Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1/f57db452-5b74-3562-992f-ff43177b4c28.roa
File: f57db452-5b74-3562-992f-ff43177b4c28.roa (raw, json)
Hash identifier: f2LwFt2nURSpWdKJQIjf0w10XtSMCWwUPPBcOLMa8i0=
Subject key identifier: B2:89:1B:0E:41:35:E3:9D:C0:7A:9A:5A:46:D0:44:4F:D5:98:D4:25
Certificate issuer: /CN=aa750f8e-a6ce-4a3f-8257-bc12479a72b1
Certificate serial: 010D0C9F432858491D71739C18BCCA8FAE442E80
Authority key identifier: D7:16:B1:3C:45:DF:41:9A:DC:28:CA:D8:B1:30:C0:CB:BA:9F:C4:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1/f57db452-5b74-3562-992f-ff43177b4c28.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 64264
IP address blocks: 23.138.216.0/24 maxlen: 24
167.253.110.0/24 maxlen: 24
2602:fb6b::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:73:9c:18:bc:ca:8f:ae:44:2e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa750f8e-a6ce-4a3f-8257-bc12479a72b1
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=3b640a89-d0d4-43d4-a173-abee7746c374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cb:ec:4d:5d:49:52:0d:2d:73:6f:2d:7b:ad:
7f:0d:66:35:fc:d1:8b:f0:e0:a9:50:15:78:c4:a3:
4e:a5:84:e7:a3:56:6c:55:ec:9d:81:f1:5c:1d:42:
b3:df:3b:31:6d:f4:09:f9:5d:57:30:a0:e4:f6:8e:
6a:58:8c:a7:9c:0b:3e:c9:d4:ca:de:9a:7e:42:6a:
d6:4f:8e:3c:7b:68:ae:d0:a6:8a:41:b9:1c:51:0b:
be:e4:bd:17:a6:8a:ba:c4:73:72:c7:bd:7b:a3:6d:
04:b1:f6:41:5b:37:eb:0b:f9:42:1e:33:36:04:4a:
69:91:0a:44:79:23:83:d7:17:14:dc:66:49:ce:db:
0d:a1:7b:98:84:78:76:d7:14:93:b1:35:ca:92:7b:
b1:a3:fa:82:b0:65:08:64:7f:ab:a4:b7:d6:01:92:
4c:ad:23:14:2e:d2:21:7b:01:1b:0e:e5:95:4d:67:
af:44:da:14:7c:22:17:6e:44:0e:eb:84:fd:5a:ae:
fc:4b:77:03:4e:55:41:b7:64:f4:5d:31:e3:36:b8:
b2:54:51:77:0f:0b:e8:0f:45:04:85:36:86:d0:ce:
87:8c:24:55:b7:8d:2f:0b:41:6f:03:f1:ce:4d:1a:
48:d6:85:86:17:b9:b1:0b:fa:30:7f:95:7d:0c:9f:
63:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:89:1B:0E:41:35:E3:9D:C0:7A:9A:5A:46:D0:44:4F:D5:98:D4:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1/f57db452-5b74-3562-992f-ff43177b4c28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1/aa750f8e-a6ce-4a3f-8257-bc12479a72b1.crl
X509v3 Authority Key Identifier:
keyid:D7:16:B1:3C:45:DF:41:9A:DC:28:CA:D8:B1:30:C0:CB:BA:9F:C4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1.cer
sbgp-ipAddrBlock: critical
IPv4:
23.138.216.0/24
167.253.110.0/24
IPv6:
2602:fb6b::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:6f:5c:21:07:f9:bd:5a:c1:01:ee:23:76:54:82:d4:79:de:
