Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adb27434-5f58-4360-84a6-000e6e9c7d04/77ee7f56-a297-3785-93db-92928596c81d.roa
File: 77ee7f56-a297-3785-93db-92928596c81d.roa (raw, json)
Hash identifier: NYjAInMJnz1XfBcqPTWE2NRUGDtjibx0PAaIhMz66Oc=
Subject key identifier: 7B:95:18:C8:50:9C:34:49:7E:5C:A8:D3:CE:50:BB:91:D9:A7:EB:5D
Certificate issuer: /CN=adb27434-5f58-4360-84a6-000e6e9c7d04
Certificate serial: 010D0C9F4328584827C546EEAF1C8458762C3480
Authority key identifier: 56:01:2F:59:4F:2A:8D:00:B8:13:0E:D9:ED:BF:80:8D:16:CA:B8:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adb27434-5f58-4360-84a6-000e6e9c7d04.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adb27434-5f58-4360-84a6-000e6e9c7d04/77ee7f56-a297-3785-93db-92928596c81d.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 19684
IP address blocks: 23.174.152.0/24 maxlen: 24
162.254.224.0/21 maxlen: 24
2607:9540::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:46:ee:af:1c:84:58:76:2c:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adb27434-5f58-4360-84a6-000e6e9c7d04
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=d2bf1202-5d3a-4f2e-8b0b-bf77ec9a7254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0a:6f:ef:82:64:54:01:ee:f5:73:4b:ad:09:
fa:78:73:3b:15:02:fb:7f:aa:75:72:e7:c5:7e:c6:
17:64:72:ea:7e:29:07:35:3f:0f:1c:09:23:58:76:
80:fe:ef:0f:45:12:2f:61:1c:a1:46:44:06:07:3d:
ea:9f:5e:58:17:32:84:f9:2b:ea:aa:bd:87:99:bd:
4c:f1:6c:2c:3d:c2:a6:4f:24:d3:8a:70:d2:6e:bd:
2f:2d:9c:4e:c1:62:19:57:da:b7:5e:aa:4f:18:58:
00:05:1f:7f:bf:06:f7:6e:ef:b2:ed:4e:d9:52:0b:
ba:7b:ba:d6:41:3a:35:e5:8e:e7:70:ca:45:24:fa:
c4:ed:cb:f3:1e:b3:10:52:c0:79:5b:99:fa:ab:51:
46:c9:de:33:da:4c:45:1f:6f:d4:21:51:e6:97:1a:
de:48:2b:64:e4:a3:f5:11:cd:e9:32:5a:f8:c4:7f:
af:77:eb:4c:8d:f5:de:20:ce:61:9e:95:01:70:2d:
07:38:34:4a:15:e7:7c:87:ae:33:af:bb:d9:ac:c7:
9d:22:c0:b7:be:e1:39:21:53:a0:9f:37:f8:77:78:
6e:a4:60:e1:58:4c:26:e6:a9:95:27:bf:26:a8:61:
cf:ba:38:6f:b9:fd:32:53:77:83:c9:00:a8:02:6a:
ef:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:95:18:C8:50:9C:34:49:7E:5C:A8:D3:CE:50:BB:91:D9:A7:EB:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adb27434-5f58-4360-84a6-000e6e9c7d04/77ee7f56-a297-3785-93db-92928596c81d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adb27434-5f58-4360-84a6-000e6e9c7d04/adb27434-5f58-4360-84a6-000e6e9c7d04.crl
X509v3 Authority Key Identifier:
keyid:56:01:2F:59:4F:2A:8D:00:B8:13:0E:D9:ED:BF:80:8D:16:CA:B8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adb27434-5f58-4360-84a6-000e6e9c7d04.cer
sbgp-ipAddrBlock: critical
IPv4:
23.174.152.0/24
162.254.224.0/21
