Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/932fa17b-4260-3a87-96bd-e02baa9fcf7f.roa
File: 932fa17b-4260-3a87-96bd-e02baa9fcf7f.roa (raw, json)
Hash identifier: 5mbKpZJkj8UB+2M/oRdbD8a+EVtm812mdl2iY3KEmvY=
Subject key identifier: 2D:FE:41:CD:48:EF:88:FD:77:91:3F:54:68:E4:0D:D7:B3:A3:7C:E1
Certificate issuer: /CN=d2e35455-e012-4897-80f6-c6386a9f779c
Certificate serial: 010D0C9F4328584929E3CC98B80D277FE40D6340
Authority key identifier: BC:45:84:C3:68:98:D4:CD:9B:E6:76:83:5C:33:53:C3:63:A8:17:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/932fa17b-4260-3a87-96bd-e02baa9fcf7f.roa
Signing time: Wed 12 Mar 2025 13:00:53 +0000
ROA not before: Wed 12 Mar 2025 13:00:53 +0000
ROA not after: Tue 10 Jun 2025 13:00:53 +0000
asID: 26520
IP address blocks: 23.171.88.0/24 maxlen: 24
2602:f987::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:29:e3:cc:98:b8:0d:27:7f:e4:0d:63:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e35455-e012-4897-80f6-c6386a9f779c
Validity
Not Before: Mar 12 13:00:53 2025 GMT
Not After : Jun 10 13:00:53 2025 GMT
Subject: CN=11d1e2ad-db4e-4831-ae76-739bd79bd1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d7:1f:99:af:7b:95:1f:c2:35:ac:ff:05:05:
a9:65:87:1b:8a:22:d9:f3:59:64:db:f9:cc:c2:10:
e7:67:a5:6a:57:1b:54:35:af:95:92:57:37:a8:4f:
97:78:50:b4:40:13:24:4a:ef:39:77:d6:8f:9f:81:
e4:8e:f4:e2:b1:fc:91:d6:93:53:6b:4f:b4:9d:02:
49:1c:af:21:10:be:f6:b9:a5:c5:48:08:c6:4e:67:
2d:32:3c:63:f4:66:51:12:b7:17:d8:e8:a5:fe:50:
9f:81:0d:75:aa:f1:d2:cc:3b:2e:0a:9e:dd:19:dc:
67:f0:02:7f:e4:55:b1:56:5b:d9:fe:3e:d3:0d:17:
ee:4f:7d:3f:20:12:83:d0:cd:34:cc:6c:20:33:18:
36:69:48:9b:fc:07:08:3f:52:20:73:cf:cd:0e:bd:
96:36:9a:c6:2f:95:9a:ce:3e:34:2c:ef:c1:4f:4b:
2e:a5:e2:0a:ad:e8:ea:59:47:dd:72:5c:f6:9a:dc:
5a:cd:03:d2:04:5e:f6:40:3e:7a:ef:0d:f6:0a:ab:
42:1a:b8:b6:24:cb:da:4b:a9:3b:a3:db:80:10:11:
fc:37:75:76:85:fd:98:db:a2:69:e2:b1:9e:57:7b:
d2:d7:d1:d5:ee:02:d2:aa:d7:dd:75:60:48:ac:8c:
3f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FE:41:CD:48:EF:88:FD:77:91:3F:54:68:E4:0D:D7:B3:A3:7C:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/932fa17b-4260-3a87-96bd-e02baa9fcf7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/d2e35455-e012-4897-80f6-c6386a9f779c.crl
X509v3 Authority Key Identifier:
keyid:BC:45:84:C3:68:98:D4:CD:9B:E6:76:83:5C:33:53:C3:63:A8:17:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.171.88.0/24
IPv6:
2602:f987::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:53:b3:f2:6d:23:56:4a:3b:bc:03:00:10:83:c2:2f:41:ab:
