Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/4f2c271e-9985-3804-96f9-c37c9b7b1a80.roa
File: 4f2c271e-9985-3804-96f9-c37c9b7b1a80.roa (raw, json)
Hash identifier: ItWVK/jei3Y66GUNR8lTGASp0Nu3fpjam+Wh3FnTH7g=
Subject key identifier: 27:ED:0B:66:38:48:38:39:CA:F6:9A:99:D6:9D:EE:A0:52:AF:A3:92
Certificate issuer: /CN=cc195d24-8046-44e5-bf80-7bdde011ee7b
Certificate serial: 010D0C9F43285848DBD66C78A9DD18072688B6E0
Authority key identifier: BB:88:F9:B7:DC:D8:C0:65:52:71:57:36:F2:60:0C:47:E5:8C:F1:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/4f2c271e-9985-3804-96f9-c37c9b7b1a80.roa
Signing time: Wed 12 Feb 2025 14:00:53 +0000
ROA not before: Wed 12 Feb 2025 14:00:53 +0000
ROA not after: Tue 13 May 2025 13:00:53 +0000
asID: 400240
IP address blocks: 23.189.112.0/24 maxlen: 24
2620:9e:e000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:db:d6:6c:78:a9:dd:18:07:26:88:b6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc195d24-8046-44e5-bf80-7bdde011ee7b
Validity
Not Before: Feb 12 14:00:53 2025 GMT
Not After : May 13 13:00:53 2025 GMT
Subject: CN=2101359f-7aff-422f-9391-61e68c913f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:28:41:f5:33:ae:cc:ae:fd:bc:aa:f8:5e:4c:
b5:7b:97:55:6b:d5:48:be:76:db:b3:77:b7:f4:50:
c1:cd:0a:db:d1:10:54:5f:70:e1:ec:f0:21:1e:75:
a0:fa:58:fd:f6:fe:08:71:5b:48:1d:cf:9b:2e:86:
69:13:68:c8:e2:d5:ab:18:09:0a:4a:d8:88:3d:46:
bd:89:67:21:64:9f:30:e4:a5:08:2d:54:c1:72:ef:
a3:a0:d4:67:3e:c2:12:d3:85:17:98:36:1e:d3:16:
26:2d:2d:76:92:7d:39:0d:d4:8f:67:00:d4:08:46:
a8:a6:87:e6:e3:dc:42:27:eb:81:5f:80:7e:4e:07:
8a:b8:20:28:4d:59:67:6f:28:22:f8:cf:68:5f:a2:
7d:3f:9f:fd:dc:06:4a:5a:e6:68:15:e2:da:42:f4:
bb:68:59:85:f0:23:cd:d6:47:d4:86:18:88:77:47:
47:05:11:81:26:41:e1:85:41:1a:af:41:ef:68:e3:
78:11:aa:97:4e:49:62:02:fc:fb:84:8e:74:81:42:
13:40:31:83:ed:24:6f:f7:79:83:5f:36:32:6a:ce:
4b:8c:69:d7:39:72:d8:bb:78:88:c2:ab:8c:24:1f:
ce:34:3b:fe:74:b8:0d:3d:7f:fc:09:e3:ee:c3:99:
ff:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:ED:0B:66:38:48:38:39:CA:F6:9A:99:D6:9D:EE:A0:52:AF:A3:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/4f2c271e-9985-3804-96f9-c37c9b7b1a80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/cc195d24-8046-44e5-bf80-7bdde011ee7b.crl
X509v3 Authority Key Identifier:
keyid:BB:88:F9:B7:DC:D8:C0:65:52:71:57:36:F2:60:0C:47:E5:8C:F1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.189.112.0/24
IPv6:
2620:9e:e000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:5b:b4:e2:a6:23:04:bf:ed:3f:0c:a1:9e:c2:69:f0:08:0c:
5e:eb:18:5f:7e:f7:c1:ef:56:fd:ae:0b:f9:b5:0f:d7:c3:20:
2c:6a:07:d9:cb:d1:98:e5:fb:65:7f:b6:e1:1c:50:9b:ba:94:
6d:81:7e:9b:19:cf:16:f7:9b:24:4c:2c:e6:94:d6:b1:d9:db:
8d:da:7a:91:92:7b:a5:a3:92:89:8c:06:50:f7:b9:1c:20:65:
5b:5a:dc:2c:36:ef:c4:8a:50:90:fb:3b:7c:c4:d3:97:02:c1:
94:e7:a6:78:15:2b:01:6f:97:71:13:fc:32:3a:76:df:c6:b9:
b0:30:09:ad:24:54:59:bd:a2:2a:f5:47:be:1b:33:7c:21:66:
30:0c:53:43:42:20:7e:d1:cc:a5:17:af:84:23:6a:f4:30:77:
56:86:32:92:36:96:53:46:77:75:3d:b0:69:1b:95:27:ea:5e:
9c:a7:85:c4:38:da:9c:56:24:ef:3b:29:d7:0e:1c:33:f5:da:
3c:e6:8d:16:80:eb:2d:5c:40:20:71:7a:4b:91:8b:7b:a8:bd:
5b:20:26:29:92:a2:6f:1b:36:0b:2a:72:0e:eb:59:17:84:f0:
63:10:c7:9f:53:1f:96:38:18:e2:d6:d6:e0:da:db:e8:75:a9:
9c:0b:04:8c
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEjb1mx4qd0YByaItuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MxOTVkMjQtODA0Ni00NGU1LWJmODAtN2JkZGUwMTFl
ZTdiMB4XDTI1MDIxMjE0MDA1M1oXDTI1MDUxMzEzMDA1M1owLzEtMCsGA1UEAxMk
MjEwMTM1OWYtN2FmZi00MjJmLTkzOTEtNjFlNjhjOTEzZjllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ihB9TOuzK79vKr4Xky1e5dVa9VIvnbbs3e3
9FDBzQrb0RBUX3Dh7PAhHnWg+lj99v4IcVtIHc+bLoZpE2jI4tWrGAkKStiIPUa9
iWchZJ8w5KUILVTBcu+joNRnPsIS04UXmDYe0xYmLS12kn05DdSPZwDUCEaopofm
49xCJ+uBX4B+TgeKuCAoTVlnbygi+M9oX6J9P5/93AZKWuZoFeLaQvS7aFmF8CPN
1kfUhhiId0dHBRGBJkHhhUEar0HvaON4EaqXTkliAvz7hI50gUITQDGD7SRv93mD
XzYyas5LjGnXOXLYu3iIwquMJB/ONDv+dLgNPX/8CePuw5n/LQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFCftC2Y4SDg5yvaamdad7qBSr6OSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jYzE5
NWQyNC04MDQ2LTQ0ZTUtYmY4MC03YmRkZTAxMWVlN2IvNGYyYzI3MWUtOTk4NS0z
ODA0LTk2ZjktYzM3YzliN2IxYTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2MxOTVkMjQtODA0Ni00NGU1LWJm
ODAtN2JkZGUwMTFlZTdiL2NjMTk1ZDI0LTgwNDYtNDRlNS1iZjgwLTdiZGRlMDEx
ZWU3Yi5jcmwwHwYDVR0jBBgwFoAUu4j5t9zYwGVScVc28mAMR+WM8U4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jYzE5NWQyNC04MDQ2LTQ0ZTUtYmY4MC03YmRk
ZTAxMWVlN2IuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF71wMA8E
AgACMAkDBwAmIACe4AAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAP1u04qYjBL/tPwyhnsJp8AgMXusYX373
we9W/a4L+bUP18MgLGoH2cvRmOX7ZX+24RxQm7qUbYF+mxnPFvebJEws5pTWsdnb
jdp6kZJ7paOSiYwGUPe5HCBlW1rcLDbvxIpQkPs7fMTTlwLBlOemeBUrAW+XcRP8
Mjp238a5sDAJrSRUWb2iKvVHvhszfCFmMAxTQ0IgftHMpRevhCNq9DB3VoYykjaW
U0Z3dT2waRuVJ+penKeFxDjanFYk7zsp1w4cM/XaPOaNFoDrLVxAIHF6S5GLe6i9
WyAmKZKibxs2CypyDutZF4TwYxDHn1MfljgY4tbW4Nrb6HWpnAsEjA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:38 2025 by rpki-client