Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86cae031-3513-323c-8607-aa02a24f0db0.roa
File: 86cae031-3513-323c-8607-aa02a24f0db0.roa (raw, json)
Hash identifier: Srmw4y9FqH/jhZy4PKZn0o/ozR6N+uMND2+wkZf0fOk=
Subject key identifier: 63:CD:B0:5F:70:83:83:D4:F6:ED:8C:50:01:7E:C8:E4:FA:A9:AA:87
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285849029733B32B6AFAF15D477800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86cae031-3513-323c-8607-aa02a24f0db0.roa
Signing time: Wed 26 Feb 2025 11:10:06 +0000
ROA not before: Wed 26 Feb 2025 11:10:06 +0000
ROA not after: Tue 27 May 2025 10:10:06 +0000
asID: 30036
IP address blocks: 173.23.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:97:33:b3:2b:6a:fa:f1:5d:47:78:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 26 11:10:06 2025 GMT
Not After : May 27 10:10:06 2025 GMT
Subject: CN=ef2a759a-8253-481d-bacf-2d28d5a9c9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:31:06:70:e2:d3:bd:a6:ec:a9:9a:07:64:df:
55:8f:67:51:18:5b:04:ac:cc:01:bd:b3:b1:45:62:
29:05:ac:66:a1:6c:7e:97:27:c8:4d:ba:bd:d9:54:
a2:57:b5:1b:2a:f2:f2:32:13:3b:d3:9f:3f:e2:7c:
7c:d9:01:4e:87:88:6b:3d:37:89:43:c7:32:56:77:
d8:7d:6e:78:36:e2:7b:2f:9a:44:fa:5e:87:f2:61:
1c:84:22:65:eb:9e:cc:d6:97:a9:f6:3e:91:6a:32:
3e:dd:ed:20:56:a3:b4:cf:62:40:16:9e:aa:fc:fd:
82:dc:96:a2:de:de:59:de:1d:ff:c6:12:78:1e:fc:
1e:d1:19:64:78:9d:8a:69:52:d9:68:98:c3:e5:80:
9e:75:c1:9e:44:7f:58:05:42:0f:b4:d4:01:6d:82:
60:1b:90:b8:4f:75:a0:0d:83:5b:29:bd:bb:1a:ab:
be:35:f2:ec:2d:1b:2f:43:9b:62:c3:cc:1f:3b:1e:
f9:c2:ec:3b:1b:e6:b7:fe:85:60:88:f6:0b:89:e3:
aa:67:86:ff:e2:42:8b:24:be:2d:de:53:59:d7:9b:
19:a4:16:d3:29:d7:9d:42:ca:28:ab:37:62:a9:67:
df:e7:4e:e0:ee:a8:7a:6e:a2:bc:43:3c:86:ec:b3:
48:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CD:B0:5F:70:83:83:D4:F6:ED:8C:50:01:7E:C8:E4:FA:A9:AA:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86cae031-3513-323c-8607-aa02a24f0db0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:42:8c:3e:db:76:16:55:ab:bc:71:48:45:e8:0d:c5:70:c3:
c0:61:e2:28:1c:a0:34:35:ae:19:13:74:26:03:86:71:a3:82:
b7:1e:54:dd:a7:4f:b8:14:a6:01:93:f5:55:51:45:2e:e7:6a:
c6:0f:d7:e2:1f:c7:0b:be:2e:26:d3:15:29:ff:14:f4:17:7e:
3a:06:9f:e6:af:d1:c7:a6:da:31:e1:c7:88:99:d5:ea:85:45:
fd:bd:f0:97:35:d3:0e:ed:06:2f:6c:64:d4:29:77:7a:64:45:
bd:16:9a:31:ca:3d:26:42:80:29:61:95:06:03:e9:b2:2f:6d:
5e:8d:c8:55:84:34:46:f1:f4:cc:c1:f9:5e:c8:f0:0c:a9:99:
08:85:8b:06:a5:d4:5f:3f:ee:70:b9:19:da:93:14:46:92:51:
2e:5f:aa:da:25:f7:62:9e:b3:9b:e2:d2:b6:37:34:69:df:a5:
97:4e:b3:b5:9b:9d:ef:9f:4e:ff:16:ed:d2:b6:81:98:b6:81:
5b:c4:e4:51:da:86:48:63:f7:2f:bc:12:a5:f3:5d:36:25:bd:
cd:f6:dd:2e:9f:73:53:d9:78:80:b8:80:b9:63:25:bd:63:82:
8c:f7:47:b3:34:54:4c:1d:14:1f:8f:98:30:17:f1:80:05:a7:
8a:51:f9:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkClzOzK2r68V1HeAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIyNjExMTAwNloXDTI1MDUyNzEwMTAwNlowLzEtMCsGA1UEAxMk
ZWYyYTc1OWEtODI1My00ODFkLWJhY2YtMmQyOGQ1YTljOWNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjEGcOLTvabsqZoHZN9Vj2dRGFsErMwBvbOx
RWIpBaxmoWx+lyfITbq92VSiV7UbKvLyMhM7058/4nx82QFOh4hrPTeJQ8cyVnfY
fW54NuJ7L5pE+l6H8mEchCJl657M1pep9j6RajI+3e0gVqO0z2JAFp6q/P2C3Jai
3t5Z3h3/xhJ4Hvwe0RlkeJ2KaVLZaJjD5YCedcGeRH9YBUIPtNQBbYJgG5C4T3Wg
DYNbKb27Gqu+NfLsLRsvQ5tiw8wfOx75wuw7G+a3/oVgiPYLieOqZ4b/4kKLJL4t
3lNZ15sZpBbTKdedQsooqzdiqWff507g7qh6bqK8QzyG7LNIvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGPNsF9wg4PU9u2MUAF+yOT6qaqHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODZjYWUwMzEtMzUxMy0z
MjNjLTg2MDctYWEwMmEyNGYwZGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRc8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA5CjD7bdhZVq7xxSEXoDcVww8Bh4igcoDQ1rhkTdCYDhnGjgrceVN2n
T7gUpgGT9VVRRS7nasYP1+Ifxwu+LibTFSn/FPQXfjoGn+av0cem2jHhx4iZ1eqF
Rf298Jc10w7tBi9sZNQpd3pkRb0WmjHKPSZCgClhlQYD6bIvbV6NyFWENEbx9MzB
+V7I8AypmQiFiwal1F8/7nC5GdqTFEaSUS5fqtol92Kes5vi0rY3NGnfpZdOs7Wb
ne+fTv8W7dK2gZi2gVvE5FHahkhj9y+8EqXzXTYlvc323S6fc1PZeIC4gLljJb1j
goz3R7M0VEwdFB+PmDAX8YAFp4pR+Y4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:55:14 2025 by rpki-client