Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/2307101c-a448-3f6e-b60c-140a7a61a087.roa
File: 2307101c-a448-3f6e-b60c-140a7a61a087.roa (raw, json)
Hash identifier: qLfLcT86ShMbE/HB711F8Zby7a88AL6pz9lDy2lBNOg=
Subject key identifier: 0E:E4:B8:A1:66:20:77:E9:E3:C9:35:BA:BF:D7:5A:56:44:B5:CF:59
Certificate issuer: /CN=8825e8fb-1b9c-43c4-8f9f-40df1c716211
Certificate serial: 010D0C9F432858493C094178CADCFA23E5299B40
Authority key identifier: D4:C5:80:8B:1B:8C:EF:EB:84:32:DD:06:33:18:88:53:D4:A4:B0:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/2307101c-a448-3f6e-b60c-140a7a61a087.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 399825
IP address blocks: 23.177.144.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:41:78:ca:dc:fa:23:e5:29:9b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8825e8fb-1b9c-43c4-8f9f-40df1c716211
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=d574199b-17cc-426e-99f4-0ea9d298a89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bf:fb:21:6a:f0:bc:a3:f2:5d:75:68:d4:8e:
2e:1c:da:86:88:16:6f:83:a7:35:77:76:1d:91:d4:
a8:24:c8:ca:33:e9:56:5f:a2:b0:06:9b:64:db:5f:
46:4c:d6:63:21:42:74:7e:37:88:e6:cd:14:02:10:
1a:16:31:41:73:ca:4c:1e:b0:67:ae:d9:6f:d1:3d:
ea:c1:47:40:40:44:ed:da:ef:20:62:89:be:ed:58:
54:fb:1b:e9:b3:60:35:36:f5:6e:89:42:76:83:5d:
ba:a7:83:c5:c4:34:9b:a7:ea:85:59:b3:d9:c2:ef:
fe:4b:40:3a:2e:54:41:9b:ff:94:0d:b8:9c:7d:36:
d3:31:54:b4:ff:a2:94:3a:a8:92:a5:93:c0:ff:75:
2b:23:a6:76:31:25:b8:c1:09:06:d4:13:25:24:b3:
f7:08:56:da:ae:c2:0a:e0:c1:f5:fa:5b:b9:81:e4:
f5:bb:b9:61:a6:50:94:da:59:92:dd:e7:b1:12:70:
30:00:c2:2c:e9:1a:57:26:d1:a2:ab:4a:e6:00:b1:
1c:6d:3e:2b:a9:35:39:ba:85:9c:37:fb:7b:42:c9:
bd:8e:c8:3e:24:4a:c9:cd:cc:d2:33:2c:a0:9c:0a:
65:e9:6c:ab:a7:f4:75:dd:0f:fa:22:9e:09:7c:df:
2f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E4:B8:A1:66:20:77:E9:E3:C9:35:BA:BF:D7:5A:56:44:B5:CF:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/2307101c-a448-3f6e-b60c-140a7a61a087.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/8825e8fb-1b9c-43c4-8f9f-40df1c716211.crl
X509v3 Authority Key Identifier:
keyid:D4:C5:80:8B:1B:8C:EF:EB:84:32:DD:06:33:18:88:53:D4:A4:B0:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211.cer
sbgp-ipAddrBlock: critical
IPv4:
23.177.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:3f:90:bb:89:82:fb:cb:7b:2e:c1:5f:22:6f:97:a0:ff:67:
c3:5d:4c:47:64:03:ac:2d:e1:f2:98:82:74:33:fd:25:b8:07:
88:98:2c:71:1d:6a:40:f9:d8:57:55:1d:f1:61:14:4a:7d:3a:
a9:d6:f6:c3:c6:98:7c:68:8e:4f:94:bb:a9:db:55:c7:2f:a3:
8a:26:df:74:f5:00:67:47:bd:e1:d2:03:11:08:43:71:41:c9:
69:bf:9e:26:e6:4f:e7:a3:b5:b6:45:32:67:a9:be:f3:87:45:
13:90:90:7e:d8:e8:47:a6:77:11:4b:f2:45:6a:d2:32:65:ff:
36:3c:34:58:f7:25:fc:f9:74:1f:b9:55:33:55:60:a4:54:6b:
14:87:6e:4d:18:f0:ae:f4:cc:21:c1:2f:24:35:0e:74:e4:f5:
c7:63:0b:96:e2:5d:a9:df:ea:68:54:4c:12:0f:95:35:5d:22:
86:c1:f2:c2:a2:16:15:06:11:a6:e2:99:f1:30:f8:a8:be:4f:
7b:86:db:b3:1f:fd:d6:3c:00:c0:13:bf:10:f3:03:22:ac:65:
da:8d:e0:3f:13:b3:05:cb:9d:ea:4c:c9:7a:bf:e5:3f:1d:d2:
ab:aa:ab:50:ec:cf:a6:1b:7a:b8:2a:c3:06:47:43:bc:7b:f7:
06:69:df:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CUF4ytz6I+Upm0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODgyNWU4ZmItMWI5Yy00M2M0LThmOWYtNDBkZjFjNzE2
MjExMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk
ZDU3NDE5OWItMTdjYy00MjZlLTk5ZjQtMGVhOWQyOThhODljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr/7IWrwvKPyXXVo1I4uHNqGiBZvg6c1d3Yd
kdSoJMjKM+lWX6KwBptk219GTNZjIUJ0fjeI5s0UAhAaFjFBc8pMHrBnrtlv0T3q
wUdAQETt2u8gYom+7VhU+xvps2A1NvVuiUJ2g126p4PFxDSbp+qFWbPZwu/+S0A6
LlRBm/+UDbicfTbTMVS0/6KUOqiSpZPA/3UrI6Z2MSW4wQkG1BMlJLP3CFbarsIK
4MH1+lu5geT1u7lhplCU2lmS3eexEnAwAMIs6RpXJtGiq0rmALEcbT4rqTU5uoWc
N/t7Qsm9jsg+JErJzczSMyygnApl6Wyrp/R13Q/6Ip4JfN8vdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA7kuKFmIHfp48k1ur/XWlZEtc9ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ODI1
ZThmYi0xYjljLTQzYzQtOGY5Zi00MGRmMWM3MTYyMTEvMjMwNzEwMWMtYTQ0OC0z
ZjZlLWI2MGMtMTQwYTdhNjFhMDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODgyNWU4ZmItMWI5Yy00M2M0LThm
OWYtNDBkZjFjNzE2MjExLzg4MjVlOGZiLTFiOWMtNDNjNC04ZjlmLTQwZGYxYzcx
NjIxMS5jcmwwHwYDVR0jBBgwFoAU1MWAixuM7+uEMt0GMxiIU9SksN0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ODI1ZThmYi0xYjljLTQzYzQtOGY5Zi00MGRm
MWM3MTYyMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7GQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABk/kLuJgvvLey7BXyJvl6D/Z8NdTEdkA6wt4fKYgnQz/SW4B4iYLHEd
akD52FdVHfFhFEp9OqnW9sPGmHxojk+Uu6nbVccvo4om33T1AGdHveHSAxEIQ3FB
yWm/nibmT+ejtbZFMmepvvOHRROQkH7Y6EemdxFL8kVq0jJl/zY8NFj3Jfz5dB+5
VTNVYKRUaxSHbk0Y8K70zCHBLyQ1DnTk9cdjC5biXanf6mhUTBIPlTVdIobB8sKi
FhUGEabimfEw+Ki+T3uG27Mf/dY8AMATvxDzAyKsZdqN4D8TswXLnepMyXq/5T8d
0quqq1Dsz6YbergqwwZHQ7x79wZp3+k=
-----END CERTIFICATE-----
Generated at Sat Apr 12 10:08:17 2025 by rpki-client