Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7401169f-c1cd-4960-a3e8-8d9af543cc0a/ca0aae25-9dea-3459-b666-85d3ff285459.roa
File: ca0aae25-9dea-3459-b666-85d3ff285459.roa (raw, json)
Hash identifier: QdkqESqiTCpP2YOjT9sngXnbG1hPicYJobyUDT87v34=
Subject key identifier: 5D:C5:9C:B1:02:A8:96:B9:E1:63:29:BC:EE:EE:26:23:3D:71:D9:A7
Certificate issuer: /CN=7401169f-c1cd-4960-a3e8-8d9af543cc0a
Certificate serial: 010D0C9F432858492E13C04C491202195A97D180
Authority key identifier: BE:0C:75:D0:C8:4D:F9:38:3C:EF:35:C6:60:D2:93:D4:74:51:1E:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7401169f-c1cd-4960-a3e8-8d9af543cc0a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7401169f-c1cd-4960-a3e8-8d9af543cc0a/ca0aae25-9dea-3459-b666-85d3ff285459.roa
Signing time: Fri 14 Mar 2025 01:00:39 +0000
ROA not before: Fri 14 Mar 2025 01:00:39 +0000
ROA not after: Thu 12 Jun 2025 01:00:39 +0000
asID: 36083
IP address blocks: 23.138.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2e:13:c0:4c:49:12:02:19:5a:97:d1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7401169f-c1cd-4960-a3e8-8d9af543cc0a
Validity
Not Before: Mar 14 01:00:39 2025 GMT
Not After : Jun 12 01:00:39 2025 GMT
Subject: CN=d07ee27f-2990-4495-9ef0-14c85e2bae35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b1:76:fb:50:71:92:7d:8b:7b:71:14:e4:c0:
11:fc:dd:06:98:26:06:1b:d8:a2:10:da:e5:bc:aa:
07:72:66:06:37:34:18:9f:06:f6:6d:11:90:1b:12:
ef:ef:09:8e:9f:3b:f3:c0:54:88:7f:9a:ce:6f:c6:
d9:f2:3a:64:17:84:f1:94:7b:df:71:a2:e5:88:04:
16:cf:89:1f:45:d5:6d:0f:64:10:44:3a:18:52:f3:
65:64:ed:b8:b3:ba:9e:32:d2:76:d5:3f:e2:74:46:
28:08:1c:dc:e5:39:dc:ec:00:a7:3d:8c:ea:93:02:
f0:c5:4c:de:23:89:9c:11:49:e2:10:aa:f5:bb:a0:
27:4d:65:76:ec:e6:34:d6:fd:6e:f1:98:61:0b:1e:
54:ce:25:ad:d8:7f:ef:34:7a:31:49:ba:f3:52:2b:
89:89:fc:02:d3:94:43:80:70:6a:f1:ed:6b:4d:ad:
69:3e:30:9e:5c:b9:88:1e:ec:c8:91:4c:ab:ad:b4:
46:a8:93:a9:54:29:72:97:b4:10:51:eb:aa:f5:02:
d1:d2:13:e2:4f:fb:7b:dd:45:42:84:81:cd:f0:31:
6e:df:25:86:05:d8:2f:3a:86:ce:ae:79:b0:d4:b8:
9b:08:97:22:09:34:75:39:67:4f:9c:6c:d5:2e:7a:
2b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C5:9C:B1:02:A8:96:B9:E1:63:29:BC:EE:EE:26:23:3D:71:D9:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7401169f-c1cd-4960-a3e8-8d9af543cc0a/ca0aae25-9dea-3459-b666-85d3ff285459.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7401169f-c1cd-4960-a3e8-8d9af543cc0a/7401169f-c1cd-4960-a3e8-8d9af543cc0a.crl
X509v3 Authority Key Identifier:
