Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/84dfd579-e58b-3593-9305-01e86221a3c6.roa
File: 84dfd579-e58b-3593-9305-01e86221a3c6.roa (raw, json)
Hash identifier: AYbtAz19hFz9h+Vv011uN44j+eScmHPCjtMa838scv0=
Subject key identifier: EF:C3:09:BB:BC:1E:7C:31:CF:38:AE:DA:73:80:1A:93:78:A8:25:C4
Certificate issuer: /CN=66ee137c-4201-4a21-a4f5-2f3161305281
Certificate serial: 010D0C9F432858494303F3121285F7880EFE8E80
Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/84dfd579-e58b-3593-9305-01e86221a3c6.roa
Signing time: Fri 21 Mar 2025 13:00:50 +0000
ROA not before: Fri 21 Mar 2025 13:00:50 +0000
ROA not after: Thu 19 Jun 2025 13:00:50 +0000
asID: 205455
IP address blocks: 23.154.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:43:03:f3:12:12:85:f7:88:0e:fe:8e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281
Validity
Not Before: Mar 21 13:00:50 2025 GMT
Not After : Jun 19 13:00:50 2025 GMT
Subject: CN=380eac96-3810-4a13-b73b-f7aa3045e8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:54:7b:92:9d:66:ee:18:06:cb:33:f3:a8:39:
e7:5e:92:e3:74:43:64:32:ad:0f:d8:a7:70:4a:c6:
51:56:23:1d:41:22:c5:e2:05:c3:97:c8:b0:b1:7d:
c0:e4:64:cc:9f:c3:5b:e7:f0:6a:a3:5c:73:5a:07:
71:8f:78:0e:65:f2:49:f9:c4:1c:7b:a0:62:97:24:
f9:aa:60:2e:4f:4e:95:39:df:c3:58:e5:39:d7:fa:
d6:55:e2:a0:8b:8b:00:79:55:84:1e:41:88:11:ce:
53:22:01:61:f5:6e:cb:6d:ee:88:56:e0:df:5a:ef:
d9:f0:45:86:3f:c6:ef:1b:58:83:ee:6f:69:7c:65:
35:c6:79:9d:63:35:82:78:91:5c:b0:d1:5a:64:5e:
fc:ba:c0:e1:4d:16:dd:6b:88:37:1f:1d:8c:90:b4:
d2:37:42:d8:77:22:e3:e1:11:be:bb:55:b2:57:0d:
1a:da:6b:8d:b6:97:9c:8c:3e:be:c7:62:cd:81:5a:
76:b9:df:e2:cc:47:d8:63:0f:2d:63:64:a3:8a:f2:
10:55:83:92:55:39:35:41:ea:f0:56:d3:72:5a:5e:
87:f9:f2:c0:e6:bc:7b:f0:0f:e6:f6:e1:57:80:d2:
87:02:de:96:94:d9:e1:e4:08:24:3c:7b:64:c9:ff:
3d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C3:09:BB:BC:1E:7C:31:CF:38:AE:DA:73:80:1A:93:78:A8:25:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/84dfd579-e58b-3593-9305-01e86221a3c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl
X509v3 Authority Key Identifier:
keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
sbgp-ipAddrBlock: critical
IPv4:
23.154.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:0f:24:95:80:75:ad:06:92:26:9c:98:81:c2:e7:be:4c:a9:
f9:72:13:43:30:a2:72:12:d8:12:16:ae:15:07:bf:92:49:0a:
51:44:2f:08:f4:53:9f:c7:96:a5:21:be:94:b1:f5:28:a4:ef:
9f:c2:15:ef:9f:bc:52:ab:7d:6a:85:99:db:eb:ca:12:9f:38:
36:46:3a:47:f6:41:56:c4:b4:aa:34:ef:66:77:13:92:2d:c7:
11:87:15:1d:94:a8:db:a7:84:1e:71:49:57:ee:de:ad:f7:58:
65:57:e6:7e:21:89:09:df:9b:08:7b:cd:9c:31:20:26:dc:cd:
8a:cc:ca:a8:cf:0b:56:7c:2d:0a:74:52:40:eb:0e:48:4e:15:
39:11:28:78:d7:e1:6d:58:29:62:19:86:06:0f:87:c8:04:86:
53:32:80:34:01:bf:4e:ff:0e:ca:07:fb:28:1f:78:10:b1:a7:
20:e5:33:d8:ce:20:0d:1d:ad:3e:25:df:a8:ad:fd:ee:ed:84:
5e:ab:fc:dc:27:0e:00:f1:ca:72:c1:5f:98:14:5e:49:14:21:
7f:e4:0e:b2:2d:ed:b3:0a:97:47:82:f3:3d:a4:01:d5:70:59:
c2:6c:bb:aa:f8:3b:37:a0:31:9f:fb:fe:13:d1:57:20:53:48:
25:64:b7:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElDA/MSEoX3iA7+joAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZlZTEzN2MtNDIwMS00YTIxLWE0ZjUtMmYzMTYxMzA1
MjgxMB4XDTI1MDMyMTEzMDA1MFoXDTI1MDYxOTEzMDA1MFowLzEtMCsGA1UEAxMk
MzgwZWFjOTYtMzgxMC00YTEzLWI3M2ItZjdhYTMwNDVlOGJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlR7kp1m7hgGyzPzqDnnXpLjdENkMq0P2Kdw
SsZRViMdQSLF4gXDl8iwsX3A5GTMn8Nb5/Bqo1xzWgdxj3gOZfJJ+cQce6BilyT5
qmAuT06VOd/DWOU51/rWVeKgi4sAeVWEHkGIEc5TIgFh9W7Lbe6IVuDfWu/Z8EWG
P8bvG1iD7m9pfGU1xnmdYzWCeJFcsNFaZF78usDhTRbda4g3Hx2MkLTSN0LYdyLj
4RG+u1WyVw0a2muNtpecjD6+x2LNgVp2ud/izEfYYw8tY2SjivIQVYOSVTk1Qerw
VtNyWl6H+fLA5rx78A/m9uFXgNKHAt6WlNnh5AgkPHtkyf89+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO/DCbu8Hnwxzziu2nOAGpN4qCXEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NmVl
MTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMxNjEzMDUyODEvODRkZmQ1NzktZTU4Yi0z
NTkzLTkzMDUtMDFlODYyMjFhM2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjZlZTEzN2MtNDIwMS00YTIxLWE0
ZjUtMmYzMTYxMzA1MjgxLzY2ZWUxMzdjLTQyMDEtNGEyMS1hNGY1LTJmMzE2MTMw
NTI4MS5jcmwwHwYDVR0jBBgwFoAUk6u6W3jmddEaQuIZV9YetG4N28YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82NmVlMTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMx
NjEzMDUyODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5pYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADoPJJWAda0GkiacmIHC575MqflyE0MwonIS2BIWrhUHv5JJClFELwj0
U5/HlqUhvpSx9Sik75/CFe+fvFKrfWqFmdvryhKfODZGOkf2QVbEtKo072Z3E5It
xxGHFR2UqNunhB5xSVfu3q33WGVX5n4hiQnfmwh7zZwxICbczYrMyqjPC1Z8LQp0
UkDrDkhOFTkRKHjX4W1YKWIZhgYPh8gEhlMygDQBv07/DsoH+ygfeBCxpyDlM9jO
IA0drT4l36it/e7thF6r/NwnDgDxynLBX5gUXkkUIX/kDrIt7bMKl0eC8z2kAdVw
WcJsu6r4OzegMZ/7/hPRVyBTSCVktzs=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:09:39 2025 by rpki-client