Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/7e3d434b-4370-3a39-8b26-c3d433d2bd13.roa
File: 7e3d434b-4370-3a39-8b26-c3d433d2bd13.roa (raw, json)
Hash identifier: x4iGFAdcQbsHL/wtfuklPEHeVFFKdDYM1JXS64kBA9s=
Subject key identifier: 82:83:5E:33:33:F1:F7:F9:5E:66:25:12:E5:8B:99:A4:D6:D3:7C:6B
Certificate issuer: /CN=4307d8eb-6c0f-40cf-b909-d61a3f0279c9
Certificate serial: 010D0C9F432858494CC9374BBD0C152396C4CEE0
Authority key identifier: 11:36:E2:A0:EE:F9:56:65:4B:69:C3:E3:4F:A3:30:12:F5:C0:0F:39
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/7e3d434b-4370-3a39-8b26-c3d433d2bd13.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 14618
IP address blocks: 23.131.60.0/24 maxlen: 24
2602:f763::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:37:4b:bd:0c:15:23:96:c4:ce:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4307d8eb-6c0f-40cf-b909-d61a3f0279c9
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=decb155d-a8d4-46b1-a31c-ca460911c515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:29:7c:bf:aa:38:f4:c0:97:7f:ea:4f:23:
ac:07:94:2b:df:fe:3a:2d:de:e5:91:2e:ab:7a:23:
04:8c:93:54:58:23:d4:79:9a:84:5a:99:83:8f:aa:
2d:4e:5a:63:9a:b3:20:14:cf:a5:f0:4b:c9:17:62:
45:75:a4:d2:c2:aa:81:6b:84:bc:0a:5e:3b:46:08:
c8:65:ef:6c:7a:cb:76:15:03:d8:61:41:c4:52:3d:
5e:02:a5:81:b6:88:91:2c:58:a4:ad:61:c3:cd:69:
2f:20:6d:56:aa:0e:89:e3:05:b2:7c:93:07:44:a0:
8a:8c:5a:4f:79:67:5c:23:c7:ec:48:12:f9:21:8c:
3a:15:41:d2:e0:21:46:8d:3b:2a:ef:c6:32:a3:c7:
04:96:9e:36:05:30:7f:ec:b6:09:b8:7f:d5:5a:5f:
3c:ec:5f:ac:df:83:46:9b:be:20:e5:a7:6d:3c:16:
20:2f:f1:ed:dd:6b:d9:b4:be:7a:b3:ea:9e:88:68:
ed:d2:21:ed:28:1e:64:ea:2d:67:a4:b8:f3:82:92:
d3:47:5d:eb:82:a1:fa:a6:06:f3:a6:68:88:d7:c0:
07:09:b9:75:24:05:da:24:e8:11:07:5f:56:42:79:
16:71:66:ee:cc:9c:03:66:4d:9e:7d:9a:70:64:cc:
cd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:83:5E:33:33:F1:F7:F9:5E:66:25:12:E5:8B:99:A4:D6:D3:7C:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/7e3d434b-4370-3a39-8b26-c3d433d2bd13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.crl
X509v3 Authority Key Identifier:
keyid:11:36:E2:A0:EE:F9:56:65:4B:69:C3:E3:4F:A3:30:12:F5:C0:0F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.131.60.0/24
IPv6:
2602:f763::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:b0:0f:b8:a6:ae:26:97:d9:c7:94:5c:78:65:e3:23:bf:14:
84:da:66:73:3d:be:ae:d7:b6:0d:85:24:bd:87:8c:ac:e7:d1:
47:45:39:b0:b9:0b:2a:ad:48:ab:1f:f1:cc:92:4a:75:e8:0e:
58:d3:a7:44:26:71:7f:9d:d6:bc:58:4e:00:3a:63:31:ac:1f:
1f:93:40:a2:78:f7:db:98:91:f4:de:37:d7:d0:23:c7:0a:b1:
2e:8b:ea:aa:0b:9c:ae:a9:02:2c:52:78:24:03:5e:2f:be:89:
74:6e:4e:3d:c6:da:89:86:37:f0:53:54:2c:07:69:e4:ee:2c:
71:38:13:30:6b:b4:22:92:a8:ca:3c:15:85:4d:5c:55:88:97:
b4:f6:ad:de:97:fa:a0:3b:03:f3:b2:cd:da:37:a1:a2:1f:95:
e0:b3:c3:5c:20:35:f9:06:61:89:88:3a:ff:6e:2d:0b:aa:a2:
37:fc:b3:1c:d8:59:a8:5b:5a:95:f2:46:46:e0:66:dd:06:f2:
d5:e2:1b:ee:23:9e:97:a9:d4:45:72:9e:d0:04:15:9a:b4:fc:
8e:7f:bd:7e:d2:7c:7e:4f:f0:5c:4f:82:69:af:5e:c3:a4:7c:
e2:3d:55:55:f5:b3:a8:86:25:c5:80:31:f7:45:51:82:e5:96:
de:f8:7d:48
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWElMyTdLvQwVI5bEzuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDMwN2Q4ZWItNmMwZi00MGNmLWI5MDktZDYxYTNmMDI3
OWM5MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk
ZGVjYjE1NWQtYThkNC00NmIxLWEzMWMtY2E0NjA5MTFjNTE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphEpfL+qOPTAl3/qTyOsB5Qr3/46Ld7lkS6r
eiMEjJNUWCPUeZqEWpmDj6otTlpjmrMgFM+l8EvJF2JFdaTSwqqBa4S8Cl47RgjI
Ze9sest2FQPYYUHEUj1eAqWBtoiRLFikrWHDzWkvIG1Wqg6J4wWyfJMHRKCKjFpP
eWdcI8fsSBL5IYw6FUHS4CFGjTsq78Yyo8cElp42BTB/7LYJuH/VWl887F+s34NG
m74g5adtPBYgL/Ht3WvZtL56s+qeiGjt0iHtKB5k6i1npLjzgpLTR13rgqH6pgbz
pmiI18AHCbl1JAXaJOgRB19WQnkWcWbuzJwDZk2efZpwZMzN/wIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFIKDXjMz8ff5XmYlEuWLmaTW03xrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80MzA3
ZDhlYi02YzBmLTQwY2YtYjkwOS1kNjFhM2YwMjc5YzkvN2UzZDQzNGItNDM3MC0z
YTM5LThiMjYtYzNkNDMzZDJiZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDMwN2Q4ZWItNmMwZi00MGNmLWI5
MDktZDYxYTNmMDI3OWM5LzQzMDdkOGViLTZjMGYtNDBjZi1iOTA5LWQ2MWEzZjAy
NzljOS5jcmwwHwYDVR0jBBgwFoAUETbioO75VmVLacPjT6MwEvXADzkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi80MzA3ZDhlYi02YzBmLTQwY2YtYjkwOS1kNjFh
M2YwMjc5YzkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF4M8MA8E
AgACMAkDBwAmAvdjAAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAe7APuKauJpfZx5RceGXjI78UhNpmcz2+
rte2DYUkvYeMrOfRR0U5sLkLKq1Iqx/xzJJKdegOWNOnRCZxf53WvFhOADpjMawf
H5NAonj325iR9N4319AjxwqxLovqqgucrqkCLFJ4JANeL76JdG5OPcbaiYY38FNU
LAdp5O4scTgTMGu0IpKoyjwVhU1cVYiXtPat3pf6oDsD87LN2jehoh+V4LPDXCA1
+QZhiYg6/24tC6qiN/yzHNhZqFtalfJGRuBm3Qby1eIb7iOel6nURXKe0AQVmrT8
jn+9ftJ8fk/wXE+Caa9ew6R84j1VVfWzqIYlxYAx90VRguWW3vh9SA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:34:01 2025 by rpki-client