Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/71f86ec9-2c20-38c2-b59e-3f1a52c018a1.roa
File: 71f86ec9-2c20-38c2-b59e-3f1a52c018a1.roa (raw, json)
Hash identifier: 9TZSCqKsS90ZQNiEYVZ7ekg3ypcudkl4SHsGTPGtLl8=
Subject key identifier: 19:7B:F4:BA:31:DE:C9:0C:BF:B7:4B:03:3E:92:F8:70:0A:B8:E2:5C
Certificate issuer: /CN=39812a66-44de-45e0-a65d-fd3a7673a954
Certificate serial: 010D0C9F4328584953C446505C6C103FD4BA8140
Authority key identifier: 8C:B9:CD:61:0D:4D:2F:72:85:2B:F0:01:D2:9B:B9:E9:9D:DF:98:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/71f86ec9-2c20-38c2-b59e-3f1a52c018a1.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 396422
IP address blocks: 23.151.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:46:50:5c:6c:10:3f:d4:ba:81:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39812a66-44de-45e0-a65d-fd3a7673a954
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=6b71fcae-70ce-44d5-83dc-7518d532df67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:35:11:c9:2f:cc:16:96:26:d2:ae:79:85:86:
89:0a:29:77:25:c4:1d:2e:3f:57:fa:40:10:7d:ba:
be:cf:e2:10:7d:fe:3c:a2:f0:8b:66:03:7e:40:ae:
9d:5d:2a:53:1a:f3:f3:14:23:61:22:f1:ec:b1:5d:
a5:ad:3c:26:9b:2f:cd:53:8d:8a:47:59:f3:6d:23:
f1:00:27:67:23:d2:77:00:84:6a:ab:fd:df:67:ab:
41:99:8f:83:fc:3d:7d:04:d1:fc:fa:40:e3:dd:2a:
66:16:30:49:18:de:5b:ae:60:9c:9d:c0:ff:29:74:
9f:b6:16:de:97:67:82:0e:72:b4:5c:53:cb:18:02:
69:5c:5d:b4:f2:df:cb:94:07:44:0e:e5:57:8b:e8:
8b:64:c9:5d:07:6c:83:51:d8:2a:e4:7c:02:ec:45:
ab:7d:6a:c9:2d:95:83:9f:09:57:06:f5:7b:68:7f:
d3:f2:6c:80:04:73:05:9e:a8:62:ae:02:ee:85:75:
3f:0e:01:8a:ab:40:72:84:0a:d5:f8:2d:90:7b:1f:
d4:2f:00:1b:53:c8:39:d5:04:70:b8:1c:13:1b:66:
66:8a:e8:8b:fd:7d:4f:9c:7f:92:6c:7b:54:d9:ef:
3b:80:60:75:de:9d:a3:bd:ae:94:f8:f5:d4:ae:07:
fb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7B:F4:BA:31:DE:C9:0C:BF:B7:4B:03:3E:92:F8:70:0A:B8:E2:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/71f86ec9-2c20-38c2-b59e-3f1a52c018a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/39812a66-44de-45e0-a65d-fd3a7673a954.crl
X509v3 Authority Key Identifier:
keyid:8C:B9:CD:61:0D:4D:2F:72:85:2B:F0:01:D2:9B:B9:E9:9D:DF:98:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954.cer
sbgp-ipAddrBlock: critical
IPv4:
23.151.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:15:25:64:2c:2d:e2:7e:74:75:30:4d:bc:7a:a3:09:47:70:
4e:e6:78:ab:01:fa:3d:07:25:04:9a:45:91:7c:f9:74:93:9e:
