Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143/d960457e-2ea4-3166-b8a3-8fdc7d7edc54.roa
File: d960457e-2ea4-3166-b8a3-8fdc7d7edc54.roa (raw, json)
Hash identifier: 8yT9iBlSgzRwwHS906QYrUbrZBOhC73CfqJRl1jH34M=
Subject key identifier: BD:07:47:43:7C:26:52:77:3C:2A:B5:92:D8:07:09:CA:DA:EC:CA:29
Certificate issuer: /CN=f89b2137-fc39-48ca-9b75-2b8574c1a143
Certificate serial: 010D0C9F43285848B1F62E0E101DF9CA7311D200
Authority key identifier: 1B:14:BC:5E:3F:CB:F4:B5:05:60:EB:59:1F:0B:4C:01:76:E4:8A:DE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143/d960457e-2ea4-3166-b8a3-8fdc7d7edc54.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 395898
IP address blocks: 23.186.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:2e:0e:10:1d:f9:ca:73:11:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89b2137-fc39-48ca-9b75-2b8574c1a143
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=0d3f4ecc-19ce-42b8-a9fa-c55923274374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ea:38:94:23:f9:47:e2:88:9d:7f:73:94:e2:
b2:af:9e:85:3a:b4:5d:d0:22:56:17:9f:7b:ad:2d:
62:88:f0:e0:9b:64:2f:ab:09:bf:9e:6a:fa:d5:89:
d7:fa:7e:29:f7:30:c2:40:9d:f2:be:18:f6:60:76:
cc:2f:89:1a:37:31:da:c8:14:96:21:a4:db:69:2e:
9e:48:5d:6b:49:82:06:65:56:fd:e0:7c:46:3b:83:
7b:c1:c4:9b:17:cd:57:42:03:77:15:fb:72:41:9e:
8a:db:26:dc:12:40:e9:f7:e1:fb:73:b1:e4:87:fd:
8d:85:ae:ac:c2:29:bd:54:10:4b:fb:f7:ec:5e:de:
ff:2c:34:a4:d1:05:b4:c5:af:9b:e4:ba:41:0a:0b:
8a:80:8c:b9:9c:08:d2:08:9a:f2:3b:f1:ff:98:a8:
8c:9e:31:63:b5:5f:e7:dd:bc:dd:89:24:65:6d:a9:
04:aa:ae:9d:0e:35:09:54:fa:03:73:46:97:0b:b2:
d5:43:d7:2d:9b:94:4e:72:e5:3b:dc:73:2d:1e:85:
59:96:40:41:c1:50:28:9f:7a:7b:15:35:d0:bd:1d:
96:1f:f7:ae:76:9c:37:b0:66:1a:62:5b:b9:bc:35:
c8:58:c9:95:12:bc:18:90:d9:4a:87:37:4c:27:c8:
15:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:07:47:43:7C:26:52:77:3C:2A:B5:92:D8:07:09:CA:DA:EC:CA:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143/d960457e-2ea4-3166-b8a3-8fdc7d7edc54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143/f89b2137-fc39-48ca-9b75-2b8574c1a143.crl
X509v3 Authority Key Identifier:
keyid:1B:14:BC:5E:3F:CB:F4:B5:05:60:EB:59:1F:0B:4C:01:76:E4:8A:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143.cer
sbgp-ipAddrBlock: critical
IPv4:
23.186.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:97:24:dd:0f:17:83:98:f3:5a:25:dd:2a:b2:10:03:26:b9:
e2:8d:2d:f6:5e:fd:61:1d:d7:df:b0:95:8b:6b:16:d4:7c:ad:
47:cd:64:28:83:c7:0e:20:29:67:68:af:71:16:8d:2e:84:2d:
c2:11:1c:19:b6:94:e3:b4:1c:9b:45:21:9f:8c:6b:14:8d:96:
5d:32:58:78:4d:ca:8d:49:ee:ad:62:78:82:16:66:a7:55:c9:
7c:56:a7:8e:74:02:02:bc:d0:08:47:dc:dc:c5:a1:c4:2c:d0:
3c:90:40:93:34:b7:0e:bd:0b:a2:e9:99:f1:63:d3:06:b9:35:
62:e6:f8:62:3e:6e:1e:15:fd:d4:fa:93:e3:8d:41:be:93:5c:
18:28:ad:66:9c:62:0a:65:7a:f1:b4:44:d7:91:6d:33:26:26:
43:9a:37:a1:ca:0b:52:f6:c1:f9:ae:15:00:1c:6c:2c:89:74:
6b:de:83:ae:2b:a2:10:51:8d:fb:4d:f7:64:08:ff:3e:27:fd:
db:7d:c0:c8:44:dd:20:7b:92:d6:7f:19:d2:3a:d8:72:e6:7c:
8d:19:e7:c7:f9:39:a2:34:43:d1:f9:65:70:b0:80:5e:3f:29:
fa:2b:2a:23:88:be:5f:b7:b0:c6:0d:37:78:22:96:68:7a:f0:
68:18:2e:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9i4OEB35ynMR0gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjg5YjIxMzctZmMzOS00OGNhLTliNzUtMmI4NTc0YzFh
MTQzMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk
MGQzZjRlY2MtMTljZS00MmI4LWE5ZmEtYzU1OTIzMjc0Mzc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreo4lCP5R+KInX9zlOKyr56FOrRd0CJWF597
rS1iiPDgm2Qvqwm/nmr61YnX+n4p9zDCQJ3yvhj2YHbML4kaNzHayBSWIaTbaS6e
SF1rSYIGZVb94HxGO4N7wcSbF81XQgN3FftyQZ6K2ybcEkDp9+H7c7Hkh/2Nha6s
wim9VBBL+/fsXt7/LDSk0QW0xa+b5LpBCguKgIy5nAjSCJryO/H/mKiMnjFjtV/n
3bzdiSRlbakEqq6dDjUJVPoDc0aXC7LVQ9ctm5ROcuU73HMtHoVZlkBBwVAon3p7
FTXQvR2WH/eudpw3sGYaYlu5vDXIWMmVErwYkNlKhzdMJ8gVgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL0HR0N8JlJ3PCq1ktgHCcra7MopMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mODli
MjEzNy1mYzM5LTQ4Y2EtOWI3NS0yYjg1NzRjMWExNDMvZDk2MDQ1N2UtMmVhNC0z
MTY2LWI4YTMtOGZkYzdkN2VkYzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjg5YjIxMzctZmMzOS00OGNhLTli
NzUtMmI4NTc0YzFhMTQzL2Y4OWIyMTM3LWZjMzktNDhjYS05Yjc1LTJiODU3NGMx
YTE0My5jcmwwHwYDVR0jBBgwFoAUGxS8Xj/L9LUFYOtZHwtMAXbkit4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mODliMjEzNy1mYzM5LTQ4Y2EtOWI3NS0yYjg1
NzRjMWExNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7qYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF+XJN0PF4OY81ol3SqyEAMmueKNLfZe/WEd19+wlYtrFtR8rUfNZCiD
xw4gKWdor3EWjS6ELcIRHBm2lOO0HJtFIZ+MaxSNll0yWHhNyo1J7q1ieIIWZqdV
yXxWp450AgK80AhH3NzFocQs0DyQQJM0tw69C6LpmfFj0wa5NWLm+GI+bh4V/dT6
k+ONQb6TXBgorWacYgplevG0RNeRbTMmJkOaN6HKC1L2wfmuFQAcbCyJdGveg64r
ohBRjftN92QI/z4n/dt9wMhE3SB7ktZ/GdI62HLmfI0Z58f5OaI0Q9H5ZXCwgF4/
KforKiOIvl+3sMYNN3gilmh68GgYLnY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:26:59 2025 by rpki-client