Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/04cfb055-440e-3b77-81a6-1047982e2b9a.roa
File: 04cfb055-440e-3b77-81a6-1047982e2b9a.roa (raw, json)
Hash identifier: JW+HijROPnEIcr+BaCKJZHxH4Tuml9I1102Qcm6owCI=
Subject key identifier: 97:68:C4:3A:C9:C1:58:93:7B:0D:40:76:B0:5D:ED:FF:E2:41:C1:F6
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F4328584917DC29F4823C39BDCB846100
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/04cfb055-440e-3b77-81a6-1047982e2b9a.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 20473
IP address blocks: 8.12.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:29:f4:82:3c:39:bd:cb:84:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=432dfc20-e0cf-4dbf-aba0-a029f17ff164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d2:1e:7f:e3:42:fc:52:c6:32:07:c5:54:0a:
d4:40:2e:2e:6c:99:6d:78:ee:92:c2:2c:dc:d9:ec:
d0:00:78:32:f3:2f:03:58:8f:1f:1e:81:b2:06:97:
e6:0b:e4:5b:1e:12:1e:53:8c:ad:62:04:a1:1b:05:
cb:a8:56:f7:26:8e:fe:f6:aa:15:a8:28:0f:af:e2:
b2:a1:6a:b9:ad:2e:09:9d:21:99:cf:56:30:2e:5e:
fa:4f:09:71:64:7c:b0:dc:9f:4e:c4:bf:e2:a7:4a:
44:75:a2:aa:7a:9a:f5:f5:16:24:ab:73:cf:77:6c:
dd:3d:58:13:3a:16:bb:cd:dc:9b:7f:24:c4:3e:b0:
37:c9:2e:d2:c6:70:6d:e9:0c:6f:bb:9a:56:83:12:
f7:2b:74:b0:f1:b8:ce:dd:4f:e0:d0:4e:c4:bb:74:
8a:23:a7:06:76:ca:b9:20:50:4c:70:2e:ed:13:93:
ea:d8:74:f6:51:55:79:b5:6b:f4:8f:88:84:d8:41:
06:fa:b7:e1:0c:6c:ef:d1:4c:c7:4f:de:d0:e9:40:
5b:a3:a1:b3:53:41:4b:be:b6:ab:0c:f8:5a:e6:e9:
2e:ca:61:81:80:31:6b:08:cd:6d:a9:0b:71:41:46:
2a:26:07:96:34:e9:98:83:2a:f7:54:c2:5f:30:42:
2f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:68:C4:3A:C9:C1:58:93:7B:0D:40:76:B0:5D:ED:FF:E2:41:C1:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/04cfb055-440e-3b77-81a6-1047982e2b9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.12.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:df:5d:e2:11:ed:07:8d:fc:ec:67:a9:47:a6:68:ab:de:f6:
05:06:3f:6d:4b:00:98:a0:d8:48:56:3e:85:50:fa:cc:a3:f8:
82:42:6f:57:a2:86:6c:67:d4:7a:9e:2d:3f:4d:ea:83:14:25:
2e:21:e0:e2:87:e6:76:78:d6:f1:87:dd:0b:ff:6a:05:96:ac:
37:25:35:b1:4f:ff:5a:78:e2:e9:96:dc:6a:9b:57:48:d4:fd:
9c:b8:cb:7b:96:01:8b:bc:26:c0:03:07:65:56:05:d5:b8:3c:
0a:0e:48:ec:23:f0:c8:6b:15:1c:b2:02:21:61:24:8f:3d:08:
5e:97:68:61:d0:6d:18:de:40:a2:1a:37:e9:e9:86:49:11:a8:
79:37:27:b1:94:82:6d:be:fb:3e:55:9c:09:62:9f:94:ac:3e:
a7:81:65:af:3f:34:5e:cc:ad:95:89:64:4c:aa:b4:19:72:3e:
f7:86:ff:3a:49:d4:f1:7b:e1:bc:ea:c8:40:ef:fa:06:1f:04:
46:ab:77:6c:90:6e:1a:02:a6:4e:3d:ed:67:a5:42:03:a9:0c:
33:35:8d:a2:f3:f5:82:0e:27:93:12:5f:6c:6b:05:5a:61:d5:
74:24:ab:15:82:b4:cb:2f:e2:cf:fc:16:70:8f:69:25:3f:4d:
d4:41:89:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3Cn0gjw5vcuEYQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk
NDMyZGZjMjAtZTBjZi00ZGJmLWFiYTAtYTAyOWYxN2ZmMTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9Ief+NC/FLGMgfFVArUQC4ubJlteO6Swizc
2ezQAHgy8y8DWI8fHoGyBpfmC+RbHhIeU4ytYgShGwXLqFb3Jo7+9qoVqCgPr+Ky
oWq5rS4JnSGZz1YwLl76TwlxZHyw3J9OxL/ip0pEdaKqepr19RYkq3PPd2zdPVgT
Oha7zdybfyTEPrA3yS7SxnBt6Qxvu5pWgxL3K3Sw8bjO3U/g0E7Eu3SKI6cGdsq5
IFBMcC7tE5Pq2HT2UVV5tWv0j4iE2EEG+rfhDGzv0UzHT97Q6UBbo6GzU0FLvrar
DPha5ukuymGBgDFrCM1tqQtxQUYqJgeWNOmYgyr3VMJfMEIv0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJdoxDrJwViTew1AdrBd7f/iQcH2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMDRjZmIwNTUtNDQwZS0z
Yjc3LTgxYTYtMTA0Nzk4MmUyYjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAwRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADjfXeIR7QeN/OxnqUemaKve9gUGP21LAJig2EhWPoVQ+syj+IJCb1ei
hmxn1HqeLT9N6oMUJS4h4OKH5nZ41vGH3Qv/agWWrDclNbFP/1p44umW3GqbV0jU
/Zy4y3uWAYu8JsADB2VWBdW4PAoOSOwj8MhrFRyyAiFhJI89CF6XaGHQbRjeQKIa
N+nphkkRqHk3J7GUgm2++z5VnAlin5SsPqeBZa8/NF7MrZWJZEyqtBlyPveG/zpJ
1PF74bzqyEDv+gYfBEard2yQbhoCpk497WelQgOpDDM1jaLz9YIOJ5MSX2xrBVph
1XQkqxWCtMsv4s/8FnCPaSU/TdRBiWc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:16 2025 by rpki-client