Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/47b424ee-693e-3575-8fe0-83475339fcdd.roa
File: 47b424ee-693e-3575-8fe0-83475339fcdd.roa (raw, json)
Hash identifier: ERreUzgAFOJj7kOrZQU4SpMdN+FAfQ20N9cJWRhgSvE=
Subject key identifier: E5:30:A9:83:4F:64:E7:57:E7:69:74:D3:49:6F:8B:97:72:C3:8C:B8
Certificate issuer: /CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801
Certificate serial: 010D0C9F43285849071BF4456B1BA623FDD5ADC0
Authority key identifier: 56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/47b424ee-693e-3575-8fe0-83475339fcdd.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 20473
IP address blocks: 23.189.120.0/24 maxlen: 24
2602:f805::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1b:f4:45:6b:1b:a6:23:fd:d5:ad:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=ee973f22-1ee9-40c9-82d1-533945879dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9e:2b:df:43:d7:99:c6:c7:d9:00:30:e0:2e:
27:d8:6e:5a:3b:c8:49:1e:b5:0f:f1:53:38:98:da:
ea:3f:2c:5b:50:86:91:6b:0d:5e:92:54:5d:a3:5f:
7d:2d:64:07:d1:28:f8:b4:01:68:9b:12:2d:34:90:
7a:16:99:3c:80:17:a6:71:63:a2:7b:c8:d2:13:0d:
f7:bf:1e:d4:af:0d:7d:d3:ce:e5:af:04:1d:44:ab:
82:52:95:b3:cd:49:c9:09:31:2c:73:25:6b:02:f0:
cb:fa:ce:2b:2d:9f:4b:59:b0:29:24:23:85:99:87:
a7:a0:41:9e:9e:29:64:f4:c8:9f:e3:65:29:99:8f:
6f:09:28:b8:62:1d:33:b6:56:b8:4a:ca:01:e0:f6:
e2:82:58:d0:04:43:70:fb:20:47:9d:01:1e:a7:51:
bd:78:45:37:72:ff:ea:32:3e:9d:1d:fe:fc:45:f7:
a1:6b:45:01:7c:20:6f:f4:87:88:66:4c:8c:37:d5:
ca:5b:c3:15:21:01:11:56:48:7d:03:bb:ee:ad:7a:
e1:84:9f:62:95:5e:0d:f8:89:ab:21:8b:78:43:7c:
33:84:14:5e:56:da:6f:18:ad:ce:94:e8:9c:11:e7:
37:dc:a5:b9:53:d3:4a:5d:f7:9b:83:40:e8:c8:52:
2c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:30:A9:83:4F:64:E7:57:E7:69:74:D3:49:6F:8B:97:72:C3:8C:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/47b424ee-693e-3575-8fe0-83475339fcdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl
X509v3 Authority Key Identifier:
keyid:56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer
sbgp-ipAddrBlock: critical
IPv4:
23.189.120.0/24
IPv6:
2602:f805::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:7a:3f:f8:2e:fb:69:00:dc:cb:6c:f7:18:fe:dc:6c:4b:7a:
6a:a7:66:08:be:6d:b9:a0:d1:59:1e:12:42:7c:a1:40:99:54:
10:6b:c1:63:6e:32:ad:fd:2d:12:34:26:a9:c0:1e:aa:c1:fd:
29:28:aa:43:57:80:df:2f:b5:fd:05:ea:a7:ab:93:8c:c9:49:
10:48:7b:4d:b5:55:38:b3:63:d5:7a:b0:f9:a3:5c:2e:f1:6a:
0a:cc:6d:8a:b1:53:01:39:71:9c:0a:f7:79:31:30:4a:83:72:
11:8d:82:89:40:39:aa:c2:39:93:b8:81:ac:fe:48:60:b3:f6:
98:d0:80:9e:a6:b7:94:52:4c:9a:42:9f:ce:a7:29:cc:eb:66:
13:45:25:8e:a7:fd:5d:3b:01:b0:1f:2a:e5:4d:ad:39:32:9f:
f5:1d:34:b5:66:81:4e:b3:e5:1d:28:9f:31:03:1a:2a:44:11:
80:55:fe:6e:27:85:20:32:e9:f2:56:ba:b5:6c:fa:89:55:6e:
d3:9e:c6:31:52:08:c1:1c:a4:bd:0a:de:64:99:50:2a:6c:1c:
01:bd:e8:7a:74:11:af:61:23:0b:46:a4:2b:bd:22:20:28:60:
20:06:14:88:55:97:32:27:f7:f0:a9:ca:c1:2f:13:c6:8f:7f:
2e:26:86:8b
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEkHG/RFaxumI/3VrcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmE2YTk1YjMtZGQzYy00MGRlLTliZDItODQzNTdiNzRm
ODAxMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk
ZWU5NzNmMjItMWVlOS00MGM5LTgyZDEtNTMzOTQ1ODc5ZGZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJ4r30PXmcbH2QAw4C4n2G5aO8hJHrUP8VM4
mNrqPyxbUIaRaw1eklRdo199LWQH0Sj4tAFomxItNJB6Fpk8gBemcWOie8jSEw33
vx7Urw19087lrwQdRKuCUpWzzUnJCTEscyVrAvDL+s4rLZ9LWbApJCOFmYenoEGe
nilk9Mif42UpmY9vCSi4Yh0ztla4SsoB4PbigljQBENw+yBHnQEep1G9eEU3cv/q
Mj6dHf78Rfeha0UBfCBv9IeIZkyMN9XKW8MVIQERVkh9A7vurXrhhJ9ilV4N+Imr
IYt4Q3wzhBReVtpvGK3OlOicEec33KW5U9NKXfebg0DoyFIshQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFOUwqYNPZOdX52l000lvi5dyw4y4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iYTZh
OTViMy1kZDNjLTQwZGUtOWJkMi04NDM1N2I3NGY4MDEvNDdiNDI0ZWUtNjkzZS0z
NTc1LThmZTAtODM0NzUzMzlmY2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYmE2YTk1YjMtZGQzYy00MGRlLTli
ZDItODQzNTdiNzRmODAxL2JhNmE5NWIzLWRkM2MtNDBkZS05YmQyLTg0MzU3Yjc0
ZjgwMS5jcmwwHwYDVR0jBBgwFoAUVoM58N8yt2DFZSaxnWkfb2xEoXMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9iYTZhOTViMy1kZDNjLTQwZGUtOWJkMi04NDM1
N2I3NGY4MDEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF714MA4E
AgACMAgDBgQmAvgFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCWej/4LvtpANzLbPcY/txsS3pqp2YIvm25
oNFZHhJCfKFAmVQQa8FjbjKt/S0SNCapwB6qwf0pKKpDV4DfL7X9Beqnq5OMyUkQ
SHtNtVU4s2PVerD5o1wu8WoKzG2KsVMBOXGcCvd5MTBKg3IRjYKJQDmqwjmTuIGs
/khgs/aY0ICepreUUkyaQp/OpynM62YTRSWOp/1dOwGwHyrlTa05Mp/1HTS1ZoFO
s+UdKJ8xAxoqRBGAVf5uJ4UgMunyVrq1bPqJVW7TnsYxUgjBHKS9Ct5kmVAqbBwB
veh6dBGvYSMLRqQrvSIgKGAgBhSIVZcyJ/fwqcrBLxPGj38uJoaL
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:57 2025 by rpki-client