80:2c:21:ef:30:d6:83:15:63:84:60:e3:63:3b:0b:14:b4:9c:
4c:73:72:83:94:a3:af:18:4f:5c:4c:94:5e:00:38:ca:e9:93:
ab:fa:0f:bd:5f:7e:d8:cf:cf:6b:01:57:0c:ae:dc:57:0f:ed:
c1:0c:c9:30:6b:5f:24:62:30:d1:ab:5b:1c:4f:5c:75:a2:52:
5a:50:b8:d3:7c:a9:b2:df:12:d6:36:52:b6:5f:ea:3f:05:b5:
11:da:41:17:80:3b:2f:85:e8:52:f5:eb:64:d9:65:15:0f:e1:
5c:e0:48:b0:08:b5:8c:5d:84:bf:a5:7e:ba:46:40:70:30:c7:
cb:5e:7f:e6:03:d7:dd:d8:d6:32:c6:5c:e6:7b:f2:fd:e8:d1:
0b:2a:1d:c2:b7:c3:39:83:7a:06:a2:90:5b:59:f4:01:af:ce:
84:6a:e7:3b:a9:58:e8:16:5d:d0:d7:39:4b:7b:5c:2c:37:6c:
9a:2d:5c:2a:ad:39:2a:6d:66:65:a1:b3:fe:30:1a:4b:f9:6b:
3a:08:f8:32:c3:3e:e4:73:c8:63:ea:b7:fc:5f:cc:b2:19:d0:
05:e0:74:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxEZQXGwQP9S6gUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk4MTJhNjYtNDRkZS00NWUwLWE2NWQtZmQzYTc2NzNh
OTU0MB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
NmI3MWZjYWUtNzBjZS00NGQ1LTgzZGMtNzUxOGQ1MzJkZjY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jURyS/MFpYm0q55hYaJCil3JcQdLj9X+kAQ
fbq+z+IQff48ovCLZgN+QK6dXSpTGvPzFCNhIvHssV2lrTwmmy/NU42KR1nzbSPx
ACdnI9J3AIRqq/3fZ6tBmY+D/D19BNH8+kDj3SpmFjBJGN5brmCcncD/KXSfthbe
l2eCDnK0XFPLGAJpXF208t/LlAdEDuVXi+iLZMldB2yDUdgq5HwC7EWrfWrJLZWD
nwlXBvV7aH/T8myABHMFnqhirgLuhXU/DgGKq0ByhArV+C2Qex/ULwAbU8g51QRw
uBwTG2ZmiuiL/X1PnH+SbHtU2e87gGB13p2jva6U+PXUrgf7HQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBl79Lox3skMv7dLAz6S+HAKuOJcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zOTgx
MmE2Ni00NGRlLTQ1ZTAtYTY1ZC1mZDNhNzY3M2E5NTQvNzFmODZlYzktMmMyMC0z
OGMyLWI1OWUtM2YxYTUyYzAxOGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzk4MTJhNjYtNDRkZS00NWUwLWE2
NWQtZmQzYTc2NzNhOTU0LzM5ODEyYTY2LTQ0ZGUtNDVlMC1hNjVkLWZkM2E3Njcz
YTk1NC5jcmwwHwYDVR0jBBgwFoAUjLnNYQ1NL3KFK/AB0pu56Z3fmIcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zOTgxMmE2Ni00NGRlLTQ1ZTAtYTY1ZC1mZDNh
NzY3M2E5NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5c4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEYVJWQsLeJ+dHUwTbx6owlHcE7meKsB+j0HJQSaRZF8+XSTnoAsIe8w
1oMVY4Rg42M7CxS0nExzcoOUo68YT1xMlF4AOMrpk6v6D71fftjPz2sBVwyu3FcP
7cEMyTBrXyRiMNGrWxxPXHWiUlpQuNN8qbLfEtY2UrZf6j8FtRHaQReAOy+F6FL1
62TZZRUP4VzgSLAItYxdhL+lfrpGQHAwx8tef+YD193Y1jLGXOZ78v3o0QsqHcK3
wzmDegaikFtZ9AGvzoRq5zupWOgWXdDXOUt7XCw3bJotXCqtOSptZmWhs/4wGkv5
azoI+DLDPuRzyGPqt/xfzLIZ0AXgdL8=
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:18:17 2025 by rpki-client