Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/9534c0c2-6cd4-3f2e-b1c4-fa79a13c8e3b.roa
File: 9534c0c2-6cd4-3f2e-b1c4-fa79a13c8e3b.roa (raw, json)
Hash identifier: 43sH9In15I9vlFbWIDsbcDAzWmgV4Y59bi1pP5nqRTE=
Subject key identifier: CD:85:70:39:24:15:D1:2D:24:2F:D4:6C:3B:FF:8F:E0:BE:BB:4D:1C
Certificate issuer: /CN=c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca
Certificate serial: 010D0C9F43285848EBBA1469336F106ECE325680
Authority key identifier: DB:20:03:27:1E:84:D1:36:A3:75:42:0C:B0:53:6F:52:1E:80:D4:1B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/9534c0c2-6cd4-3f2e-b1c4-fa79a13c8e3b.roa
Signing time: Tue 18 Feb 2025 06:36:47 +0000
ROA not before: Tue 18 Feb 2025 06:36:47 +0000
ROA not after: Mon 19 May 2025 05:36:47 +0000
asID: 7018
IP address blocks: 23.133.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:eb:ba:14:69:33:6f:10:6e:ce:32:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca
Validity
Not Before: Feb 18 06:36:47 2025 GMT
Not After : May 19 05:36:47 2025 GMT
Subject: CN=72d4d7d2-2626-491a-a5c4-cf328e33a4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d0:80:dc:3e:23:c2:11:4c:da:bb:c5:71:96:
30:b2:ae:74:8f:ff:d2:fb:33:9b:f9:dc:54:a5:61:
c3:8e:95:15:86:e6:45:dd:a2:ae:9d:ad:e9:1a:32:
8c:e3:86:18:be:f1:28:df:c6:4d:ea:c9:94:76:6b:
6c:21:7c:ef:43:f3:41:04:04:d9:fc:b4:cf:87:c5:
12:1a:ae:1e:2c:07:7b:bb:f3:66:d0:d4:7c:94:8a:
42:c1:1b:ed:d8:7e:88:ad:d8:bc:01:87:28:9b:16:
fb:19:32:d7:e9:af:8f:e3:47:c6:f3:c7:30:97:a9:
15:68:6d:0b:02:44:73:70:11:28:46:b0:21:f9:2b:
0d:23:54:b8:f8:d2:f9:b7:40:44:80:62:60:de:44:
f6:8a:10:2d:c8:96:02:34:40:24:12:4d:41:96:a1:
1b:37:4e:9a:b4:a2:2d:52:e7:89:78:3f:2f:19:c0:
47:2e:83:3f:01:60:0b:df:3a:e6:5f:46:98:fd:52:
9b:cb:d3:75:ca:c7:77:10:e9:67:68:fd:1e:23:5b:
4b:56:0f:c0:2f:f0:20:fb:57:f3:cc:d4:4b:90:fb:
c7:e3:79:45:fa:08:57:cd:83:05:c0:5c:0e:af:ba:
08:e7:d6:58:24:65:ce:99:dd:d6:5c:31:20:0b:4c:
2f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:85:70:39:24:15:D1:2D:24:2F:D4:6C:3B:FF:8F:E0:BE:BB:4D:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/9534c0c2-6cd4-3f2e-b1c4-fa79a13c8e3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.crl
X509v3 Authority Key Identifier:
keyid:DB:20:03:27:1E:84:D1:36:A3:75:42:0C:B0:53:6F:52:1E:80:D4:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3f3213f-d8d0-4cfc-ae4c-4a45445b6eca.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:c6:11:1c:1b:37:3c:d2:e0:65:37:5d:a8:b6:bb:fa:e0:77:
16:a1:3e:f2:37:92:94:c9:a1:dc:d8:7c:9d:73:64:26:69:49:
67:3c:39:88:1d:32:c5:36:ec:d2:f3:5a:94:f1:90:83:eb:19:
2a:7f:9f:b1:a5:7d:0e:ea:3a:60:d5:df:50:db:92:64:a7:7a:
7c:ae:28:c4:0f:aa:c6:42:46:0f:3e:63:d2:ba:5b:40:f3:f8:
05:b0:17:bb:50:98:14:5a:b4:fd:2e:55:72:b6:66:51:1e:05:
47:a2:b0:04:b1:57:93:ae:0b:35:23:d3:90:9f:63:8b:28:ac:
38:a9:89:43:30:70:81:7f:19:30:0e:c1:32:29:fa:fd:75:79:
9d:5a:e9:0c:ae:c8:f5:69:ed:ee:cc:3e:87:23:74:54:4f:77:
34:6d:b6:5b:2a:e9:33:45:94:b3:83:51:1d:60:f7:a8:ca:5d:
cf:8d:97:ae:10:29:c1:66:e5:6f:6f:33:ed:32:1b:77:62:43:
0c:1c:20:0d:75:bf:a4:90:50:69:09:1f:02:85:21:b9:bf:a4:
d9:b2:22:b6:9d:a8:68:ec:91:04:6e:ed:21:a6:a2:34:d5:1d:
e6:4b:ce:8c:a6:56:19:84:c9:1a:55:79:9f:e5:3a:41:73:d4:
00:43:64:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjruhRpM28Qbs4yVoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzNmMzIxM2YtZDhkMC00Y2ZjLWFlNGMtNGE0NTQ0NWI2
ZWNhMB4XDTI1MDIxODA2MzY0N1oXDTI1MDUxOTA1MzY0N1owLzEtMCsGA1UEAxMk
NzJkNGQ3ZDItMjYyNi00OTFhLWE1YzQtY2YzMjhlMzNhNGE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNCA3D4jwhFM2rvFcZYwsq50j//S+zOb+dxU
pWHDjpUVhuZF3aKuna3pGjKM44YYvvEo38ZN6smUdmtsIXzvQ/NBBATZ/LTPh8US
Gq4eLAd7u/Nm0NR8lIpCwRvt2H6Irdi8AYcomxb7GTLX6a+P40fG88cwl6kVaG0L
AkRzcBEoRrAh+SsNI1S4+NL5t0BEgGJg3kT2ihAtyJYCNEAkEk1BlqEbN06atKIt
UueJeD8vGcBHLoM/AWAL3zrmX0aY/VKby9N1ysd3EOlnaP0eI1tLVg/AL/Ag+1fz
zNRLkPvH43lF+ghXzYMFwFwOr7oI59ZYJGXOmd3WXDEgC0wv9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM2FcDkkFdEtJC/UbDv/j+C+u00cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jM2Yz
MjEzZi1kOGQwLTRjZmMtYWU0Yy00YTQ1NDQ1YjZlY2EvOTUzNGMwYzItNmNkNC0z
ZjJlLWIxYzQtZmE3OWExM2M4ZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzNmMzIxM2YtZDhkMC00Y2ZjLWFl
NGMtNGE0NTQ0NWI2ZWNhL2MzZjMyMTNmLWQ4ZDAtNGNmYy1hZTRjLTRhNDU0NDVi
NmVjYS5jcmwwHwYDVR0jBBgwFoAU2yADJx6E0TajdUIMsFNvUh6A1BswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9jM2YzMjEzZi1kOGQwLTRjZmMtYWU0Yy00YTQ1
NDQ1YjZlY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4WEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIDGERwbNzzS4GU3Xai2u/rgdxahPvI3kpTJodzYfJ1zZCZpSWc8OYgd
MsU27NLzWpTxkIPrGSp/n7GlfQ7qOmDV31DbkmSnenyuKMQPqsZCRg8+Y9K6W0Dz
+AWwF7tQmBRatP0uVXK2ZlEeBUeisASxV5OuCzUj05CfY4sorDipiUMwcIF/GTAO
wTIp+v11eZ1a6QyuyPVp7e7MPocjdFRPdzRttlsq6TNFlLODUR1g96jKXc+Nl64Q
KcFm5W9vM+0yG3diQwwcIA11v6SQUGkJHwKFIbm/pNmyIradqGjskQRu7SGmojTV
HeZLzoymVhmEyRpVeZ/lOkFz1ABDZM4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:34:15 2025 by rpki-client