Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/1245f871-ebb3-3540-bbf3-87aec2004349.roa
File: 1245f871-ebb3-3540-bbf3-87aec2004349.roa (raw, json)
Hash identifier: gdtmEMFi3UrJsHjg2pXdFLdD+l70mkT54hpa06CgSrA=
Subject key identifier: 08:50:C4:74:7D:F8:36:9D:B2:0F:87:AD:45:81:60:0A:F6:02:57:64
Certificate issuer: /CN=afcec77b-3d5a-4896-b9ed-b5b47b1bbadb
Certificate serial: 010D0C9F43285848A1FEB751A3A5646F031B1F00
Authority key identifier: AF:5C:52:31:D5:97:38:D7:F0:C9:EC:32:6C:81:F0:87:F3:FE:5D:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/1245f871-ebb3-3540-bbf3-87aec2004349.roa
Signing time: Wed 22 Jan 2025 20:45:15 +0000
ROA not before: Wed 22 Jan 2025 20:45:15 +0000
ROA not after: Tue 22 Apr 2025 19:45:15 +0000
asID: 7819
IP address blocks: 23.150.192.0/24 maxlen: 24
2604:70c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:fe:b7:51:a3:a5:64:6f:03:1b:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afcec77b-3d5a-4896-b9ed-b5b47b1bbadb
Validity
Not Before: Jan 22 20:45:15 2025 GMT
Not After : Apr 22 19:45:15 2025 GMT
Subject: CN=46d581f6-da42-4d7e-9adc-cf27724e6409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:02:99:95:02:80:58:92:f2:2c:2d:20:23:1f:
ac:14:90:01:30:4b:14:19:ed:33:17:7d:fb:6b:46:
04:e2:c4:db:4c:38:2a:fe:db:ab:f8:1a:fa:f3:fd:
3f:8d:dc:e7:e4:0d:4c:6d:3d:f5:d4:13:38:39:77:
05:ad:73:ae:de:c9:23:fc:e5:68:0c:fd:f4:09:13:
94:db:94:ad:bd:7d:26:e0:3a:7e:c5:1b:81:6f:a8:
da:4e:05:ed:3d:ba:6a:33:a4:75:85:8a:f4:05:33:
a4:e1:c2:26:28:61:6d:af:3e:6e:c0:d7:72:48:ea:
39:7c:b0:9d:ef:03:23:76:b2:d5:91:a5:73:63:0b:
0c:de:3e:12:0c:7c:56:e1:20:01:5c:2b:d2:cb:73:
28:03:9d:f8:1e:9e:a4:8b:6e:a6:d4:f1:43:72:7f:
d0:dd:8f:2d:b3:d5:48:f5:82:94:63:c7:52:54:eb:
12:05:e7:97:2f:7f:07:b6:ac:4d:c0:6d:1e:71:cb:
b3:77:44:88:a4:6c:67:d8:ae:b8:80:05:0c:cd:70:
d9:00:21:51:4d:60:b6:08:10:64:8f:71:7e:13:ef:
c0:30:58:41:93:51:9a:03:6d:ca:93:4f:87:2e:5e:
3f:e5:db:b9:3f:e4:fd:2c:d9:4d:c6:a8:97:55:28:
dd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:50:C4:74:7D:F8:36:9D:B2:0F:87:AD:45:81:60:0A:F6:02:57:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/1245f871-ebb3-3540-bbf3-87aec2004349.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.crl
X509v3 Authority Key Identifier:
keyid:AF:5C:52:31:D5:97:38:D7:F0:C9:EC:32:6C:81:F0:87:F3:FE:5D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.cer
sbgp-ipAddrBlock: critical
IPv4:
23.150.192.0/24
IPv6:
2604:70c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:ef:b5:cc:91:62:c5:82:53:0d:5f:7a:29:31:a0:79:1c:6f:
39:ea:12:01:08:38:6f:a2:64:69:b2:fb:ac:cf:3e:a1:29:bd:
d3:89:1f:56:89:08:54:2d:23:85:ee:49:ce:d5:27:d7:0d:99:
6e:f6:bd:48:6a:99:7f:cb:b7:33:91:78:a4:f9:ca:3c:1f:6c:
b9:07:68:08:8f:e8:0b:c6:76:e6:07:01:00:fe:b4:e1:73:1a:
68:ca:e5:33:c0:68:c6:e8:dd:92:20:08:ab:aa:85:3d:05:68:
8f:45:76:4b:6d:15:5a:f3:b7:e6:24:cc:65:48:3c:b3:d8:f9:
81:25:8e:3e:5e:43:bf:27:55:b4:90:03:84:eb:df:fd:ca:39:
6f:25:8f:30:0e:ad:33:13:e4:13:dd:49:20:c6:09:24:46:f0:
4c:b0:27:da:08:a5:e5:12:86:fd:42:57:fd:74:af:26:34:9c:
8e:f0:5c:69:a3:ef:02:43:5a:cb:b3:41:ed:6f:bd:7f:c0:50:
6c:76:a9:24:45:97:63:1c:ef:37:86:37:70:fe:43:72:27:cb:
83:29:9c:73:e8:61:0b:8d:76:42:7b:7e:b7:02:25:5f:87:95:
3d:0a:f1:87:24:d4:e4:d6:de:e7:67:85:ce:b8:c6:fc:53:20:
9d:d4:ef:71
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEih/rdRo6VkbwMbHwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWZjZWM3N2ItM2Q1YS00ODk2LWI5ZWQtYjViNDdiMWJi
YWRiMB4XDTI1MDEyMjIwNDUxNVoXDTI1MDQyMjE5NDUxNVowLzEtMCsGA1UEAxMk
NDZkNTgxZjYtZGE0Mi00ZDdlLTlhZGMtY2YyNzcyNGU2NDA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQKZlQKAWJLyLC0gIx+sFJABMEsUGe0zF337
a0YE4sTbTDgq/tur+Br68/0/jdzn5A1MbT311BM4OXcFrXOu3skj/OVoDP30CROU
25StvX0m4Dp+xRuBb6jaTgXtPbpqM6R1hYr0BTOk4cImKGFtrz5uwNdySOo5fLCd
7wMjdrLVkaVzYwsM3j4SDHxW4SABXCvSy3MoA534Hp6ki26m1PFDcn/Q3Y8ts9VI
9YKUY8dSVOsSBeeXL38HtqxNwG0eccuzd0SIpGxn2K64gAUMzXDZACFRTWC2CBBk
j3F+E+/AMFhBk1GaA23Kk0+HLl4/5du5P+T9LNlNxqiXVSjd2QIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFAhQxHR9+Dadsg+HrUWBYAr2AldkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hZmNl
Yzc3Yi0zZDVhLTQ4OTYtYjllZC1iNWI0N2IxYmJhZGIvMTI0NWY4NzEtZWJiMy0z
NTQwLWJiZjMtODdhZWMyMDA0MzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWZjZWM3N2ItM2Q1YS00ODk2LWI5
ZWQtYjViNDdiMWJiYWRiL2FmY2VjNzdiLTNkNWEtNDg5Ni1iOWVkLWI1YjQ3YjFi
YmFkYi5jcmwwHwYDVR0jBBgwFoAUr1xSMdWXONfwyewybIHwh/P+XfAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hZmNlYzc3Yi0zZDVhLTQ4OTYtYjllZC1iNWI0
N2IxYmJhZGIuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF5bAMA0E
AgACMAcDBQAmBHDAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAJPvtcyRYsWCUw1feikxoHkcbznqEgEIOG+i
ZGmy+6zPPqEpvdOJH1aJCFQtI4XuSc7VJ9cNmW72vUhqmX/LtzOReKT5yjwfbLkH
aAiP6AvGduYHAQD+tOFzGmjK5TPAaMbo3ZIgCKuqhT0FaI9FdkttFVrzt+YkzGVI
PLPY+YEljj5eQ78nVbSQA4Tr3/3KOW8ljzAOrTMT5BPdSSDGCSRG8EywJ9oIpeUS
hv1CV/10ryY0nI7wXGmj7wJDWsuzQe1vvX/AUGx2qSRFl2Mc7zeGN3D+Q3Iny4Mp
nHPoYQuNdkJ7frcCJV+HlT0K8Yck1OTW3udnhc64xvxTIJ3U73E=
-----END CERTIFICATE-----
Generated at Thu Apr 10 02:50:40 2025 by rpki-client