Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/802bfd1a-4325-38af-be6f-64950728b155.roa
File: 802bfd1a-4325-38af-be6f-64950728b155.roa (raw, json)
Hash identifier: oQ1zRTH25Ln6xtQhKGY/Uwmpe8TEe31UoOdWWLyob6A=
Subject key identifier: 13:86:88:76:E5:F5:2A:79:EB:1C:F0:24:69:5E:35:AA:B9:90:EF:14
Certificate issuer: /CN=5f4dc2ab-1e6e-4143-95f5-d63db0a7624b
Certificate serial: 010D0C9F43285848F22C7165CC53692D51589540
Authority key identifier: 3F:69:1D:DC:7D:D3:C6:76:4C:53:4D:2B:50:0F:57:E9:64:74:F2:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/802bfd1a-4325-38af-be6f-64950728b155.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 13737
IP address blocks: 23.189.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:71:65:cc:53:69:2d:51:58:95:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4dc2ab-1e6e-4143-95f5-d63db0a7624b
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=26d12250-8f70-48a2-8a6f-f2e246879e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1d:0e:38:34:b5:c1:73:5a:02:dc:82:72:8c:
3e:83:f9:c3:78:81:ce:a6:b7:56:b3:01:96:a3:05:
fc:cf:1d:ff:e4:d4:87:ad:72:f2:90:b1:01:b8:5c:
61:62:d6:4a:38:49:6f:b5:a2:a4:19:13:e6:18:73:
83:b6:a8:bc:37:f7:12:ac:6b:8b:e6:1e:a4:aa:9c:
30:2b:19:92:2b:c7:fd:7f:d9:e0:97:35:89:dd:6b:
34:ec:85:22:2c:c4:bc:b6:99:04:25:f6:76:dc:39:
16:49:4d:60:6b:fe:1b:52:e1:70:77:63:72:82:61:
e7:1c:45:8d:71:ee:98:42:31:d7:e5:37:05:98:3e:
ae:fa:e2:a7:e1:da:5a:9d:7f:1f:2c:1f:7d:35:f3:
b3:4f:d1:8a:65:c4:a4:23:fc:91:a8:74:f9:83:d5:
41:a8:b4:98:d3:fe:bc:b4:63:29:a1:c5:c6:6a:9d:
3f:c4:46:1b:1f:65:74:ae:f3:a9:ac:ab:e0:01:09:
fc:5c:c8:1d:73:0f:b8:8f:0d:18:26:cc:cc:6d:b2:
59:88:b4:e9:52:09:ce:25:3b:1a:a2:74:3b:c4:34:
cf:d9:9a:2e:2d:af:ad:b6:e0:74:78:b2:78:49:57:
fb:c3:48:ae:30:4f:8d:ae:09:ef:fb:38:6f:c8:3b:
72:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:86:88:76:E5:F5:2A:79:EB:1C:F0:24:69:5E:35:AA:B9:90:EF:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/802bfd1a-4325-38af-be6f-64950728b155.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.crl
X509v3 Authority Key Identifier:
keyid:3F:69:1D:DC:7D:D3:C6:76:4C:53:4D:2B:50:0F:57:E9:64:74:F2:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.189.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ce:b9:44:79:af:c7:7a:48:66:d2:f1:cd:e8:7c:cc:45:85:56:
ff:f8:8f:1c:e5:1a:2f:66:d2:f4:c5:b5:42:4d:26:8a:9a:a2:
e1:30:59:17:60:6d:0c:7d:60:5e:44:b7:85:2c:89:86:32:05:
e6:ea:f2:9d:3d:0c:47:20:61:9b:73:22:1d:8a:82:f6:b7:bd:
ea:9f:85:22:b1:28:fc:46:c8:c7:da:66:ae:fa:7c:11:d1:ad:
8c:f6:fd:fa:64:3c:bc:16:83:4f:59:a8:fe:6e:50:64:2d:fd:
4f:25:1f:9a:c9:0d:a6:95:5d:6c:e8:a1:22:26:98:a6:e1:4f:
ed:df:fe:bb:1d:47:7d:74:25:e4:d1:cb:3c:af:58:d4:20:3c:
c4:88:a8:64:5a:04:52:bb:b7:ef:5e:49:c0:c2:af:9c:3f:b3:
ec:b4:6d:72:3a:53:fc:44:5c:3b:8f:90:6b:00:24:2f:4a:a9:
66:00:ee:34:fe:cb:be:0c:a5:fc:57:bb:96:9d:40:9a:ec:a3:
01:af:3c:cb:fb:36:82:71:a5:af:60:aa:82:9d:27:12:f6:5b:
cf:c8:97:43:d0:c0:0a:7e:82:57:32:ce:87:95:51:a3:4b:58:
42:52:c8:9c:87:4d:f9:5e:82:38:72:79:7a:de:2a:ff:e9:80:
27:69:88:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLHFlzFNpLVFYlUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWY0ZGMyYWItMWU2ZS00MTQzLTk1ZjUtZDYzZGIwYTc2
MjRiMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk
MjZkMTIyNTAtOGY3MC00OGEyLThhNmYtZjJlMjQ2ODc5ZTJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB0OODS1wXNaAtyCcow+g/nDeIHOprdWswGW
owX8zx3/5NSHrXLykLEBuFxhYtZKOElvtaKkGRPmGHODtqi8N/cSrGuL5h6kqpww
KxmSK8f9f9nglzWJ3Ws07IUiLMS8tpkEJfZ23DkWSU1ga/4bUuFwd2NygmHnHEWN
ce6YQjHX5TcFmD6u+uKn4dpanX8fLB99NfOzT9GKZcSkI/yRqHT5g9VBqLSY0/68
tGMpocXGap0/xEYbH2V0rvOprKvgAQn8XMgdcw+4jw0YJszMbbJZiLTpUgnOJTsa
onQ7xDTP2ZouLa+ttuB0eLJ4SVf7w0iuME+Nrgnv+zhvyDtyXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBOGiHbl9Sp56xzwJGleNaq5kO8UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81ZjRk
YzJhYi0xZTZlLTQxNDMtOTVmNS1kNjNkYjBhNzYyNGIvODAyYmZkMWEtNDMyNS0z
OGFmLWJlNmYtNjQ5NTA3MjhiMTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNWY0ZGMyYWItMWU2ZS00MTQzLTk1
ZjUtZDYzZGIwYTc2MjRiLzVmNGRjMmFiLTFlNmUtNDE0My05NWY1LWQ2M2RiMGE3
NjI0Yi5jcmwwHwYDVR0jBBgwFoAUP2kd3H3TxnZMU00rUA9X6WR08p4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81ZjRkYzJhYi0xZTZlLTQxNDMtOTVmNS1kNjNk
YjBhNzYyNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF72oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM65RHmvx3pIZtLxzeh8zEWFVv/4jxzlGi9m0vTFtUJNJoqaouEwWRdg
bQx9YF5Et4UsiYYyBebq8p09DEcgYZtzIh2Kgva3veqfhSKxKPxGyMfaZq76fBHR
rYz2/fpkPLwWg09ZqP5uUGQt/U8lH5rJDaaVXWzooSImmKbhT+3f/rsdR310JeTR
yzyvWNQgPMSIqGRaBFK7t+9eScDCr5w/s+y0bXI6U/xEXDuPkGsAJC9KqWYA7jT+
y74MpfxXu5adQJrsowGvPMv7NoJxpa9gqoKdJxL2W8/Il0PQwAp+glcyzoeVUaNL
WEJSyJyHTflegjhyeXreKv/pgCdpiBg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:15:07 2025 by rpki-client