:c9:b5:3b:31:4d:65:d2:67:42:f9:d6:31:e3:
1e:51:b1:ce:21:fa:4a:31:84:03:1e:50:06:a3:97:
0a:af:5a:19:a9:b4:87:63:b0:2c:c6:aa:66:a2:01:
ec:21:41:ec:c2:0f:64:d8:15:d3:16:5d:71:37:07:
f0:cb:e1:cf:50:71:c8:e7:79:e1:c2:ac:4a:72:a5:
10:79:ef:1d:85:f5:d7:f7:32:1b:a0:fb:d4:af:19:
74:b5:92:5a:22:33:c0:53:f6:a5:7c:d0:82:09:6d:
d1:cb:1c:04:4d:ce:d1:f6:d9:7e:f6:3f:7a:3f:d7:
ec:99:ef:f5:8c:90:83:0a:73:3f:54:86:52:be:9b:
c5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C7:AE:9D:F1:AB:8A:EB:ED:BC:DC:97:78:69:4F:46:8E:1E:7D:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/b8277726-63a8-3672-9533-c44e9d028822.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/22d5f618-5b64-4804-88ef-e125dd90d7e2.crl
X509v3 Authority Key Identifier:
keyid:51:F3:B4:5D:AB:73:A3:7E:EC:9A:47:7B:05:74:05:B7:39:6D:E9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.138.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:13:dd:7e:59:4a:f1:97:f0:cb:a3:1c:31:11:d5:a1:27:5c:
58:40:fc:b5:67:0d:25:b9:81:b0:0a:53:49:35:79:04:1b:4e:
f5:cd:c2:51:4e:be:da:95:cf:e0:8e:ad:3c:f6:ef:34:4b:13:
0b:2a:17:c1:f4:49:c9:a2:e9:07:0e:78:a9:c0:74:9e:60:da:
cc:11:4a:78:3a:ed:b2:04:26:5a:ef:eb:b2:25:3d:01:2b:79:
6a:96:49:97:2c:1a:b0:98:2b:05:3b:a8:e0:bf:01:44:e0:bb:
4c:cb:0f:42:ed:7a:9d:7c:1d:30:ac:64:18:d8:1c:09:49:cf:
01:ae:70:35:55:7e:37:8f:9a:78:d1:42:fb:bf:b9:fd:99:61:
d8:c8:b2:85:e5:3e:d7:86:aa:b7:4b:11:1a:3b:11:58:8b:fe:
43:5c:cc:43:e0:e0:b7:74:98:03:ae:d4:3c:6f:4b:3d:92:ba:
a9:ae:c7:2e:61:7d:40:5d:fa:4e:7f:bc:2f:aa:6c:89:bf:c8:
cb:3e:88:37:06:44:e7:4f:75:42:8f:c9:43:9e:cb:45:fa:64:
09:20:43:c8:37:67:b8:94:15:42:c0:aa:00:c8:cb:0a:b1:fd:
15:fd:47:a7:44:23:ce:1a:81:0a:ab:ce:db:be:63:44:e5:5d:
76:8e:19:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZBGsqXZfSdFaF8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJkNWY2MTgtNWI2NC00ODA0LTg4ZWYtZTEyNWRkOTBk
N2UyMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk
M2EzOTRiOTctN2MwNC00YzZmLWI0NGMtYmI1NGNmMzlmNTkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZV8eQCY83Hzw26hiCCP7fSBqQOeDQlgJv+l
OpPW2jZOciBW5kD+2ow8KsTz9hQa/9gtE5pUzw9pmQczJluOg+UogAMhJeMluxmp
SKCmWgQA25M7wdpVEsXphVK7fIqilznVuPnut13rjMcVxl7cJNpFAYPDzqyoicm1
OzFNZdJnQvnWMeMeUbHOIfpKMYQDHlAGo5cKr1oZqbSHY7AsxqpmogHsIUHswg9k
2BXTFl1xNwfwy+HPUHHI53nhwqxKcqUQee8dhfXX9zIboPvUrxl0tZJaIjPAU/al
fNCCCW3RyxwETc7R9tl+9j96P9fsme/1jJCDCnM/VIZSvpvF1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJfHrp3xq4rr7bzcl3hpT0aOHn2gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmQ1
ZjYxOC01YjY0LTQ4MDQtODhlZi1lMTI1ZGQ5MGQ3ZTIvYjgyNzc3MjYtNjNhOC0z
NjcyLTk1MzMtYzQ0ZTlkMDI4ODIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJkNWY2MTgtNWI2NC00ODA0LTg4
ZWYtZTEyNWRkOTBkN2UyLzIyZDVmNjE4LTViNjQtNDgwNC04OGVmLWUxMjVkZDkw
ZDdlMi5jcmwwHwYDVR0jBBgwFoAUUfO0Xatzo37smkd7BXQFtzlt6SwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmQ1ZjYxOC01YjY0LTQ4MDQtODhlZi1lMTI1
ZGQ5MGQ3ZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4p4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA8T3X5ZSvGX8MujHDER1aEnXFhA/LVnDSW5gbAKU0k1eQQbTvXNwlFO
vtqVz+COrTz27zRLEwsqF8H0Scmi6QcOeKnAdJ5g2swRSng67bIEJlrv67IlPQEr
eWqWSZcsGrCYKwU7qOC/AUTgu0zLD0Ltep18HTCsZBjYHAlJzwGucDVVfjePmnjR
Qvu/uf2ZYdjIsoXlPteGqrdLERo7EViL/kNczEPg4Ld0mAOu1DxvSz2Suqmuxy5h
fUBd+k5/vC+qbIm/yMs+iDcGROdPdUKPyUOey0X6ZAkgQ8g3Z7iUFULAqgDIywqx
/RX9R6dEI84agQqrztu+Y0TlXXaOGco=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:43:17 2025 by rpki-client