Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb/1caf24ed-bf0c-30f8-938a-1621a143b4dd.roa
File: 1caf24ed-bf0c-30f8-938a-1621a143b4dd.roa (raw, json)
Hash identifier: VzRDMtO3tmPjUBUcKWNozZ2J8M6o5GhAsUFMgHxiPeM=
Subject key identifier: 89:D5:65:38:A5:CA:1A:DC:73:ED:15:D2:85:0A:24:58:B7:14:08:C0
Certificate issuer: /CN=53d3ef8c-8c56-4056-ba3f-9b8f638952cb
Certificate serial: 010D0C9F4328584429FEA72C6006B36F7F5487A1
Authority key identifier: 38:11:5C:73:A8:6F:D6:66:4D:31:97:5D:5F:4A:40:F8:9B:90:6D:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb/1caf24ed-bf0c-30f8-938a-1621a143b4dd.roa
Signing time: Sun 10 Dec 2023 02:00:16 +0000
ROA not before: Sun 10 Dec 2023 02:00:16 +0000
ROA not after: Sat 09 Mar 2024 02:00:16 +0000
asID: 8100
IP address blocks: 172.98.14.0/24 maxlen: 24
172.98.13.0/24 maxlen: 24
172.98.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:29:fe:a7:2c:60:06:b3:6f:7f:54:87:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d3ef8c-8c56-4056-ba3f-9b8f638952cb
Validity
Not Before: Dec 10 02:00:16 2023 GMT
Not After : Mar 9 02:00:16 2024 GMT
Subject: CN=2f931330-2df2-4ef2-96e7-31a24ce44ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0b:c8:bf:d1:80:3d:ed:cd:db:01:eb:02:ae:
f9:04:1a:39:85:6b:44:1d:43:7d:fd:86:e3:d4:cf:
ab:e1:1a:6f:c8:64:ac:96:f8:f0:63:b9:a7:ba:7e:
33:fa:fa:5e:69:c1:61:ff:54:b4:56:df:8c:fd:12:
08:58:7a:9d:66:bb:f8:01:1b:77:28:c4:19:57:fd:
be:68:3d:ce:b8:5c:76:6e:02:75:f3:b6:ec:47:d0:
93:82:bb:76:c2:01:e1:fb:48:89:06:68:f0:e9:b8:
b9:ce:d1:e2:a2:d1:9a:9e:fa:e5:c2:22:01:62:b1:
6a:7b:62:5a:c3:a5:13:93:dc:97:6e:6c:9b:47:91:
ca:87:25:11:25:f4:46:52:1a:a8:f8:67:c0:8d:a0:
ed:0c:b6:01:bb:3f:73:89:6c:e9:17:e2:fd:ed:aa:
1c:f3:b5:2a:aa:06:01:de:9c:8d:31:18:5a:82:cf:
21:97:41:b5:23:83:34:51:9c:a9:b9:38:15:02:e5:
18:5b:7c:bd:ec:fd:92:4d:89:f8:0f:17:a9:4a:e8:
63:e9:54:62:a1:b3:92:a2:90:90:4a:c3:6d:2c:b7:
12:e8:ab:67:7e:36:66:eb:09:07:b3:6e:83:aa:95:
fb:1e:cf:ac:ab:3e:ea:f5:94:f8:3c:cb:9d:ad:81:
8a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D5:65:38:A5:CA:1A:DC:73:ED:15:D2:85:0A:24:58:B7:14:08:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb/1caf24ed-bf0c-30f8-938a-1621a143b4dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb/53d3ef8c-8c56-4056-ba3f-9b8f638952cb.crl
X509v3 Authority Key Identifier:
keyid:38:11:5C:73:A8:6F:D6:66:4D:31:97:5D:5F:4A:40:F8:9B:90:6D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.13.0-172.98.15.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:82:42:c3:7e:66:26:3f:b5:85:5a:97:76:d9:6b:7c:36:cf:
b6:82:ef:c3:0e:4a:75:2d:33:df:08:02:16:a8:1e:c9:ea:60:
76:67:df:c6:5e:91:ed:50:84:ef:0a:7a:64:3d:aa:10:e2:bc:
62:32:bb:fe:0b:ed:27:d8:53:d1:dc:fa:7a:fe:9a:19:0b:b7:
d3:e7:09:cd:36:38:d7:e2:1d:65:98:99:49:af:dc:5a:7b:a2:
7a:6f:e4:40:3b:1d:b0:8a:50:61:92:7f:6d:e5:11:c0:9c:d5:
cb:12:71:e5:ea:41:34:5c:c1:64:47:4d:fb:56:10:0e:a3:a1:
cd:8c:14:31:d1:d0:3d:c3:a6:bb:a5:d2:90:1c:9b:9c:58:48:
1e:39:26:84:fd:24:2b:b4:76:50:65:82:b1:94:6f:99:6e:97:
54:31:fd:32:6f:85:6f:3d:f6:2c:bd:4c:8a:f5:d5:97:5f:d3:
76:39:c2:5f:93:d2:1f:cd:cb:05:db:82:86:08:78:0f:ca:6a:
2d:10:5f:ec:61:2b:a1:df:95:92:2a:e4:20:e7:61:d3:db:19:
1a:2c:64:65:b5:a7:fb:58:fa:52:1a:7e:e2:8a:04:61:9e:27:
83:23:76:b3:7a:b6:a0:e5:de:67:e7:ac:35:8f:1b:7f:88:12:
17:82:54:05
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEQp/qcsYAazb39Uh6EwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTNkM2VmOGMtOGM1Ni00MDU2LWJhM2YtOWI4ZjYzODk1
MmNiMB4XDTIzMTIxMDAyMDAxNloXDTI0MDMwOTAyMDAxNlowLzEtMCsGA1UEAxMk
MmY5MzEzMzAtMmRmMi00ZWYyLTk2ZTctMzFhMjRjZTQ0Y2E4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQvIv9GAPe3N2wHrAq75BBo5hWtEHUN9/Ybj
1M+r4RpvyGSslvjwY7mnun4z+vpeacFh/1S0Vt+M/RIIWHqdZrv4ARt3KMQZV/2+
aD3OuFx2bgJ187bsR9CTgrt2wgHh+0iJBmjw6bi5ztHiotGanvrlwiIBYrFqe2Ja
w6UTk9yXbmybR5HKhyURJfRGUhqo+GfAjaDtDLYBuz9ziWzpF+L97aoc87UqqgYB
3pyNMRhags8hl0G1I4M0UZypuTgVAuUYW3y97P2STYn4DxepSuhj6VRiobOSopCQ
SsNtLLcS6KtnfjZm6wkHs26DqpX7Hs+sqz7q9ZT4PMudrYGKzQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFInVZTilyhrcc+0V0oUKJFi3FAjAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81M2Qz
ZWY4Yy04YzU2LTQwNTYtYmEzZi05YjhmNjM4OTUyY2IvMWNhZjI0ZWQtYmYwYy0z
MGY4LTkzOGEtMTYyMWExNDNiNGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTNkM2VmOGMtOGM1Ni00MDU2LWJh
M2YtOWI4ZjYzODk1MmNiLzUzZDNlZjhjLThjNTYtNDA1Ni1iYTNmLTliOGY2Mzg5
NTJjYi5jcmwwHwYDVR0jBBgwFoAUOBFcc6hv1mZNMZddX0pA+JuQbUwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS81M2QzZWY4Yy04YzU2LTQwNTYtYmEzZi05Yjhm
NjM4OTUyY2IuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACsYg0D
BASsYgAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAdIJCw35mJj+1hVqXdtlrfDbPtoLvww5KdS0z3wgCFqge
yepgdmffxl6R7VCE7wp6ZD2qEOK8YjK7/gvtJ9hT0dz6ev6aGQu30+cJzTY41+Id
ZZiZSa/cWnuiem/kQDsdsIpQYZJ/beURwJzVyxJx5epBNFzBZEdN+1YQDqOhzYwU
MdHQPcOmu6XSkBybnFhIHjkmhP0kK7R2UGWCsZRvmW6XVDH9Mm+Fbz32LL1MivXV
l1/TdjnCX5PSH83LBduChgh4D8pqLRBf7GErod+VkirkIOdh09sZGixkZbWn+1j6
Uhp+4ooEYZ4ngyN2s3q2oOXeZ+esNY8bf4gSF4JUBQ==
-----END CERTIFICATE-----
Generated at Wed Dec 13 19:12:21 2023 by rpki-client on console-ams.rpki-client.org