66:47:bc:1d:60:fe:0a:95:03:98:f6:9a:68:9b:33:7f:1b:26:
15:a3:1a:4b:e5:3f:47:87:6b:0f:29:df:8f:22:df:56:b8:51:
a7:c1:08:03:64:70:54:ae:22:f6:49:c5:fc:5b:08:7f:e2:03:
20:44:ea:bd:e4:44:d3:e3:a9:99:0c:7e:72:3f:ef:37:58:f7:
99:19:1b:4e:67:15:91:79:28:b7:f4:ef:21:35:35:51:74:3b:
3f:1a:a8:56:b4:3d:f7:85:4e:6d:76:be:b8:47:91:d2:56:7c:
5d:5c:76:1a:0d:40:e5:0f:43:9f:7a:41:5e:64:a3:ef:0f:1d:
52:28:54:50:96:ca:58:e2:24:12:e8:44:cc:a7:96:ff:6a:8d:
d2:e8:77:07:de:f3:8d:84:b6:45:c3:d7:77:37:7b:ec:7f:7a:
55:5c:3a:b5:36:a8:59:6a:9d:06:d9:41:30:01:2b:ca:81:2c:
35:14:f0:e0:73:cc:68:db:58:d6:16:da:f2:87:c2:73:df:d9:
ed:27:31:81:d7:bd:e6:0c:85:38:aa:c7:33:bb:28:ac:b8:b5:
f3:be:7a:23:26:9f:d1:38:f9:a9:b4:52:fd:da:4f:4c:99:c0:
6f:37:88:37
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEkdcXOcGLzKj65ELoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWE3NTBmOGUtYTZjZS00YTNmLTgyNTctYmMxMjQ3OWE3
MmIxMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk
M2I2NDBhODktZDBkNC00M2Q0LWExNzMtYWJlZTc3NDZjMzc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8vsTV1JUg0tc28te61/DWY1/NGL8OCpUBV4
xKNOpYTno1ZsVeydgfFcHUKz3zsxbfQJ+V1XMKDk9o5qWIynnAs+ydTK3pp+QmrW
T448e2iu0KaKQbkcUQu+5L0Xpoq6xHNyx717o20EsfZBWzfrC/lCHjM2BEppkQpE
eSOD1xcU3GZJztsNoXuYhHh21xSTsTXKknuxo/qCsGUIZH+rpLfWAZJMrSMULtIh
ewEbDuWVTWevRNoUfCIXbkQO64T9Wq78S3cDTlVBt2T0XTHjNriyVFF3DwvoD0UE
hTaG0M6HjCRVt40vC0FvA/HOTRpI1oWGF7mxC/owf5V9DJ9j+QIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFLKJGw5BNeOdwHqaWkbQRE/VmNQlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYTc1
MGY4ZS1hNmNlLTRhM2YtODI1Ny1iYzEyNDc5YTcyYjEvZjU3ZGI0NTItNWI3NC0z
NTYyLTk5MmYtZmY0MzE3N2I0YzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWE3NTBmOGUtYTZjZS00YTNmLTgy
NTctYmMxMjQ3OWE3MmIxL2FhNzUwZjhlLWE2Y2UtNGEzZi04MjU3LWJjMTI0Nzlh
NzJiMS5jcmwwHwYDVR0jBBgwFoAU1xaxPEXfQZrcKMrYsTDAy7qfxNEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYTc1MGY4ZS1hNmNlLTRhM2YtODI1Ny1iYzEy
NDc5YTcyYjEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF4rYAwQA
p/1uMA4EAgACMAgDBgQmAvtrADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzb1whB/m9WsEB7iN2VILUed5m
R7wdYP4KlQOY9ppomzN/GyYVoxpL5T9Hh2sPKd+PIt9WuFGnwQgDZHBUriL2ScX8
Wwh/4gMgROq95ETT46mZDH5yP+83WPeZGRtOZxWReSi39O8hNTVRdDs/GqhWtD33
hU5tdr64R5HSVnxdXHYaDUDlD0OfekFeZKPvDx1SKFRQlspY4iQS6ETMp5b/ao3S
6HcH3vONhLZFw9d3N3vsf3pVXDq1NqhZap0G2UEwASvKgSw1FPDgc8xo21jWFtry
h8Jz39ntJzGB173mDIU4qsczuyisuLXzvnojJp/ROPmptFL92k9MmcBvN4g3
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:06:46 2025 by rpki-client