Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/d742262f-2263-30c5-bec7-4b680845450b.roa
File: d742262f-2263-30c5-bec7-4b680845450b.roa (raw, json)
Hash identifier: gCi2jtZJ1y+/XIC+vvsiZBInsST67YdBVrvA8SEJrIY=
Subject key identifier: EF:AF:D8:D6:4B:EF:03:A6:6D:36:CE:60:00:2B:9A:C1:06:B8:E0:66
Certificate issuer: /CN=3c68c219-8e71-4151-8d5c-d504fd12b5fb
Certificate serial: 010D0C9F43285848CAD3CD3A0CD8411C319FE0A0
Authority key identifier: 74:66:34:1C:14:36:2D:94:95:DC:F7:6D:89:3E:8D:22:9E:D7:49:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/d742262f-2263-30c5-bec7-4b680845450b.roa
Signing time: Thu 06 Feb 2025 11:46:56 +0000
ROA not before: Thu 06 Feb 2025 11:46:56 +0000
ROA not after: Wed 07 May 2025 10:46:56 +0000
asID: 7018
IP address blocks: 23.133.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ca:d3:cd:3a:0c:d8:41:1c:31:9f:e0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c68c219-8e71-4151-8d5c-d504fd12b5fb
Validity
Not Before: Feb 6 11:46:56 2025 GMT
Not After : May 7 10:46:56 2025 GMT
Subject: CN=b7b579d7-8e33-4105-8b48-e8bb12f54d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0a:b2:55:48:4b:60:66:b4:15:33:87:91:82:
0c:cf:f0:af:d0:63:48:1e:6d:31:0f:98:c0:6c:1e:
b8:a7:6d:18:0f:a8:d2:a5:df:92:59:ad:ab:a0:32:
f3:94:cc:d1:f6:3a:2c:7b:12:03:aa:24:52:e6:55:
75:13:bb:cc:61:2d:57:62:65:a8:48:c2:0c:58:c8:
26:6c:b3:18:33:5b:6a:b4:1c:65:21:3d:ba:50:f4:
2e:f8:d1:f6:76:1b:ef:a9:a7:29:25:a8:5b:fa:87:
a3:44:52:7c:f7:72:1b:7e:6c:3e:e6:c2:26:52:06:
99:13:9d:2b:76:72:52:7a:5c:dd:1d:1a:3e:0f:44:
b1:8a:47:12:f5:e9:d9:fc:bc:19:6e:bb:13:44:0c:
cb:86:97:cb:72:4b:ba:9a:a2:ea:ee:cd:b1:52:9a:
bd:05:c3:4d:3c:e6:d5:a9:d3:e3:47:8b:4f:c0:f2:
89:7b:ae:8d:7f:80:e6:52:6a:02:cb:23:35:81:e4:
99:85:da:f3:35:90:71:d4:ed:7c:9c:6f:61:be:aa:
42:3b:9c:81:cd:4d:d5:ee:f5:0a:8b:7a:f8:c1:a2:
03:e4:24:f4:64:db:06:7a:f2:68:12:c5:fb:55:6f:
11:f8:83:48:2c:37:f5:9c:66:92:e6:56:db:8e:12:
3f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AF:D8:D6:4B:EF:03:A6:6D:36:CE:60:00:2B:9A:C1:06:B8:E0:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/d742262f-2263-30c5-bec7-4b680845450b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.crl
X509v3 Authority Key Identifier:
keyid:74:66:34:1C:14:36:2D:94:95:DC:F7:6D:89:3E:8D:22:9E:D7:49:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.116.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:df:b8:e3:87:d8:f2:2e:09:81:e1:2e:1b:8d:bb:47:a9:ce:
