Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/930237d2-7c98-3e15-b444-d23772ae4891.roa
File: 930237d2-7c98-3e15-b444-d23772ae4891.roa (raw, json)
Hash identifier: X5AzV8MC1TNVz2krOWNwLyjx1GmCt2MhITuMg7wBtCI=
Subject key identifier: 94:11:BD:49:7D:86:5D:0C:C4:E6:D4:EC:57:4E:E2:95:78:D3:26:31
Certificate issuer: /CN=862a9ade-3d88-4730-8033-1414625d565b
Certificate serial: 010D0C9F432858487EA2A7E8BA83165D0C0BB580
Authority key identifier: 2C:E1:46:DA:DF:D5:E4:78:2E:B1:F4:E3:E1:6F:6E:E5:18:EA:C4:EE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/930237d2-7c98-3e15-b444-d23772ae4891.roa
Signing time: Fri 10 Jan 2025 04:46:28 +0000
ROA not before: Fri 10 Jan 2025 04:46:28 +0000
ROA not after: Thu 10 Apr 2025 03:46:28 +0000
asID: 400593
IP address blocks: 23.131.108.0/24 maxlen: 24
2602:f75d::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7e:a2:a7:e8:ba:83:16:5d:0c:0b:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=862a9ade-3d88-4730-8033-1414625d565b
Validity
Not Before: Jan 10 04:46:28 2025 GMT
Not After : Apr 10 03:46:28 2025 GMT
Subject: CN=af7ee496-d9b5-4061-89d5-4c79c8a6b370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a0:d4:28:19:ac:1a:ad:bf:8b:f3:bf:b7:dc:
b1:27:83:e6:5d:e4:b3:fe:91:93:24:84:37:69:eb:
83:fc:bf:ea:be:59:05:41:17:60:2a:a2:45:63:ae:
05:43:5b:e8:86:25:70:d4:a1:e4:3a:24:36:1e:ed:
69:e5:f8:1a:0a:5e:4f:d6:4d:62:0d:7d:8a:3d:1a:
98:7c:a2:ab:1d:b1:7b:65:89:22:b6:2c:ae:1b:8a:
94:51:54:cc:92:03:2a:64:88:e0:d2:70:91:5d:ec:
e6:43:a9:c4:55:16:f9:9e:96:12:14:68:4f:08:94:
99:7f:e7:a6:0c:c0:7c:55:d6:46:f7:71:b9:57:05:
43:ff:3c:cc:eb:bb:46:39:71:80:50:e2:e9:c0:b4:
cf:fe:65:34:30:6d:4a:22:21:04:ac:ad:0c:c2:48:
52:cc:66:1a:4f:34:7e:df:d7:9f:e4:ac:b2:cd:0d:
dd:56:38:7d:da:20:1e:63:74:38:0a:45:f7:32:aa:
4b:e8:3e:a4:95:aa:29:83:76:e3:16:07:6f:c1:4b:
5a:e8:92:94:71:98:96:f5:d4:b7:a2:39:b2:82:fa:
71:ad:e1:4d:8f:b7:00:27:c0:93:fa:98:c6:7c:90:
f8:1b:06:d2:5f:a9:e1:23:a9:88:e7:34:22:b4:83:
1d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:11:BD:49:7D:86:5D:0C:C4:E6:D4:EC:57:4E:E2:95:78:D3:26:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/930237d2-7c98-3e15-b444-d23772ae4891.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/862a9ade-3d88-4730-8033-1414625d565b.crl
X509v3 Authority Key Identifier:
keyid:2C:E1:46:DA:DF:D5:E4:78:2E:B1:F4:E3:E1:6F:6E:E5:18:EA:C4:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.131.108.0/24
IPv6:
2602:f75d::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:40:27:87:94:c0:80:e1:bd:1b:9d:ef:2c:09:3d:19:66:a1:
56:8f:66:29:66:73:61:b8:ff:67:d4:02:5d:38:20:0f:ec:53:
7b:38:0b:9a:44:c4:0c:22:e1:dc:71:18:3e:4b:cd:3e:25:3f:
0e:b4:c4:ff:08:e3:7b:51:41:dc:b5:4a:de:dc:37:9a:09:19:
e8:8d:97:77:9f:57:e0:ab:39:c7:02:db:29:8f:1b:ce:0c:63:
df:55:b4:aa:2e:71:14:fa:6a:9f:04:51:82:5c:d7:78:04:2c:
d4:b3:75:52:d4:f7:c5:6c:4e:f8:3d:75:41:15:c1:91:b0:15:
66:15:a4:cc:78:97:55:fb:4a:f3:76:2c:ee:99:6c:87:f2:fe:
eb:0a:a3:d7:9d:99:b3:df:82:70:8d:56:5c:85:3c:ef:e4:dd:
45:cf:a6:7f:3c:17:ce:06:29:a8:1d:ae:b2:c1:25:03:e3:df:
e8:79:89:71:ab:88:a8:92:e1:ef:96:7c:f0:00:1d:d7:d1:f2:
27:35:12:b8:6c:98:6c:dd:be:f4:83:c0:47:a9:6c:c6:a6:ec:
2c:21:8f:3e:6d:ca:a0:2e:73:cc:ff:d6:1a:de:e3:25:39:84:
cf:a3:de:1d:56:55:c4:54:c4:ba:ab:27:ff:20:b9:ab:19:fa:
e9:61:2a:13
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEh+oqfouoMWXQwLtYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODYyYTlhZGUtM2Q4OC00NzMwLTgwMzMtMTQxNDYyNWQ1
NjViMB4XDTI1MDExMDA0NDYyOFoXDTI1MDQxMDAzNDYyOFowLzEtMCsGA1UEAxMk
YWY3ZWU0OTYtZDliNS00MDYxLTg5ZDUtNGM3OWM4YTZiMzcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaDUKBmsGq2/i/O/t9yxJ4PmXeSz/pGTJIQ3
aeuD/L/qvlkFQRdgKqJFY64FQ1vohiVw1KHkOiQ2Hu1p5fgaCl5P1k1iDX2KPRqY
fKKrHbF7ZYkitiyuG4qUUVTMkgMqZIjg0nCRXezmQ6nEVRb5npYSFGhPCJSZf+em
DMB8VdZG93G5VwVD/zzM67tGOXGAUOLpwLTP/mU0MG1KIiEErK0MwkhSzGYaTzR+
39ef5KyyzQ3dVjh92iAeY3Q4CkX3MqpL6D6klaopg3bjFgdvwUta6JKUcZiW9dS3
ojmygvpxreFNj7cAJ8CT+pjGfJD4GwbSX6nhI6mI5zQitIMdgQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFJQRvUl9hl0MxObU7FdO4pV40yYxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84NjJh
OWFkZS0zZDg4LTQ3MzAtODAzMy0xNDE0NjI1ZDU2NWIvOTMwMjM3ZDItN2M5OC0z
ZTE1LWI0NDQtZDIzNzcyYWU0ODkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODYyYTlhZGUtM2Q4OC00NzMwLTgw
MzMtMTQxNDYyNWQ1NjViLzg2MmE5YWRlLTNkODgtNDczMC04MDMzLTE0MTQ2MjVk
NTY1Yi5jcmwwHwYDVR0jBBgwFoAULOFG2t/V5HgusfTj4W9u5RjqxO4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi84NjJhOWFkZS0zZDg4LTQ3MzAtODAzMy0xNDE0
NjI1ZDU2NWIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4NsMA4E
AgACMAgDBgQmAvddADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAdQCeHlMCA4b0bne8sCT0ZZqFWj2YpZnNh
uP9n1AJdOCAP7FN7OAuaRMQMIuHccRg+S80+JT8OtMT/CON7UUHctUre3DeaCRno
jZd3n1fgqznHAtspjxvODGPfVbSqLnEU+mqfBFGCXNd4BCzUs3VS1PfFbE74PXVB
FcGRsBVmFaTMeJdV+0rzdizumWyH8v7rCqPXnZmz34JwjVZchTzv5N1Fz6Z/PBfO
BimoHa6ywSUD49/oeYlxq4iokuHvlnzwAB3X0fInNRK4bJhs3b70g8BHqWzGpuws
IY8+bcqgLnPM/9Ya3uMlOYTPo94dVlXEVMS6qyf/ILmrGfrpYSoT
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:22:25 2025 by rpki-client