IPv6:
2607:9540::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:9a:f5:da:6f:36:07:1d:f2:52:c2:4d:a8:0d:8f:f0:29:fb:
ea:ce:96:3e:11:59:18:bc:d7:75:dc:26:df:b7:77:e3:de:c3:
58:d7:09:e4:9d:5d:e3:44:1e:fb:da:d3:5e:e3:93:ba:2d:1e:
21:04:0e:f0:3b:7e:48:3b:36:cc:ad:56:55:42:1b:9b:68:64:
a3:54:65:dd:6f:38:66:ef:58:51:49:59:60:00:8d:92:07:41:
a4:03:97:88:53:ed:25:dd:58:a0:65:18:3e:50:9c:4e:2f:9e:
47:5d:2f:62:5b:90:75:22:cc:5d:26:8b:73:dd:e2:b2:c6:98:
3b:a1:ca:c3:70:16:40:df:13:07:e5:43:64:11:6d:d6:bc:78:
36:37:53:02:a0:e9:d6:5b:2f:5c:25:33:19:84:a8:ca:1e:86:
3c:a6:28:d3:44:09:95:28:d0:aa:b7:40:a6:34:0a:31:51:ae:
4b:64:df:57:99:1b:f1:5f:6c:65:6f:43:82:e5:0c:d9:0a:64:
97:07:9f:ab:5e:a1:cc:1a:aa:79:d7:d2:7b:0c:f2:06:0f:46:
ba:12:17:a0:36:9d:21:d4:43:2f:f9:00:0c:ef:25:fd:b4:cf:
38:25:af:c4:20:a1:d4:c5:98:75:5a:42:21:f5:8c:f1:11:6c:
bb:da:f0:87
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEgnxUburxyEWHYsNIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWRiMjc0MzQtNWY1OC00MzYwLTg0YTYtMDAwZTZlOWM3
ZDA0MB4XDTI0MTIxMDAyMDA0MFoXDTI1MDMxMDAxMDA0MFowLzEtMCsGA1UEAxMk
ZDJiZjEyMDItNWQzYS00ZjJlLThiMGItYmY3N2VjOWE3MjU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsApv74JkVAHu9XNLrQn6eHM7FQL7f6p1cufF
fsYXZHLqfikHNT8PHAkjWHaA/u8PRRIvYRyhRkQGBz3qn15YFzKE+Svqqr2Hmb1M
8WwsPcKmTyTTinDSbr0vLZxOwWIZV9q3XqpPGFgABR9/vwb3bu+y7U7ZUgu6e7rW
QTo15Y7ncMpFJPrE7cvzHrMQUsB5W5n6q1FGyd4z2kxFH2/UIVHmlxreSCtk5KP1
Ec3pMlr4xH+vd+tMjfXeIM5hnpUBcC0HODRKFed8h64zr7vZrMedIsC3vuE5IVOg
nzf4d3hupGDhWEwm5qmVJ78mqGHPujhvuf0yU3eDyQCoAmrvTwIDAQABo4IDajCC
A2YwHQYDVR0OBBYEFHuVGMhQnDRJflyo085Qu5HZp+tdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hZGIy
NzQzNC01ZjU4LTQzNjAtODRhNi0wMDBlNmU5YzdkMDQvNzdlZTdmNTYtYTI5Ny0z
Nzg1LTkzZGItOTI5Mjg1OTZjODFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWRiMjc0MzQtNWY1OC00MzYwLTg0
YTYtMDAwZTZlOWM3ZDA0L2FkYjI3NDM0LTVmNTgtNDM2MC04NGE2LTAwMGU2ZTlj
N2QwNC5jcmwwHwYDVR0jBBgwFoAUVgEvWU8qjQC4Ew7Z7b+AjRbKuNUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hZGIyNzQzNC01ZjU4LTQzNjAtODRhNi0wMDBl
NmU5YzdkMDQuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF66YAwQD
ov7gMA0EAgACMAcDBQAmB5VAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABqa9dpvNgcd8lLCTagNj/Ap++rO
lj4RWRi813XcJt+3d+Pew1jXCeSdXeNEHvva017jk7otHiEEDvA7fkg7NsytVlVC
G5toZKNUZd1vOGbvWFFJWWAAjZIHQaQDl4hT7SXdWKBlGD5QnE4vnkddL2JbkHUi
zF0mi3Pd4rLGmDuhysNwFkDfEwflQ2QRbda8eDY3UwKg6dZbL1wlMxmEqMoehjym
KNNECZUo0Kq3QKY0CjFRrktk31eZG/FfbGVvQ4LlDNkKZJcHn6teocwaqnnX0nsM
8gYPRroSF6A2nSHUQy/5AAzvJf20zzglr8QgodTFmHVaQiH1jPERbLva8Ic=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:41:38 2025 by rpki-client