Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/300100b3-97cb-3da3-a966-2532658dddbc.roa
File: 300100b3-97cb-3da3-a966-2532658dddbc.roa (raw, json)
Hash identifier: 8+JB0JYH9P8oBRzpspczrnCwGMf0mBKnatC+wkkJhjU=
Subject key identifier: 12:10:40:97:AB:CB:4F:41:11:AD:EC:CA:30:5F:5E:B1:22:8B:FC:51
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F43285848AF2BA47EE2354863FA3C8040
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/300100b3-97cb-3da3-a966-2532658dddbc.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 18779
IP address blocks: 23.27.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:a4:7e:e2:35:48:63:fa:3c:80:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=a90ee427-560c-4344-99cd-7d269c1add65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:32:bb:da:45:0e:2b:2b:f3:68:5a:f0:32:05:
ec:cd:3f:92:1f:41:4d:39:d0:ea:d5:e4:ff:f1:76:
0f:58:c1:37:dd:08:8e:27:25:36:66:07:d1:ce:32:
d5:a1:8a:37:56:37:dc:42:80:6f:3f:42:06:39:eb:
15:bb:bd:8a:4c:cf:ea:09:0e:7a:fa:ff:b3:71:5d:
a9:b6:6d:22:ac:a1:5c:65:46:8f:ce:1e:db:d2:5a:
f8:2b:43:00:09:a8:1b:10:0d:9f:fa:87:b7:1b:5f:
48:00:b5:2c:9a:66:fa:c6:2c:57:6b:05:10:c8:36:
c5:b5:63:64:b8:cf:b1:6a:0f:6d:b5:14:92:0e:17:
eb:f2:0a:85:fc:2b:4e:ea:ad:21:3c:a9:3c:d0:16:
46:93:de:c7:36:f7:35:b8:a1:62:08:f1:a9:7d:9f:
c2:75:95:fa:7c:fe:ff:ae:b9:c9:9e:f1:91:05:24:
1e:28:f1:a6:63:f4:10:05:ab:d0:c3:7c:88:bd:76:
a8:ce:ad:e0:46:3b:3b:de:34:91:7f:93:da:53:43:
cc:de:fd:59:80:05:61:aa:b0:ba:9d:e4:21:26:90:
5b:21:0e:09:db:01:3b:81:44:58:9c:43:a8:8d:05:
ef:af:d3:90:c9:aa:ce:42:e7:da:cb:5e:32:79:0d:
54:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:10:40:97:AB:CB:4F:41:11:AD:EC:CA:30:5F:5E:B1:22:8B:FC:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/300100b3-97cb-3da3-a966-2532658dddbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:38:2c:10:94:47:f6:aa:8b:a4:05:88:c6:71:b2:c2:e8:7f:
8f:a4:09:88:cb:a4:c7:9a:59:43:ac:cc:3e:34:76:30:ab:6e:
ad:05:0d:85:e0:61:81:26:c3:27:e2:2d:5b:c9:bd:02:48:3e:
d3:96:b8:7a:81:a8:14:6c:17:15:1f:98:be:30:b3:ce:ca:98:
e9:66:30:6a:e2:80:4f:1f:77:a5:47:c5:5e:ef:b8:28:e9:32:
45:fe:d8:17:a0:12:1e:8d:04:20:06:07:60:e0:6e:be:d7:90:
c7:bb:29:84:cf:c2:29:52:13:69:43:36:dc:d3:1f:21:cc:0e:
51:db:7a:e7:f4:87:81:3d:a8:9e:3b:0e:4d:d1:24:08:20:38:
14:a8:4e:53:bb:4e:82:e5:ab:37:4d:35:15:14:40:92:94:72:
3f:46:f2:9d:6e:9d:40:0c:e4:b0:80:dc:c6:26:3a:d2:bc:2b:
80:4f:07:dd:c6:49:c7:2f:40:17:92:3e:fb:9b:51:64:f0:e1:
57:4c:76:e3:a8:00:87:1d:31:51:df:94:59:6d:a7:44:aa:07:
b1:4a:34:28:3d:1c:53:da:b1:6e:8b:b8:7a:d9:29:8a:fd:e4:
f3:fa:26:81:8a:51:f7:f5:5b:f6:11:0d:c2:30:78:ec:89:61:
14:a0:e4:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK6R+4jVIY/o8gEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk
YTkwZWU0MjctNTYwYy00MzQ0LTk5Y2QtN2QyNjljMWFkZDY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDK72kUOKyvzaFrwMgXszT+SH0FNOdDq1eT/
8XYPWME33QiOJyU2ZgfRzjLVoYo3VjfcQoBvP0IGOesVu72KTM/qCQ56+v+zcV2p
tm0irKFcZUaPzh7b0lr4K0MACagbEA2f+oe3G19IALUsmmb6xixXawUQyDbFtWNk
uM+xag9ttRSSDhfr8gqF/CtO6q0hPKk80BZGk97HNvc1uKFiCPGpfZ/CdZX6fP7/
rrnJnvGRBSQeKPGmY/QQBavQw3yIvXaozq3gRjs73jSRf5PaU0PM3v1ZgAVhqrC6
neQhJpBbIQ4J2wE7gURYnEOojQXvr9OQyarOQufay14yeQ1UXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBIQQJery09BEa3syjBfXrEii/xRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzAwMTAwYjMtOTdjYi0z
ZGEzLWE5NjYtMjUzMjY1OGRkZGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxvuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC84LBCUR/aqi6QFiMZxssLof4+kCYjLpMeaWUOszD40djCrbq0FDYXg
YYEmwyfiLVvJvQJIPtOWuHqBqBRsFxUfmL4ws87KmOlmMGrigE8fd6VHxV7vuCjp
MkX+2BegEh6NBCAGB2Dgbr7XkMe7KYTPwilSE2lDNtzTHyHMDlHbeuf0h4E9qJ47
Dk3RJAggOBSoTlO7ToLlqzdNNRUUQJKUcj9G8p1unUAM5LCA3MYmOtK8K4BPB93G
SccvQBeSPvubUWTw4VdMduOoAIcdMVHflFltp0SqB7FKNCg9HFPasW6LuHrZKYr9
5PP6JoGKUff1W/YRDcIweOyJYRSg5Cw=
-----END CERTIFICATE-----
Generated at Wed Apr 9 18:31:53 2025 by rpki-client