63:1f:90:57:a6:7d:c1:04:4e:49:6d:23:d4:24:ab:ec:76:b9:
0d:bd:7d:6b:a7:9b:5f:e5:12:69:66:16:7b:07:74:a6:f8:ad:
31:5e:d3:86:a7:c1:9a:49:ff:11:97:6a:9e:b1:a3:7e:f2:e0:
99:86:9a:5b:0e:9a:36:ab:5b:38:05:b1:d7:07:02:60:99:75:
f8:3f:82:eb:dd:18:06:96:bd:5f:b7:97:5c:9b:a8:a3:be:47:
b9:1d:76:e5:ef:4b:46:1c:c7:0f:85:d7:5f:8f:4c:5a:67:9f:
58:a1:f5:4a:ca:b0:88:e8:5e:91:8b:36:a6:a0:97:9e:78:05:
8d:e3:97:05:86:76:b1:a2:bb:d7:b2:85:45:22:e4:32:00:79:
6e:dd:ea:f5:e5:ff:4a:9a:e4:34:7a:57:9a:86:61:1d:e9:71:
9e:22:30:a6:b4:f0:ab:d1:7d:d3:e1:30:64:16:e8:57:52:b1:
ee:0c:93:b5:c1:62:7f:e3:ba:13:5e:6f:24:0d:f0:83:3c:e9:
03:53:97:3b:59:be:0b:76:86:b8:f4:1c:21:91:c8:4e:8e:72:
05:39:5d:61:18:de:dc:5e:ff:fe:a2:e5:01:3b:eb:c0:aa:8b:
c8:2a:19:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjK0806DNhBHDGf4KAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M2OGMyMTktOGU3MS00MTUxLThkNWMtZDUwNGZkMTJi
NWZiMB4XDTI1MDIwNjExNDY1NloXDTI1MDUwNzEwNDY1NlowLzEtMCsGA1UEAxMk
YjdiNTc5ZDctOGUzMy00MTA1LThiNDgtZThiYjEyZjU0ZDJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gqyVUhLYGa0FTOHkYIMz/Cv0GNIHm0xD5jA
bB64p20YD6jSpd+SWa2roDLzlMzR9josexIDqiRS5lV1E7vMYS1XYmWoSMIMWMgm
bLMYM1tqtBxlIT26UPQu+NH2dhvvqacpJahb+oejRFJ893Ibfmw+5sImUgaZE50r
dnJSelzdHRo+D0SxikcS9enZ/LwZbrsTRAzLhpfLcku6mqLq7s2xUpq9BcNNPObV
qdPjR4tPwPKJe66Nf4DmUmoCyyM1geSZhdrzNZBx1O18nG9hvqpCO5yBzU3V7vUK
i3r4waID5CT0ZNsGevJoEsX7VW8R+INILDf1nGaS5lbbjhI/UwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO+v2NZL7wOmbTbOYAArmsEGuOBmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYzY4
YzIxOS04ZTcxLTQxNTEtOGQ1Yy1kNTA0ZmQxMmI1ZmIvZDc0MjI2MmYtMjI2My0z
MGM1LWJlYzctNGI2ODA4NDU0NTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2M2OGMyMTktOGU3MS00MTUxLThk
NWMtZDUwNGZkMTJiNWZiLzNjNjhjMjE5LThlNzEtNDE1MS04ZDVjLWQ1MDRmZDEy
YjVmYi5jcmwwHwYDVR0jBBgwFoAUdGY0HBQ2LZSV3PdtiT6NIp7XSSAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zYzY4YzIxOS04ZTcxLTQxNTEtOGQ1Yy1kNTA0
ZmQxMmI1ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4V0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALHfuOOH2PIuCYHhLhuNu0epzmMfkFemfcEETkltI9Qkq+x2uQ29fWun
m1/lEmlmFnsHdKb4rTFe04anwZpJ/xGXap6xo37y4JmGmlsOmjarWzgFsdcHAmCZ
dfg/guvdGAaWvV+3l1ybqKO+R7kdduXvS0Ycxw+F11+PTFpnn1ih9UrKsIjoXpGL
Nqagl554BY3jlwWGdrGiu9eyhUUi5DIAeW7d6vXl/0qa5DR6V5qGYR3pcZ4iMKa0
8KvRfdPhMGQW6FdSse4Mk7XBYn/juhNebyQN8IM86QNTlztZvgt2hrj0HCGRyE6O
cgU5XWEY3txe//6i5QE768Cqi8gqGfA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:31 2025 by rpki-client