Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebf10f16-5f3c-4b91-8d9d-40a9535563bb/b2d7ed45-6b33-323b-80fc-6e75a1fa5591.roa
File: b2d7ed45-6b33-323b-80fc-6e75a1fa5591.roa (raw, json)
Hash identifier: KrtxXX9IaGbaSwSGyYGL/rnov9h0V6E6nOs/jtsZEPA=
Subject key identifier: 94:F8:B1:37:EC:59:94:82:DE:38:B1:CC:5F:CD:9B:BB:28:86:70:42
Certificate issuer: /CN=ebf10f16-5f3c-4b91-8d9d-40a9535563bb
Certificate serial: 010D0C9F432858491246B72BB6D1E43C9553A380
Authority key identifier: 21:70:A7:D4:B5:C5:D2:40:F1:E8:24:81:59:80:9B:00:C6:63:B2:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebf10f16-5f3c-4b91-8d9d-40a9535563bb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebf10f16-5f3c-4b91-8d9d-40a9535563bb/b2d7ed45-6b33-323b-80fc-6e75a1fa5591.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397529
IP address blocks: 23.132.144.0/24 maxlen: 24
2620:6f:2000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:b7:2b:b6:d1:e4:3c:95:53:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf10f16-5f3c-4b91-8d9d-40a9535563bb
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=3e659c21-6ee7-4bc3-8177-62325af457e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c6:d0:80:a4:a2:07:f0:ef:52:9d:ec:22:50:
1b:d4:27:a4:dc:58:60:1e:37:f9:11:50:1e:12:a2:
04:3e:d8:c2:71:d6:25:ca:04:90:4f:3f:5e:1d:2e:
a4:b6:5d:40:60:51:76:75:4f:f6:97:7a:95:52:31:
df:e8:71:55:b2:83:c4:81:63:a1:4d:30:74:85:60:
f0:4f:3f:df:25:a3:da:eb:4f:f4:4b:51:04:85:0e:
90:5c:4e:dc:e7:c7:e0:f4:20:fe:2e:8f:d7:53:d1:
84:b3:4d:a1:60:9f:10:63:6f:34:3a:2c:07:32:ff:
53:68:79:e9:e1:7a:ad:ef:f9:22:42:26:19:41:bc:
97:ed:0a:65:3d:84:6c:98:dd:bf:dd:2f:07:bc:0d:
1b:43:04:ef:c9:ff:cc:c2:90:e4:a4:f8:3c:77:71:
39:29:38:8b:ef:3c:1a:b3:3b:07:45:0a:a3:ff:49:
15:cc:b3:2b:19:36:33:f8:6a:b4:1e:1a:8a:00:aa:
bb:46:2c:b9:34:c2:9a:d5:15:70:a0:85:f4:44:05:
2c:27:99:8e:05:e8:6d:8d:3f:00:cc:ca:1a:4b:31:
28:54:93:21:6c:d3:34:89:e7:12:7d:5a:ff:d6:30:
83:83:9a:44:8f:58:2d:98:f3:2b:ce:b6:90:ff:b7:
02:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F8:B1:37:EC:59:94:82:DE:38:B1:CC:5F:CD:9B:BB:28:86:70:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebf10f16-5f3c-4b91-8d9d-40a9535563bb/b2d7ed45-6b33-323b-80fc-6e75a1fa5591.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebf10f16-5f3c-4b91-8d9d-40a9535563bb/ebf10f16-5f3c-4b91-8d9d-40a9535563bb.crl
X509v3 Authority Key Identifier:
keyid:21:70:A7:D4:B5:C5:D2:40:F1:E8:24:81:59:80:9B:00:C6:63:B2:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebf10f16-5f3c-4b91-8d9d-40a9535563bb.cer
sbgp-ipAddrBlock: critical
IPv4:
23.132.144.0/24
IPv6:
2620:6f:2000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:55:fa:26:d5:38:c2:e8:de:a9:de:86:b9:ac:5d:c4:4b:75:
9f:e8:95:02:0b:c6:bd:32:74:51:29:0a:0b:f9:ed:83:b5:25:
e1:87:f6:3c:58:f2:d3:2e:15:cb:fd:bc:3b:82:6d:4c:f8:15:
12:d7:a3:8a:8b:73:c8:05:3e:94:ee:98:10:3a:84:54:f3:37:
3a:cb:c4:3a:09:a7:36:f3:f8:61:71:0a:38:29:dc:10:63:5a:
e4:fa:1a:15:a8:00:83:69:d6:67:0e:16:c7:5b:3f:d3:c8:d5:
0b:5e:e9:e1:e7:01:eb:e0:6b:59:7c:ed:4c:e4:fd:6a:aa:f7:
18:b9:9d:e0:1e:3c:32:16:68:d2:92:33:f0:2b:3a:eb:b4:15:
b0:d0:32:2d:e9:2b:7a:33:04:51:ea:31:a6:56:eb:f7:89:d4:
e3:a4:8a:8f:68:45:08:51:43:22:a2:93:6b:db:1c:b2:56:c7:
71:50:01:4d:f4:d0:61:29:18:f8:f4:19:b3:3d:b8:b7:f8:95:
fe:2d:14:f1:c4:c4:b1:ee:47:16:3d:9d:1a:94:40:ed:38:f1:
88:74:36:81:fb:60:49:8b:6e:2c:2b:c9:52:1b:78:ca:ad:b6:
c0:eb:d9:73:cc:be:a2:d6:c3:cd:fb:f0:c6:3c:6f:7b:21:06:
fc:4f:d7:16
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEkSRrcrttHkPJVTo4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWJmMTBmMTYtNWYzYy00YjkxLThkOWQtNDBhOTUzNTU2
M2JiMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
M2U2NTljMjEtNmVlNy00YmMzLTgxNzctNjIzMjVhZjQ1N2UzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8bQgKSiB/DvUp3sIlAb1Cek3FhgHjf5EVAe
EqIEPtjCcdYlygSQTz9eHS6ktl1AYFF2dU/2l3qVUjHf6HFVsoPEgWOhTTB0hWDw
Tz/fJaPa60/0S1EEhQ6QXE7c58fg9CD+Lo/XU9GEs02hYJ8QY280OiwHMv9TaHnp
4Xqt7/kiQiYZQbyX7QplPYRsmN2/3S8HvA0bQwTvyf/MwpDkpPg8d3E5KTiL7zwa
szsHRQqj/0kVzLMrGTYz+Gq0HhqKAKq7Riy5NMKa1RVwoIX0RAUsJ5mOBehtjT8A
zMoaSzEoVJMhbNM0iecSfVr/1jCDg5pEj1gtmPMrzraQ/7cCswIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFJT4sTfsWZSC3jixzF/Nm7sohnBCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lYmYx
MGYxNi01ZjNjLTRiOTEtOGQ5ZC00MGE5NTM1NTYzYmIvYjJkN2VkNDUtNmIzMy0z
MjNiLTgwZmMtNmU3NWExZmE1NTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZWJmMTBmMTYtNWYzYy00YjkxLThk
OWQtNDBhOTUzNTU2M2JiL2ViZjEwZjE2LTVmM2MtNGI5MS04ZDlkLTQwYTk1MzU1
NjNiYi5jcmwwHwYDVR0jBBgwFoAUIXCn1LXF0kDx6CSBWYCbAMZjspwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9lYmYxMGYxNi01ZjNjLTRiOTEtOGQ5ZC00MGE5
NTM1NTYzYmIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF4SQMA8E
AgACMAkDBwAmIABvIAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKlX6JtU4wujeqd6GuaxdxEt1n+iVAgvG
vTJ0USkKC/ntg7Ul4Yf2PFjy0y4Vy/28O4JtTPgVEtejiotzyAU+lO6YEDqEVPM3
OsvEOgmnNvP4YXEKOCncEGNa5PoaFagAg2nWZw4Wx1s/08jVC17p4ecB6+BrWXzt
TOT9aqr3GLmd4B48MhZo0pIz8Cs667QVsNAyLekrejMEUeoxplbr94nU46SKj2hF
CFFDIqKTa9scslbHcVABTfTQYSkY+PQZsz24t/iV/i0U8cTEse5HFj2dGpRA7Tjx
iHQ2gftgSYtuLCvJUht4yq22wOvZc8y+otbDzfvwxjxveyEG/E/XFg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:50:41 2025 by rpki-client