Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6999198-2e40-4b47-b19f-dd16e9814295/5fd3e881-c0a6-3b48-8a88-3dbc1ebaa0ac.roa
File: 5fd3e881-c0a6-3b48-8a88-3dbc1ebaa0ac.roa (raw, json)
Hash identifier: Adq9mrOJ5rSScFiq6/T4KInporokq15XRnb10q9HG3s=
Subject key identifier: BF:9C:42:B5:57:1E:3F:9E:D4:1C:8E:5F:79:B3:D6:6F:7C:4F:D7:FF
Certificate issuer: /CN=b6999198-2e40-4b47-b19f-dd16e9814295
Certificate serial: 010D0C9F43285848B1F62A5966791B606C00D280
Authority key identifier: 18:01:56:10:87:D0:2F:F5:7A:58:D7:ED:E1:94:03:1A:D7:BC:57:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6999198-2e40-4b47-b19f-dd16e9814295.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6999198-2e40-4b47-b19f-dd16e9814295/5fd3e881-c0a6-3b48-8a88-3dbc1ebaa0ac.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 397732
IP address blocks: 23.143.232.0/24 maxlen: 24
64.93.88.0/22 maxlen: 24
66.118.20.0/22 maxlen: 24
199.192.152.0/21 maxlen: 24
2604:b840::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:2a:59:66:79:1b:60:6c:00:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6999198-2e40-4b47-b19f-dd16e9814295
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=e11f8e03-dab3-4789-820d-6500c0687ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e6:d9:88:32:97:dd:53:d3:ea:7d:35:03:f0:
1c:53:c0:af:6a:49:1e:4a:51:c0:bf:ef:d6:75:09:
07:f0:30:5b:5a:17:4d:f4:db:8e:78:9e:ab:24:bd:
49:1c:5a:c9:aa:7b:b9:27:38:9d:27:3c:61:25:c6:
8c:43:aa:87:36:d4:e8:ba:9f:88:ba:14:b3:53:7f:
61:d8:78:2a:8a:3b:ec:46:a5:7a:ea:46:78:59:9f:
05:0f:96:ca:ff:8e:0c:fb:f2:4d:07:ba:a2:9d:10:
be:a0:67:0c:ef:f1:21:93:ad:8c:84:58:83:ab:d3:
6e:9a:c3:07:cb:2c:26:71:aa:76:61:f0:1a:f3:79:
31:dc:20:4a:4c:40:f7:64:ef:dd:4f:b5:b7:90:e7:
8a:9e:5c:00:bf:7b:c2:81:f4:55:d7:2e:d2:29:15:
04:7b:4c:e7:76:3f:95:45:ab:db:45:ff:94:b3:74:
73:70:91:f0:1e:55:72:6e:82:28:e8:9a:6f:07:55:
e7:aa:b0:fc:2f:4e:fe:3d:cf:bf:45:5a:b1:1e:cf:
25:29:91:6c:39:55:66:dd:84:e0:0d:0e:a2:91:7a:
7f:f5:cc:a0:a7:b6:d7:5c:f2:2a:4a:89:a2:1d:62:
ad:41:48:89:16:08:96:a8:f3:81:f6:5a:a5:1f:9c:
ab:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9C:42:B5:57:1E:3F:9E:D4:1C:8E:5F:79:B3:D6:6F:7C:4F:D7:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6999198-2e40-4b47-b19f-dd16e9814295/5fd3e881-c0a6-3b48-8a88-3dbc1ebaa0ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6999198-2e40-4b47-b19f-dd16e9814295/b6999198-2e40-4b47-b19f-dd16e9814295.crl
X509v3 Authority Key Identifier:
keyid:18:01:56:10:87:D0:2F:F5:7A:58:D7:ED:E1:94:03:1A:D7:BC:57:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6999198-2e40-4b47-b19f-dd16e9814295.cer
sbgp-ipAddrBlock: critical
IPv4:
23.143.232.0/24
64.93.88.0/22
66.118.20.0/22
199.192.152.0/21
IPv6:
2604:b840::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:a2:8c:9e:c0:b9:f6:b1:96:30:a0:7f:50:85:20:5d:35:6b:
9d:cb:aa:22:18:ca:ac:47:8c:44:cd:15:1b:c8:0a:15:8d:6f:
3c:97:ff:64:8a:74:2e:25:00:58:8f:74:06:93:d8:46:41:8f:
87:d1:27:85:47:2c:e5:f7:fe:32:83:25:d9:95:1e:e2:f2:3a:
75:4b:d6:6c:5f:3b:cf:c5:a1:ff:c1:1a:8d:ff:b1:81:7b:16:
6a:b0:54:8a:53:13:6c:ab:99:f1:5a:c4:1e:87:d0:d8:6c:5e:
db:a5:d9:a4:e2:1e:2c:df:b6:87:73:11:70:d2:75:69:07:14:
78:8d:71:13:a9:6f:a4:ae:1f:4c:04:d3:ab:86:7e:a4:c3:3f:
7c:7d:74:79:63:07:72:25:53:e1:36:8e:3c:96:50:33:fc:a3:
d4:26:bb:31:89:7e:41:34:20:77:a5:0b:63:36:83:06:bb:5e:
1b:77:be:0d:f5:89:36:9d:06:f4:46:a0:19:d8:8e:b1:17:d3:
78:85:ab:ae:73:49:67:5e:8b:57:ed:be:ec:a6:39:d2:f7:27:
54:70:cd:61:7c:4b:58:59:73:87:c5:7f:4a:ba:d3:89:f3:0a:
56:5e:56:a3:62:ed:d6:eb:a6:34:4d:e1:b2:d5:57:8f:54:8a:
31:3f:3a:11
-----BEGIN CERTIFICATE-----
MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEix9ipZZnkbYGwA0oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjY5OTkxOTgtMmU0MC00YjQ3LWIxOWYtZGQxNmU5ODE0
Mjk1MB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk
ZTExZjhlMDMtZGFiMy00Nzg5LTgyMGQtNjUwMGMwNjg3YWUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwubZiDKX3VPT6n01A/AcU8CvakkeSlHAv+/W
dQkH8DBbWhdN9NuOeJ6rJL1JHFrJqnu5JzidJzxhJcaMQ6qHNtToup+IuhSzU39h
2HgqijvsRqV66kZ4WZ8FD5bK/44M+/JNB7qinRC+oGcM7/Ehk62MhFiDq9NumsMH
yywmcap2YfAa83kx3CBKTED3ZO/dT7W3kOeKnlwAv3vCgfRV1y7SKRUEe0zndj+V
RavbRf+Us3RzcJHwHlVyboIo6JpvB1XnqrD8L07+Pc+/RVqxHs8lKZFsOVVm3YTg
DQ6ikXp/9cygp7bXXPIqSomiHWKtQUiJFgiWqPOB9lqlH5yr6QIDAQABo4IDdjCC
A3IwHQYDVR0OBBYEFL+cQrVXHj+e1ByOX3mz1m98T9f/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNjk5
OTE5OC0yZTQwLTRiNDctYjE5Zi1kZDE2ZTk4MTQyOTUvNWZkM2U4ODEtYzBhNi0z
YjQ4LThhODgtM2RiYzFlYmFhMGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjY5OTkxOTgtMmU0MC00YjQ3LWIx
OWYtZGQxNmU5ODE0Mjk1L2I2OTk5MTk4LTJlNDAtNGI0Ny1iMTlmLWRkMTZlOTgx
NDI5NS5jcmwwHwYDVR0jBBgwFoAUGAFWEIfQL/V6WNft4ZQDGte8VzwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9iNjk5OTE5OC0yZTQwLTRiNDctYjE5Zi1kZDE2
ZTk4MTQyOTUuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAF4/oAwQC
QF1YAwQCQnYUAwQDx8CYMA0EAgACMAcDBQAmBLhAMFQGA1UdIAEB/wRKMEgwRgYI
KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz
b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAF6ijJ7Aufax
ljCgf1CFIF01a53LqiIYyqxHjETNFRvIChWNbzyX/2SKdC4lAFiPdAaT2EZBj4fR
J4VHLOX3/jKDJdmVHuLyOnVL1mxfO8/Fof/BGo3/sYF7FmqwVIpTE2yrmfFaxB6H
0NhsXtul2aTiHizftodzEXDSdWkHFHiNcROpb6SuH0wE06uGfqTDP3x9dHljB3Il
U+E2jjyWUDP8o9QmuzGJfkE0IHelC2M2gwa7Xht3vg31iTadBvRGoBnYjrEX03iF
q65zSWdei1ftvuymOdL3J1RwzWF8S1hZc4fFf0q604nzClZeVqNi7dbrpjRN4bLV
V49UijE/OhE=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:54 2025 by rpki-client