62:3e:01:6f:20:0d:48:c0:e3:43:c6:05:31:fa:8f:13:f1:4d:
d4:e9:cc:79:3b:30:9d:a4:7d:02:99:0f:0e:f2:5f:81:f6:59:
87:d5:53:a5:1f:c0:95:db:1e:6f:b5:58:f8:09:4d:61:12:27:
aa:c3:dd:aa:36:f4:2f:88:95:b0:bc:eb:d8:87:0d:31:0a:2b:
52:be:10:8d:a7:21:6e:e6:c6:1b:1a:dd:57:4f:bd:ec:cc:0e:
f6:0a:be:ae:33:0d:17:dd:66:f7:1f:5f:77:0e:ec:59:87:f9:
89:46:1d:a4:48:7c:13:38:37:c8:d5:45:3a:1c:c1:98:81:49:
73:fb:da:de:fb:aa:4c:b7:d9:35:db:87:c3:98:1f:a0:f7:8a:
d5:fe:da:fb:f0:5a:27:ce:02:9b:bf:e2:11:ad:7e:68:5f:f9:
b7:00:26:2e:e8:22:d6:e9:79:64:58:2c:cf:a9:f2:f7:de:fd:
7e:45:dd:73:2c:48:98:7d:0c:a7:65:cf:4b:31:3f:37:2b:2a:
b0:0e:d9:d1:c0:dc:c8:19:2c:e8:fc:6c:ab:23:5a:e5:86:ce:
ca:ca:fe:54:89:1f:1c:98:c5:f4:e1:c3:cc:12:e4:eb:a3:36:
92:fa:a1:13
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEkp48yYuA0nf+QNY0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDJlMzU0NTUtZTAxMi00ODk3LTgwZjYtYzYzODZhOWY3
NzljMB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk
MTFkMWUyYWQtZGI0ZS00ODMxLWFlNzYtNzM5YmQ3OWJkMWNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtcfma97lR/CNaz/BQWpZYcbiiLZ81lk2/nM
whDnZ6VqVxtUNa+Vklc3qE+XeFC0QBMkSu85d9aPn4HkjvTisfyR1pNTa0+0nQJJ
HK8hEL72uaXFSAjGTmctMjxj9GZRErcX2Oil/lCfgQ11qvHSzDsuCp7dGdxn8AJ/
5FWxVlvZ/j7TDRfuT30/IBKD0M00zGwgMxg2aUib/AcIP1Igc8/NDr2WNprGL5Wa
zj40LO/BT0supeIKrejqWUfdclz2mtxazQPSBF72QD567w32CqtCGri2JMvaS6k7
o9uAEBH8N3V2hf2Y26Jp4rGeV3vS19HV7gLSqtfddWBIrIw/tQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFC3+Qc1I74j9d5E/VGjkDdezo3zhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kMmUz
NTQ1NS1lMDEyLTQ4OTctODBmNi1jNjM4NmE5Zjc3OWMvOTMyZmExN2ItNDI2MC0z
YTg3LTk2YmQtZTAyYmFhOWZjZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDJlMzU0NTUtZTAxMi00ODk3LTgw
ZjYtYzYzODZhOWY3NzljL2QyZTM1NDU1LWUwMTItNDg5Ny04MGY2LWM2Mzg2YTlm
Nzc5Yy5jcmwwHwYDVR0jBBgwFoAUvEWEw2iY1M2b5naDXDNTw2OoF3swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9kMmUzNTQ1NS1lMDEyLTQ4OTctODBmNi1jNjM4
NmE5Zjc3OWMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6tYMA4E
AgACMAgDBgQmAvmHADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBWU7PybSNWSju8AwAQg8IvQatiPgFvIA1I
wONDxgUx+o8T8U3U6cx5OzCdpH0CmQ8O8l+B9lmH1VOlH8CV2x5vtVj4CU1hEieq
w92qNvQviJWwvOvYhw0xCitSvhCNpyFu5sYbGt1XT73szA72Cr6uMw0X3Wb3H193
DuxZh/mJRh2kSHwTODfI1UU6HMGYgUlz+9re+6pMt9k124fDmB+g94rV/tr78Fon
zgKbv+IRrX5oX/m3ACYu6CLW6XlkWCzPqfL33v1+Rd1zLEiYfQynZc9LMT83Kyqw
DtnRwNzIGSzo/GyrI1rlhs7Kyv5UiR8cmMX04cPMEuTrozaS+qET
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:49:22 2025 by rpki-client