Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6d944863-bb4b-4403-99d8-bdd9488dc28b/c7faa5b5-6e8c-3a80-8baf-bfd7aba1cea1.roa
File: c7faa5b5-6e8c-3a80-8baf-bfd7aba1cea1.roa (raw, json)
Hash identifier: 35vIdcNOoek+mLmShzl3mV7BT2wyxvTLtAqLVhf/14Q=
Subject key identifier: DB:55:00:2C:63:78:5C:DE:32:3E:27:D3:DF:3C:29:C5:78:67:EE:76
Certificate issuer: /CN=6d944863-bb4b-4403-99d8-bdd9488dc28b
Certificate serial: 010D0C9F4328584957F40A99B3E421BECCBE3AE0
Authority key identifier: D8:C6:D8:E7:FB:B9:CD:70:02:7B:7B:3E:6A:DA:A5:DA:3E:65:8C:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6d944863-bb4b-4403-99d8-bdd9488dc28b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6d944863-bb4b-4403-99d8-bdd9488dc28b/c7faa5b5-6e8c-3a80-8baf-bfd7aba1cea1.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 8796
IP address blocks: 23.165.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:0a:99:b3:e4:21:be:cc:be:3a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d944863-bb4b-4403-99d8-bdd9488dc28b
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=c6023667-0ca2-4cab-ac9f-6ca8352ccb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f8:5d:91:eb:73:f9:64:9c:34:ac:01:d0:c5:
0f:21:81:3b:19:71:f5:76:ac:21:1e:62:4c:80:e8:
4f:a1:e5:2a:41:65:1c:b4:84:6d:af:08:bc:b3:2c:
97:54:69:81:e3:79:dc:61:91:78:19:c4:6a:c4:fe:
96:69:d5:33:e9:54:98:ab:c3:72:ef:d9:5f:9b:7a:
98:34:2d:5e:b8:c7:9b:c8:64:5f:e0:7e:cd:92:73:
0d:ef:09:e3:53:30:2b:a0:69:d6:e1:79:df:15:8a:
86:f8:38:2d:29:b2:3d:84:b4:b6:09:da:ff:32:7a:
6a:46:86:c2:03:89:a3:7d:1b:ac:b3:54:22:7c:2a:
63:ed:10:d5:22:c5:df:9d:af:4a:8b:31:00:fd:b0:
db:5c:63:04:74:86:5d:b5:40:a4:28:bc:50:d7:f3:
ec:b3:34:02:a5:a7:87:a0:5d:86:0d:2d:17:7a:7b:
f0:bb:6a:98:5e:67:a7:28:19:4e:0a:04:81:33:69:
89:d8:c5:d7:04:7b:9c:14:fb:fa:34:d4:75:11:4e:
c3:9e:ec:32:b0:e0:dd:da:df:27:de:be:13:c1:09:
a4:07:24:6b:5c:77:64:9d:b1:25:4d:49:a7:82:96:
02:86:ae:66:89:cd:c8:44:9d:2d:44:97:e1:3a:11:
9f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:55:00:2C:63:78:5C:DE:32:3E:27:D3:DF:3C:29:C5:78:67:EE:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6d944863-bb4b-4403-99d8-bdd9488dc28b/c7faa5b5-6e8c-3a80-8baf-bfd7aba1cea1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6d944863-bb4b-4403-99d8-bdd9488dc28b/6d944863-bb4b-4403-99d8-bdd9488dc28b.crl
X509v3 Authority Key Identifier:
keyid:D8:C6:D8:E7:FB:B9:CD:70:02:7B:7B:3E:6A:DA:A5:DA:3E:65:8C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6d944863-bb4b-4403-99d8-bdd9488dc28b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.165.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:fa:af:72:3d:83:cf:c9:ad:68:3d:df:e9:ba:37:f1:0a:27:
25:79:43:07:73:4f:57:d5:96:83:ef:44:f9:a0:78:42:6d:8c:
a7:2a:82:42:76:e6:44:bd:d3:90:15:20:65:59:31:49:25:45:
4f:ad:50:4e:74:9a:3e:fe:cc:f8:83:cd:74:b8:96:3b:30:25:
b0:ad:f8:6f:3f:fb:a7:a6:c8:8d:79:7e:e3:d5:af:30:07:66:
08:57:27:f1:19:c0:71:0b:73:0d:93:e6:fd:7d:39:db:4f:4b:
ce:93:a4:53:82:7c:a6:b2:df:f9:8a:37:98:86:40:d6:77:dd:
c7:bf:a7:5b:55:e0:9d:4b:45:42:e4:47:1f:50:51:83:30:eb:
c9:0d:bf:f0:37:18:b2:dd:df:71:04:4b:fe:5a:12:03:08:1f:
e3:2e:df:3b:8d:09:0b:79:fc:66:7b:7d:ce:5f:19:3c:18:01:
12:3b:ee:71:08:f2:02:2d:58:60:d5:cd:01:e5:e4:f4:a5:69:
03:ab:c8:9a:f1:d6:a3:eb:c0:87:4e:8d:f1:0a:e2:38:a5:80:
13:58:2a:42:72:51:aa:2c:05:3d:e4:2e:4d:82:c2:7c:d4:24:
03:9c:d7:ad:8e:85:f7:3a:13:17:28:8e:99:18:79:16:9c:65:
15:c4:86:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9AqZs+Qhvsy+OuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ5NDQ4NjMtYmI0Yi00NDAzLTk5ZDgtYmRkOTQ4OGRj
MjhiMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk
YzYwMjM2NjctMGNhMi00Y2FiLWFjOWYtNmNhODM1MmNjYjczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/hdketz+WScNKwB0MUPIYE7GXH1dqwhHmJM
gOhPoeUqQWUctIRtrwi8syyXVGmB43ncYZF4GcRqxP6WadUz6VSYq8Ny79lfm3qY
NC1euMebyGRf4H7NknMN7wnjUzAroGnW4XnfFYqG+DgtKbI9hLS2Cdr/MnpqRobC
A4mjfRuss1QifCpj7RDVIsXfna9KizEA/bDbXGMEdIZdtUCkKLxQ1/PsszQCpaeH
oF2GDS0Xenvwu2qYXmenKBlOCgSBM2mJ2MXXBHucFPv6NNR1EU7DnuwysODd2t8n
3r4TwQmkByRrXHdknbElTUmngpYChq5mic3IRJ0tRJfhOhGfFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNtVACxjeFzeMj4n0988KcV4Z+52MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82ZDk0
NDg2My1iYjRiLTQ0MDMtOTlkOC1iZGQ5NDg4ZGMyOGIvYzdmYWE1YjUtNmU4Yy0z
YTgwLThiYWYtYmZkN2FiYTFjZWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNmQ5NDQ4NjMtYmI0Yi00NDAzLTk5
ZDgtYmRkOTQ4OGRjMjhiLzZkOTQ0ODYzLWJiNGItNDQwMy05OWQ4LWJkZDk0ODhk
YzI4Yi5jcmwwHwYDVR0jBBgwFoAU2MbY5/u5zXACe3s+atql2j5ljJYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy82ZDk0NDg2My1iYjRiLTQ0MDMtOTlkOC1iZGQ5
NDg4ZGMyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6X4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHn6r3I9g8/JrWg93+m6N/EKJyV5QwdzT1fVloPvRPmgeEJtjKcqgkJ2
5kS905AVIGVZMUklRU+tUE50mj7+zPiDzXS4ljswJbCt+G8/+6emyI15fuPVrzAH
ZghXJ/EZwHELcw2T5v19OdtPS86TpFOCfKay3/mKN5iGQNZ33ce/p1tV4J1LRULk
Rx9QUYMw68kNv/A3GLLd33EES/5aEgMIH+Mu3zuNCQt5/GZ7fc5fGTwYARI77nEI
8gItWGDVzQHl5PSlaQOryJrx1qPrwIdOjfEK4jilgBNYKkJyUaosBT3kLk2CwnzU
JAOc162Ohfc6ExcojpkYeRacZRXEhuU=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:57:06 2025 by rpki-client