Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/599a3cef-130f-3ac0-802b-3ae5797ea70e.roa
File: 599a3cef-130f-3ac0-802b-3ae5797ea70e.roa (raw, json)
Hash identifier: jETcMpUZ3Au66Liq/I8uX7Uz4dK0Dhf3BFcB5WXiy8M=
Subject key identifier: 57:57:56:F2:94:29:08:FE:CF:17:84:A4:90:BD:56:D6:F8:7B:85:C3
Certificate issuer: /CN=c88386bc-096d-46b5-8278-7abb79f23665
Certificate serial: 010D0C9F4328584930DE7181B5F29E1DBAEB1280
Authority key identifier: 7D:3F:78:AA:D9:A1:EE:C4:6E:D8:24:9F:83:D2:8C:69:53:09:D2:3A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/599a3cef-130f-3ac0-802b-3ae5797ea70e.roa
Signing time: Sat 15 Mar 2025 01:00:39 +0000
ROA not before: Sat 15 Mar 2025 01:00:39 +0000
ROA not after: Fri 13 Jun 2025 01:00:39 +0000
asID: 7311
IP address blocks: 23.155.64.0/24 maxlen: 24
161.129.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:de:71:81:b5:f2:9e:1d:ba:eb:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c88386bc-096d-46b5-8278-7abb79f23665
Validity
Not Before: Mar 15 01:00:39 2025 GMT
Not After : Jun 13 01:00:39 2025 GMT
Subject: CN=a2870d6c-7b8e-4b06-8c39-ef2f2b75973a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a9:4d:2a:b0:ac:58:14:a8:89:52:33:86:b6:
0e:39:4d:71:ba:09:a2:c5:0c:88:d0:ba:1b:8c:65:
40:1a:d3:b1:88:a3:0f:ed:9c:13:ec:f5:aa:58:2e:
80:db:ad:e1:ea:e9:b3:1f:52:15:3e:60:32:47:5c:
e8:62:d7:38:15:22:71:df:f4:42:32:bd:9f:cf:00:
ae:b0:9a:9c:31:a6:e8:0b:fe:71:1b:36:80:38:45:
29:64:17:47:5b:44:86:96:95:82:4c:2a:52:e7:5d:
93:40:79:0e:ff:a7:3a:28:39:12:7e:ff:c0:0f:5b:
67:b9:67:ca:96:14:32:e0:f0:52:fc:99:5b:c6:89:
15:fd:ea:ee:30:cc:17:d2:d9:3e:89:5f:e8:b4:eb:
a1:66:14:67:96:c3:cf:cd:63:dc:96:40:98:80:99:
69:0e:f2:c2:32:41:5d:49:62:e3:b6:85:05:c0:52:
39:ce:34:40:b5:e3:d8:48:9f:40:33:f0:13:4b:0d:
81:79:33:82:ad:5c:67:6e:f7:da:47:80:08:33:24:
e6:1f:08:44:37:fa:68:b1:c4:73:14:c0:95:23:7d:
1b:73:cd:ca:78:bc:86:56:aa:b5:d8:a9:05:c2:6d:
22:3f:6a:54:e7:36:06:be:bc:f7:33:a1:ba:c1:37:
72:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:57:56:F2:94:29:08:FE:CF:17:84:A4:90:BD:56:D6:F8:7B:85:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/599a3cef-130f-3ac0-802b-3ae5797ea70e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/c88386bc-096d-46b5-8278-7abb79f23665.crl
X509v3 Authority Key Identifier:
keyid:7D:3F:78:AA:D9:A1:EE:C4:6E:D8:24:9F:83:D2:8C:69:53:09:D2:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665.cer
sbgp-ipAddrBlock: critical
IPv4:
23.155.64.0/24
161.129.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:74:c6:9a:ef:9a:db:08:5c:ba:e7:32:fa:72:56:89:7b:30:
21:b9:77:0b:a3:9c:33:16:f5:09:9f:51:bd:6e:c3:b3:1f:09:
ca:fe:c0:8f:50:2f:fc:04:df:62:aa:3d:9d:4b:46:ca:d5:b0:
6e:fc:5f:cd:7e:a6:c0:f0:d8:9c:60:4e:85:0c:6a:95:84:3e:
d1:a4:b8:26:5d:6b:4a:94:1e:ef:e7:5f:de:da:67:06:4e:97:
4c:82:b3:05:b0:97:e3:1e:50:d9:32:0f:13:b9:69:e5:e4:62:
66:3e:6b:ee:63:a1:8e:da:cf:e1:4a:a5:56:f4:54:b8:2f:70:
8b:f0:52:ff:c2:d4:20:68:b2:0f:2b:bf:d2:1a:52:7e:37:d6:
ea:c2:9d:83:a3:8e:b6:fd:cf:5f:3b:23:5a:02:4c:ff:ee:b6:
45:50:26:7d:d0:fe:fc:98:15:6b:59:c2:52:05:76:62:87:c0:
fd:a1:18:c0:a5:fc:ec:98:ed:b7:02:2e:9b:50:86:84:6a:7c:
11:e6:72:e0:35:ff:b7:65:6b:47:ca:cd:e7:f8:e7:fc:3c:6e:
29:ce:ca:5e:84:a6:ae:60:ff:d8:a9:98:92:c8:bd:5a:97:55:
79:25:ad:c6:39:ca:d3:f0:46:91:04:7f:c6:ff:dd:35:44:a3:
7e:a8:18:41
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkw3nGBtfKeHbrrEoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg4Mzg2YmMtMDk2ZC00NmI1LTgyNzgtN2FiYjc5ZjIz
NjY1MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk
YTI4NzBkNmMtN2I4ZS00YjA2LThjMzktZWYyZjJiNzU5NzNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3alNKrCsWBSoiVIzhrYOOU1xugmixQyI0Lob
jGVAGtOxiKMP7ZwT7PWqWC6A263h6umzH1IVPmAyR1zoYtc4FSJx3/RCMr2fzwCu
sJqcMaboC/5xGzaAOEUpZBdHW0SGlpWCTCpS512TQHkO/6c6KDkSfv/AD1tnuWfK
lhQy4PBS/JlbxokV/eruMMwX0tk+iV/otOuhZhRnlsPPzWPclkCYgJlpDvLCMkFd
SWLjtoUFwFI5zjRAtePYSJ9AM/ATSw2BeTOCrVxnbvfaR4AIMyTmHwhEN/poscRz
FMCVI30bc83KeLyGVqq12KkFwm0iP2pU5zYGvrz3M6G6wTdyzQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFFdXVvKUKQj+zxeEpJC9Vtb4e4XDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jODgz
ODZiYy0wOTZkLTQ2YjUtODI3OC03YWJiNzlmMjM2NjUvNTk5YTNjZWYtMTMwZi0z
YWMwLTgwMmItM2FlNTc5N2VhNzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzg4Mzg2YmMtMDk2ZC00NmI1LTgy
NzgtN2FiYjc5ZjIzNjY1L2M4ODM4NmJjLTA5NmQtNDZiNS04Mjc4LTdhYmI3OWYy
MzY2NS5jcmwwHwYDVR0jBBgwFoAUfT94qtmh7sRu2CSfg9KMaVMJ0jowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9jODgzODZiYy0wOTZkLTQ2YjUtODI3OC03YWJi
NzlmMjM2NjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF5tAAwQA
oYG6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAH50xprvmtsIXLrnMvpyVol7MCG5dwujnDMW9QmfUb1uw7Mf
Ccr+wI9QL/wE32KqPZ1LRsrVsG78X81+psDw2JxgToUMapWEPtGkuCZda0qUHu/n
X97aZwZOl0yCswWwl+MeUNkyDxO5aeXkYmY+a+5joY7az+FKpVb0VLgvcIvwUv/C
1CBosg8rv9IaUn431urCnYOjjrb9z187I1oCTP/utkVQJn3Q/vyYFWtZwlIFdmKH
wP2hGMCl/OyY7bcCLptQhoRqfBHmcuA1/7dla0fKzef45/w8binOyl6Epq5g/9ip
mJLIvVqXVXklrcY5ytPwRpEEf8b/3TVEo36oGEE=
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:10:02 2025 by rpki-client