keyid:BE:0C:75:D0:C8:4D:F9:38:3C:EF:35:C6:60:D2:93:D4:74:51:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7401169f-c1cd-4960-a3e8-8d9af543cc0a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.138.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:cb:ee:22:d9:c5:1b:b8:df:10:17:c3:ac:47:a8:be:2d:3d:
4a:79:0d:c9:e1:eb:e6:59:37:c1:fb:ef:78:ff:50:b9:6a:8e:
da:8a:74:cb:50:eb:d9:1d:0f:22:e9:78:ad:62:d6:be:18:7c:
47:82:a0:6d:d6:e5:65:1e:bf:ce:f7:60:0b:40:66:da:db:58:
b9:97:12:c7:fa:2e:f5:d8:3d:6a:93:3c:10:9f:09:f8:ee:23:
a3:1f:88:d4:78:29:d0:a1:33:30:cb:81:96:c5:8c:84:9b:64:
8b:af:cd:11:90:0d:93:69:25:4d:37:3f:e3:1f:c4:2c:ae:f3:
eb:4c:f5:d4:fe:1a:bf:3f:56:72:0e:93:4a:f0:c0:02:8d:73:
0c:de:bf:7a:b5:1d:17:55:d7:36:3b:48:5d:f3:2c:c2:9e:ad:
27:83:79:6e:85:5e:e1:a3:c1:9b:7f:bd:a5:b1:ae:f4:7f:fc:
a2:3d:84:74:cf:6a:fe:b7:5f:16:a9:8c:35:50:8f:53:05:3f:
58:3b:e9:60:71:51:c6:71:d0:80:36:26:1f:33:a1:2f:88:d7:
e6:f8:b3:c1:76:cf:2b:65:5b:f2:80:70:1a:73:75:ac:a8:3b:
3d:fa:4a:fd:33:29:60:59:34:f0:b4:1a:70:77:9c:f8:19:85:
77:4a:b7:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkuE8BMSRICGVqX0YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQwMTE2OWYtYzFjZC00OTYwLWEzZTgtOGQ5YWY1NDNj
YzBhMB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk
ZDA3ZWUyN2YtMjk5MC00NDk1LTllZjAtMTRjODVlMmJhZTM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrF2+1Bxkn2Le3EU5MAR/N0GmCYGG9iiENrl
vKoHcmYGNzQYnwb2bRGQGxLv7wmOnzvzwFSIf5rOb8bZ8jpkF4TxlHvfcaLliAQW
z4kfRdVtD2QQRDoYUvNlZO24s7qeMtJ21T/idEYoCBzc5Tnc7ACnPYzqkwLwxUze
I4mcEUniEKr1u6AnTWV27OY01v1u8ZhhCx5UziWt2H/vNHoxSbrzUiuJifwC05RD
gHBq8e1rTa1pPjCeXLmIHuzIkUyrrbRGqJOpVClyl7QQUeuq9QLR0hPiT/t73UVC
hIHN8DFu3yWGBdgvOobOrnmw1LibCJciCTR1OWdPnGzVLnorKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF3FnLECqJa54WMpvO7uJiM9cdmnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NDAx
MTY5Zi1jMWNkLTQ5NjAtYTNlOC04ZDlhZjU0M2NjMGEvY2EwYWFlMjUtOWRlYS0z
NDU5LWI2NjYtODVkM2ZmMjg1NDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzQwMTE2OWYtYzFjZC00OTYwLWEz
ZTgtOGQ5YWY1NDNjYzBhLzc0MDExNjlmLWMxY2QtNDk2MC1hM2U4LThkOWFmNTQz
Y2MwYS5jcmwwHwYDVR0jBBgwFoAUvgx10MhN+Tg87zXGYNKT1HRRHhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83NDAxMTY5Zi1jMWNkLTQ5NjAtYTNlOC04ZDlh
ZjU0M2NjMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4oIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB/L7iLZxRu43xAXw6xHqL4tPUp5Dcnh6+ZZN8H773j/ULlqjtqKdMtQ
69kdDyLpeK1i1r4YfEeCoG3W5WUev873YAtAZtrbWLmXEsf6LvXYPWqTPBCfCfju
I6MfiNR4KdChMzDLgZbFjISbZIuvzRGQDZNpJU03P+MfxCyu8+tM9dT+Gr8/VnIO
k0rwwAKNcwzev3q1HRdV1zY7SF3zLMKerSeDeW6FXuGjwZt/vaWxrvR//KI9hHTP
av63XxapjDVQj1MFP1g76WBxUcZx0IA2Jh8zoS+I1+b4s8F2zytlW/KAcBpzdayo
Oz36Sv0zKWBZNPC0GnB3nPgZhXdKtwY=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:45 2025 by rpki-client