Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/dfd50e54-9a49-38c5-8797-1a6bdd2e9ca8.roa
File: dfd50e54-9a49-38c5-8797-1a6bdd2e9ca8.roa (raw, json)
Hash identifier: LF9Gig5KweJnJRIE8GL291xne+UyINXCRhlDzsbX/t4=
Subject key identifier: 55:62:5F:89:E0:44:36:C9:4B:A1:78:A8:A3:F0:2F:79:64:85:1E:91
Certificate issuer: /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial: 010D0C9F4328584827C547C2168F1E2605A13000
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/dfd50e54-9a49-38c5-8797-1a6bdd2e9ca8.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 25855
IP address blocks: 23.147.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:47:c2:16:8f:1e:26:05:a1:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=b6593360-45c5-45b7-acc2-72798ad749cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5f:fd:2e:11:52:ac:5e:5e:24:d9:a8:f9:f4:
b7:2a:fb:bf:62:68:ec:42:d7:ef:e4:16:6f:c2:f7:
2f:c1:86:8f:8b:1f:65:4f:d4:e4:54:04:49:30:0d:
29:3b:bd:9f:08:7a:16:b0:cb:5c:52:5a:7a:bf:bd:
cd:a0:42:d4:88:da:d2:c4:fb:55:32:b8:40:39:63:
98:e5:72:56:7f:7e:e7:49:c6:92:6d:e0:d4:dc:e1:
00:37:ad:76:64:72:70:96:15:7c:d3:62:b2:f7:41:
02:37:b7:c4:75:4e:fb:ba:bc:7c:ea:e0:1a:fa:00:
a5:e7:9c:b6:2a:15:d6:6f:05:b8:ad:f3:a7:67:be:
33:03:dc:07:9e:99:b7:37:5e:c5:8b:b9:01:d9:16:
ba:9c:aa:d1:35:cd:5f:65:79:1e:b7:78:b2:e1:cb:
19:da:4e:c9:b6:e4:45:f5:16:b9:c7:e3:a8:09:80:
80:12:97:d0:0c:0e:be:44:ee:51:9b:bd:d7:a9:0f:
20:36:6a:3e:a3:6e:b7:16:b2:80:0d:52:75:2f:10:
7f:9b:9a:be:52:af:51:5c:02:b2:29:bf:21:6e:98:
f3:23:31:bc:46:81:eb:5d:30:4b:b9:de:6f:81:49:
ea:34:0d:4f:17:fe:1f:ef:02:9b:fe:e3:4d:35:05:
2c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:62:5F:89:E0:44:36:C9:4B:A1:78:A8:A3:F0:2F:79:64:85:1E:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/dfd50e54-9a49-38c5-8797-1a6bdd2e9ca8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
X509v3 Authority Key Identifier:
keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.147.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:12:04:d2:0c:5b:e7:b0:83:c0:c6:9c:31:35:df:4b:fc:7a:
19:82:21:b8:0c:2a:16:de:0e:27:22:6f:1e:be:67:ce:20:dc:
43:91:c3:18:57:9f:2e:d7:82:96:6b:36:58:75:df:2d:2e:ea:
b4:cf:65:33:a8:3f:08:bc:a2:8c:8b:bc:b3:82:c4:9a:bc:fb:
9d:48:99:8d:59:9b:de:41:14:8f:3b:b0:65:f8:c5:79:09:7b:
7e:2a:a0:c0:f0:8c:02:93:43:1f:0a:47:cd:69:9b:57:9e:aa:
54:90:cf:33:e6:25:f8:87:88:78:cd:b2:b5:99:22:69:5b:a0:
a4:d7:e3:c3:19:55:f9:67:0d:34:19:d6:b7:84:83:3c:c8:0f:
26:f4:ef:72:b3:35:99:9a:7f:a5:57:f7:fc:0b:65:30:4f:0d:
fe:1e:bb:13:ab:02:43:72:6e:68:12:a2:45:b1:96:4b:10:2f:
5f:a0:e8:28:46:f2:04:ee:f0:ab:b9:58:62:85:b6:c0:13:c4:
cc:7a:dd:da:a7:10:ba:d5:f7:e2:24:57:2a:cb:ae:9f:5a:15:
00:8b:e8:27:3a:e3:2c:73:b4:6b:55:61:8e:ef:73:4f:be:00:
f5:68:50:ce:b9:ce:a8:8a:1c:1a:2a:5c:12:53:72:ff:e1:f4:
53:2a:f2:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgnxUfCFo8eJgWhMAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTM5Y2I5NjAtMjM5NC00YjIyLWI5ZjEtM2FjNTU2NmJj
NzJhMB4XDTI0MTIxMDAyMDA0MFoXDTI1MDMxMDAxMDA0MFowLzEtMCsGA1UEAxMk
YjY1OTMzNjAtNDVjNS00NWI3LWFjYzItNzI3OThhZDc0OWNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1/9LhFSrF5eJNmo+fS3Kvu/YmjsQtfv5BZv
wvcvwYaPix9lT9TkVARJMA0pO72fCHoWsMtcUlp6v73NoELUiNrSxPtVMrhAOWOY
5XJWf37nScaSbeDU3OEAN612ZHJwlhV802Ky90ECN7fEdU77urx86uAa+gCl55y2
KhXWbwW4rfOnZ74zA9wHnpm3N17Fi7kB2Ra6nKrRNc1fZXket3iy4csZ2k7JtuRF
9Ra5x+OoCYCAEpfQDA6+RO5Rm73XqQ8gNmo+o263FrKADVJ1LxB/m5q+Uq9RXAKy
Kb8hbpjzIzG8RoHrXTBLud5vgUnqNA1PF/4f7wKb/uNNNQUslQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFViX4ngRDbJS6F4qKPwL3lkhR6RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzlj
Yjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1NTY2YmM3MmEvZGZkNTBlNTQtOWE0OS0z
OGM1LTg3OTctMWE2YmRkMmU5Y2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTM5Y2I5NjAtMjM5NC00YjIyLWI5
ZjEtM2FjNTU2NmJjNzJhL2UzOWNiOTYwLTIzOTQtNGIyMi1iOWYxLTNhYzU1NjZi
YzcyYS5jcmwwHwYDVR0jBBgwFoAUx5iuk+5ta+2iXZtwBvHdRTnXH4kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lMzljYjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1
NTY2YmM3MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5NZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAcSBNIMW+ewg8DGnDE130v8ehmCIbgMKhbeDicibx6+Z84g3EORwxhX
ny7XgpZrNlh13y0u6rTPZTOoPwi8ooyLvLOCxJq8+51ImY1Zm95BFI87sGX4xXkJ
e34qoMDwjAKTQx8KR81pm1eeqlSQzzPmJfiHiHjNsrWZImlboKTX48MZVflnDTQZ
1reEgzzIDyb073KzNZmaf6VX9/wLZTBPDf4euxOrAkNybmgSokWxlksQL1+g6ChG
8gTu8Ku5WGKFtsATxMx63dqnELrV9+IkVyrLrp9aFQCL6Cc64yxztGtVYY7vc0++
APVoUM65zqiKHBoqXBJTcv/h9FMq8rQ=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:40:22 2025 by rpki-client