Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/3dc1647c-44d8-35fa-93c5-3c0a9aebdacb.roa
File: 3dc1647c-44d8-35fa-93c5-3c0a9aebdacb.roa (raw, json)
Hash identifier: paNSrivKMqSNlsGZTmc4+AsPX5LdLRXwN1l9OWh+QtQ=
Subject key identifier: BA:32:B2:3A:0B:24:F0:22:AA:28:1C:1F:B2:E8:E8:EF:23:6F:0F:D7
Certificate issuer: /CN=2531a4ba-6abc-447c-add8-67edc3c483ab
Certificate serial: 010D0C9F432858487B85B0D1CAC352F2B1FA7800
Authority key identifier: 9E:3A:9F:74:F9:6C:64:ED:63:9F:AC:81:F2:E4:37:43:2E:F6:3B:0A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/3dc1647c-44d8-35fa-93c5-3c0a9aebdacb.roa
Signing time: Thu 09 Jan 2025 02:00:40 +0000
ROA not before: Thu 09 Jan 2025 02:00:40 +0000
ROA not after: Wed 09 Apr 2025 01:00:40 +0000
asID: 395585
IP address blocks: 23.171.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7b:85:b0:d1:ca:c3:52:f2:b1:fa:78:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2531a4ba-6abc-447c-add8-67edc3c483ab
Validity
Not Before: Jan 9 02:00:40 2025 GMT
Not After : Apr 9 01:00:40 2025 GMT
Subject: CN=34a4e645-4d4c-4b91-af3a-84227b52f618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7d:71:1e:16:ce:41:2c:27:d7:76:b3:97:ae:
a9:f2:f5:a8:80:19:80:38:9f:a2:27:cf:1b:2a:cb:
44:ac:7f:b5:e4:6c:c5:4b:bb:42:91:4f:2a:bb:2d:
03:01:b0:9a:69:92:b9:7b:f6:b1:94:a5:c7:30:f5:
99:b0:c8:df:c6:17:ff:8a:6c:45:20:72:68:3f:40:
61:b1:4a:98:0e:06:a3:eb:0e:10:d0:b1:b7:d6:de:
13:18:da:05:4b:07:dd:39:61:49:c1:ba:7f:92:83:
11:9d:90:fc:53:ad:f5:b0:d9:24:6c:1e:14:36:a7:
b8:13:5f:23:ed:1b:bc:1e:f7:b0:aa:d5:da:be:61:
2f:a4:55:b3:39:86:87:d6:9d:93:d2:fa:3d:ab:3d:
14:a4:fa:60:ab:dc:65:17:7e:7f:13:72:45:fd:07:
3c:18:aa:5b:28:f0:8d:b6:fa:1b:a3:8e:e2:1c:1d:
3c:3c:51:35:81:8b:27:83:31:5c:51:15:af:64:c2:
ed:7a:b7:11:01:f6:a9:85:a8:93:76:42:4d:4c:c0:
b0:8b:81:64:87:a6:59:07:03:46:7b:e8:06:a6:a6:
03:e9:92:66:e9:4b:37:e2:5a:0e:0e:ad:49:04:69:
31:ed:7d:22:68:70:35:b6:d2:02:6c:5b:c6:7f:80:
93:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:32:B2:3A:0B:24:F0:22:AA:28:1C:1F:B2:E8:E8:EF:23:6F:0F:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/3dc1647c-44d8-35fa-93c5-3c0a9aebdacb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.crl
X509v3 Authority Key Identifier:
keyid:9E:3A:9F:74:F9:6C:64:ED:63:9F:AC:81:F2:E4:37:43:2E:F6:3B:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer
sbgp-ipAddrBlock: critical
IPv4:
23.171.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:c8:37:f8:9d:82:34:bd:f5:48:bb:7b:9d:a1:b2:aa:2c:1b:
52:16:d6:20:36:86:b4:69:d4:46:58:1f:d4:1f:f2:ec:7a:27:
d7:17:f0:fa:79:c1:ef:aa:07:86:f1:4e:0c:92:8f:af:00:9f:
d5:1f:50:9e:11:67:52:9d:b0:a9:9f:7f:9e:01:20:6c:43:2b:
5d:7c:ab:54:a3:8e:b6:70:ad:1e:7e:9f:b5:db:dc:d8:7b:cb:
df:80:39:ca:4f:cd:94:83:81:f2:07:c2:66:de:f3:f6:46:13:
05:d8:c7:c0:46:b6:c7:c1:92:32:15:1e:9c:2b:10:31:51:1e:
3a:31:27:0e:fa:c7:80:28:41:46:0a:8b:88:e3:f5:cc:a4:ea:
ae:33:ba:bd:fa:6d:35:77:ef:ef:42:b2:0f:38:91:44:be:03:
71:63:bb:81:0a:7d:48:24:c1:29:4c:b7:9f:da:b5:60:7a:c3:
4a:5a:8c:79:39:2e:8e:c9:4e:f1:6d:e7:84:e6:34:06:55:5a:
5a:2f:4e:1e:56:ee:f3:22:a1:9b:12:0c:dc:c0:7c:09:d9:2d:
1d:7d:cb:d7:98:20:65:8b:5f:33:19:e0:b5:88:d0:f5:bb:cb:
48:f3:1c:95:16:9d:c3:74:b3:47:87:6d:ef:23:85:d1:aa:0c:
93:17:ef:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh7hbDRysNS8rH6eAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjUzMWE0YmEtNmFiYy00NDdjLWFkZDgtNjdlZGMzYzQ4
M2FiMB4XDTI1MDEwOTAyMDA0MFoXDTI1MDQwOTAxMDA0MFowLzEtMCsGA1UEAxMk
MzRhNGU2NDUtNGQ0Yy00YjkxLWFmM2EtODQyMjdiNTJmNjE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjX1xHhbOQSwn13azl66p8vWogBmAOJ+iJ88b
KstErH+15GzFS7tCkU8quy0DAbCaaZK5e/axlKXHMPWZsMjfxhf/imxFIHJoP0Bh
sUqYDgaj6w4Q0LG31t4TGNoFSwfdOWFJwbp/koMRnZD8U631sNkkbB4UNqe4E18j
7Ru8HvewqtXavmEvpFWzOYaH1p2T0vo9qz0UpPpgq9xlF35/E3JF/Qc8GKpbKPCN
tvobo47iHB08PFE1gYsngzFcURWvZMLtercRAfaphaiTdkJNTMCwi4Fkh6ZZBwNG
e+gGpqYD6ZJm6Us34loODq1JBGkx7X0iaHA1ttICbFvGf4CTbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLoysjoLJPAiqigcH7Lo6O8jbw/XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yNTMx
YTRiYS02YWJjLTQ0N2MtYWRkOC02N2VkYzNjNDgzYWIvM2RjMTY0N2MtNDRkOC0z
NWZhLTkzYzUtM2MwYTlhZWJkYWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjUzMWE0YmEtNmFiYy00NDdjLWFk
ZDgtNjdlZGMzYzQ4M2FiLzI1MzFhNGJhLTZhYmMtNDQ3Yy1hZGQ4LTY3ZWRjM2M0
ODNhYi5jcmwwHwYDVR0jBBgwFoAUnjqfdPlsZO1jn6yB8uQ3Qy72OwowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8yNTMxYTRiYS02YWJjLTQ0N2MtYWRkOC02N2Vk
YzNjNDgzYWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6sAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGrIN/idgjS99Ui7e52hsqosG1IW1iA2hrRp1EZYH9Qf8ux6J9cX8Pp5
we+qB4bxTgySj68An9UfUJ4RZ1KdsKmff54BIGxDK118q1SjjrZwrR5+n7Xb3Nh7
y9+AOcpPzZSDgfIHwmbe8/ZGEwXYx8BGtsfBkjIVHpwrEDFRHjoxJw76x4AoQUYK
i4jj9cyk6q4zur36bTV37+9Csg84kUS+A3Fju4EKfUgkwSlMt5/atWB6w0pajHk5
Lo7JTvFt54TmNAZVWlovTh5W7vMioZsSDNzAfAnZLR19y9eYIGWLXzMZ4LWI0PW7
y0jzHJUWncN0s0eHbe8jhdGqDJMX7yo=
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:16:09 2025 by rpki-client