Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/c81996f1-f112-3ff0-8181-d64acaeb3a3e.roa
File: c81996f1-f112-3ff0-8181-d64acaeb3a3e.roa (raw, json)
Hash identifier: 4WxGZgmqiwxpCNSYGJToBCSewSJ9eiaeBuzhYnVE0JE=
Subject key identifier: D6:11:2A:A2:48:B9:3E:90:A6:59:B6:EF:6C:BB:75:A6:F6:03:D1:DA
Certificate issuer: /CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
Certificate serial: 010D0C9F43285848D50BF241024A4F8861DAF6A0
Authority key identifier: FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/c81996f1-f112-3ff0-8181-d64acaeb3a3e.roa
Signing time: Mon 10 Feb 2025 03:38:08 +0000
ROA not before: Mon 10 Feb 2025 03:38:08 +0000
ROA not after: Sun 11 May 2025 02:38:08 +0000
asID: 30456
IP address blocks: 23.145.208.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d5:0b:f2:41:02:4a:4f:88:61:da:f6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
Validity
Not Before: Feb 10 03:38:08 2025 GMT
Not After : May 11 02:38:08 2025 GMT
Subject: CN=1c258c5e-0412-4553-9dc3-161760ce6247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5c:3c:df:53:e1:e3:d8:06:13:d8:96:45:1e:
31:a9:f7:13:c5:7d:48:8a:ea:a2:2b:71:5a:77:28:
34:27:4f:b0:9d:26:ad:77:76:0a:8d:3e:62:ab:4f:
af:06:0b:a5:21:b7:f0:6e:7d:23:42:6e:d3:02:d3:
a9:0b:90:b0:1d:5d:f1:92:5f:4f:9c:45:48:a3:65:
be:7f:46:84:11:0f:84:e0:8b:2e:c8:d1:d1:c5:ff:
e3:f2:51:6f:85:c2:3e:81:22:0d:97:9c:27:4b:5d:
54:02:62:22:d3:e8:30:72:05:68:50:65:b7:74:58:
c6:a3:63:05:65:37:0f:3a:fd:4d:8a:72:13:0a:9d:
30:68:0b:fc:cb:23:ed:c2:41:03:2c:4f:e4:21:07:
02:c2:07:72:50:e6:37:a6:57:7d:33:b3:68:9c:8b:
b6:e1:4f:a2:32:3e:ed:c0:f8:7d:e8:68:13:63:8f:
b0:db:88:25:88:0f:ba:ba:82:d5:a8:fc:ae:2f:f4:
c2:9b:18:6c:d7:a1:6e:c4:9b:8a:78:12:0d:03:2c:
98:71:ab:15:ed:05:3e:a9:c6:3b:dd:76:5b:b6:bd:
a0:8b:dc:96:18:97:b3:0f:d0:48:47:5d:03:80:99:
3a:33:46:dc:b1:05:bf:fa:4e:dc:07:c7:43:3b:9a:
83:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:11:2A:A2:48:B9:3E:90:A6:59:B6:EF:6C:BB:75:A6:F6:03:D1:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/c81996f1-f112-3ff0-8181-d64acaeb3a3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl
X509v3 Authority Key Identifier:
keyid:FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
sbgp-ipAddrBlock: critical
IPv4:
23.145.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:51:2b:47:06:fa:7d:5c:79:1b:3c:e5:0e:dc:ae:7f:18:49:
0d:90:81:c9:33:db:60:3b:5e:6c:da:fb:37:d5:73:1a:4b:c7:
f0:f6:e7:b5:3b:fb:62:d9:ae:ee:c5:34:a3:d9:95:26:81:8b:
bb:bf:45:b6:bb:bd:f0:45:92:7c:b1:c1:13:2f:d1:eb:93:89:
2d:3e:53:63:d1:1c:e0:e1:6e:b4:8c:9d:2c:9e:93:b4:22:56:
b9:1a:77:ea:52:50:37:17:ae:4e:0f:0e:bb:9e:79:2b:f1:be:
ed:94:37:24:08:f5:22:75:ed:a3:dc:7f:84:88:99:42:1c:56:
6a:50:ce:09:14:b6:85:4a:5d:f9:8b:ee:4f:45:95:11:5a:89:
50:b2:ba:a6:8a:2d:4d:52:69:f6:d6:a2:dc:c4:00:15:a7:58:
de:77:14:52:43:ea:ad:28:41:44:8f:e5:c0:2c:78:01:44:60:
fb:02:66:13:8c:df:e4:3f:ed:2d:8b:c6:37:d7:e9:0f:69:4f:
19:79:b5:f2:8d:49:e4:60:79:40:eb:c2:a7:d8:9f:d6:10:b3:
82:63:67:64:5d:ed:08:d6:32:a1:27:52:bd:e0:d8:5a:e4:13:
fc:66:38:f7:d3:33:11:61:92:9c:c0:6d:db:b5:3f:6b:39:1e:
e6:9c:a3:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjVC/JBAkpPiGHa9qAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzFjMTllNTctYTZmNS00YzQ4LWI0ZGYtYjhkNDJkN2I3
NDgzMB4XDTI1MDIxMDAzMzgwOFoXDTI1MDUxMTAyMzgwOFowLzEtMCsGA1UEAxMk
MWMyNThjNWUtMDQxMi00NTUzLTlkYzMtMTYxNzYwY2U2MjQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1w831Ph49gGE9iWRR4xqfcTxX1IiuqiK3Fa
dyg0J0+wnSatd3YKjT5iq0+vBgulIbfwbn0jQm7TAtOpC5CwHV3xkl9PnEVIo2W+
f0aEEQ+E4IsuyNHRxf/j8lFvhcI+gSINl5wnS11UAmIi0+gwcgVoUGW3dFjGo2MF
ZTcPOv1NinITCp0waAv8yyPtwkEDLE/kIQcCwgdyUOY3pld9M7NonIu24U+iMj7t
wPh96GgTY4+w24gliA+6uoLVqPyuL/TCmxhs16FuxJuKeBINAyyYcasV7QU+qcY7
3XZbtr2gi9yWGJezD9BIR10DgJk6M0bcsQW/+k7cB8dDO5qDfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNYRKqJIuT6Qplm272y7dab2A9HaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMWMx
OWU1Ny1hNmY1LTRjNDgtYjRkZi1iOGQ0MmQ3Yjc0ODMvYzgxOTk2ZjEtZjExMi0z
ZmYwLTgxODEtZDY0YWNhZWIzYTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzFjMTllNTctYTZmNS00YzQ4LWI0
ZGYtYjhkNDJkN2I3NDgzLzMxYzE5ZTU3LWE2ZjUtNGM0OC1iNGRmLWI4ZDQyZDdi
NzQ4My5jcmwwHwYDVR0jBBgwFoAU/pJi5eJ2pwPKSRroNOSF02JXoFgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMWMxOWU1Ny1hNmY1LTRjNDgtYjRkZi1iOGQ0
MmQ3Yjc0ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5HQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKlRK0cG+n1ceRs85Q7crn8YSQ2Qgckz22A7Xmza+zfVcxpLx/D257U7
+2LZru7FNKPZlSaBi7u/Rba7vfBFknyxwRMv0euTiS0+U2PRHODhbrSMnSyek7Qi
Vrkad+pSUDcXrk4PDrueeSvxvu2UNyQI9SJ17aPcf4SImUIcVmpQzgkUtoVKXfmL
7k9FlRFaiVCyuqaKLU1SafbWotzEABWnWN53FFJD6q0oQUSP5cAseAFEYPsCZhOM
3+Q/7S2LxjfX6Q9pTxl5tfKNSeRgeUDrwqfYn9YQs4JjZ2Rd7QjWMqEnUr3g2Frk
E/xmOPfTMxFhkpzAbdu1P2s5Huaco5o=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:25:13 2025 by rpki-client