Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/63a55941-b0a7-3222-bec7-a70646721995.roa
File: 63a55941-b0a7-3222-bec7-a70646721995.roa (raw, json)
Hash identifier: YSEBH2mzUCdrxeoXGgL7Z7QxiHiPFnf9FTq2qE7DxQU=
Subject key identifier: 30:32:19:CB:88:E3:9D:17:82:0E:84:6D:B7:60:A0:6E:6C:A4:EF:A9
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C58189207342160EE6ADAA00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/63a55941-b0a7-3222-bec7-a70646721995.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 396982
IP address blocks: 23.251.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:89:20:73:42:16:0e:e6:ad:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=a51a14c0-9eec-429f-ac4d-7491446294f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:34:c2:ca:ba:17:1d:c6:15:6d:63:29:85:4a:
fb:03:f3:93:80:7a:d3:0d:0c:0e:eb:73:2c:3e:88:
c9:69:15:34:eb:2c:03:69:18:9c:9b:64:c4:13:eb:
c7:28:55:16:f9:aa:b2:d8:4d:a4:b3:4f:82:73:6d:
bb:43:46:d4:97:33:b1:d3:ff:8f:8c:61:c7:2c:64:
dc:f7:e1:3f:a2:bb:fd:15:77:ca:8d:8a:2a:18:bd:
59:d9:b7:96:d9:59:ba:39:81:c4:d9:b4:85:03:a6:
f1:0c:a4:6d:7d:50:d0:20:bc:63:18:1d:91:bc:59:
7d:e2:16:6b:2c:55:87:86:80:f0:1f:16:04:e0:42:
a8:5f:d7:22:b9:ef:04:91:0f:ba:d1:9c:8f:32:2a:
5c:31:af:ad:75:9e:50:23:ac:bd:8f:eb:37:cc:46:
ee:98:3c:a4:82:cc:4b:31:20:8a:e0:0a:0c:5d:34:
48:e2:74:40:1f:23:4e:60:a2:31:c3:fc:6e:03:85:
02:07:f1:bf:ed:2a:cf:8f:03:25:2c:82:54:3e:5e:
2a:d5:7d:1c:99:d3:da:1d:17:f0:d5:e2:cc:81:6d:
3c:40:df:5e:9d:50:9a:97:82:71:93:2a:9b:83:3f:
f5:70:f2:61:0a:75:9e:9b:02:7b:db:f8:e7:12:55:
7d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:32:19:CB:88:E3:9D:17:82:0E:84:6D:B7:60:A0:6E:6C:A4:EF:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/63a55941-b0a7-3222-bec7-a70646721995.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.251.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:3c:a2:c8:ea:b2:19:b4:46:05:6c:0d:d2:7c:42:8c:a0:c8:
62:1c:85:81:76:2c:25:10:67:1b:38:59:d5:27:9e:57:c4:a2:
87:58:6d:79:f3:e2:52:97:44:73:53:e5:81:74:06:1b:c9:3f:
1b:7d:31:39:4c:24:c3:4f:59:47:31:5d:59:36:3b:1a:6e:fa:
0b:bd:4e:e0:fd:ff:67:7f:9a:84:ed:56:b2:eb:ae:54:93:fd:
d7:0c:b3:f4:26:82:06:30:56:bb:d1:49:9e:55:8c:6d:0b:8b:
a1:8d:be:8f:e2:f7:f7:18:ea:f2:3d:59:9c:29:1c:c7:6a:4b:
f2:78:b8:bd:e8:84:2d:5c:4f:30:bc:be:34:a8:e8:64:0f:3b:
29:00:11:5e:c1:09:bf:f2:0d:83:e0:d4:7c:c0:fd:75:3a:eb:
e4:95:f0:a7:d5:8c:67:94:f6:85:3c:ea:d9:c6:8e:b1:7c:3b:
e6:5a:81:9c:d5:99:3a:cd:c2:01:a8:9a:21:42:df:4c:9a:91:
fb:6f:f8:27:b4:34:36:05:4b:0b:ee:23:f9:0b:e1:51:43:bb:
74:85:8f:5d:2e:73:e0:e8:b7:59:ef:77:2a:21:2a:97:9a:4b:
5d:93:75:da:0f:d9:09:71:f3:2c:32:4c:ba:34:fe:21:80:b4:
d8:88:1a:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYkgc0IWDuatqgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
YTUxYTE0YzAtOWVlYy00MjlmLWFjNGQtNzQ5MTQ0NjI5NGYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDTCyroXHcYVbWMphUr7A/OTgHrTDQwO63Ms
PojJaRU06ywDaRicm2TEE+vHKFUW+aqy2E2ks0+Cc227Q0bUlzOx0/+PjGHHLGTc
9+E/orv9FXfKjYoqGL1Z2beW2Vm6OYHE2bSFA6bxDKRtfVDQILxjGB2RvFl94hZr
LFWHhoDwHxYE4EKoX9ciue8EkQ+60ZyPMipcMa+tdZ5QI6y9j+s3zEbumDykgsxL
MSCK4AoMXTRI4nRAHyNOYKIxw/xuA4UCB/G/7SrPjwMlLIJUPl4q1X0cmdPaHRfw
1eLMgW08QN9enVCal4Jxkyqbgz/1cPJhCnWemwJ72/jnElV96wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDAyGcuI450Xgg6EbbdgoG5spO+pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjNhNTU5NDEtYjBhNy0z
MjIyLWJlYzctYTcwNjQ2NzIxOTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/uLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI48osjqshm0RgVsDdJ8QoygyGIchYF2LCUQZxs4WdUnnlfEoodYbXnz
4lKXRHNT5YF0BhvJPxt9MTlMJMNPWUcxXVk2Oxpu+gu9TuD9/2d/moTtVrLrrlST
/dcMs/QmggYwVrvRSZ5VjG0Li6GNvo/i9/cY6vI9WZwpHMdqS/J4uL3ohC1cTzC8
vjSo6GQPOykAEV7BCb/yDYPg1HzA/XU66+SV8KfVjGeU9oU86tnGjrF8O+ZagZzV
mTrNwgGomiFC30yakftv+Ce0NDYFSwvuI/kL4VFDu3SFj10uc+Dot1nvdyohKpea
S12TddoP2Qlx8ywyTLo0/iGAtNiIGrQ=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:47:57 2025 by rpki-client