Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/b4a1398d-1b75-3e42-b92c-420bd70b3810.roa
File: b4a1398d-1b75-3e42-b92c-420bd70b3810.roa (raw, json)
Hash identifier: vUEZlmOqHImZOWpCY71VpQmHekYVAADgmiRXCQAR9j0=
Subject key identifier: 01:50:BF:F4:FF:8A:06:BB:7E:5C:BA:6D:50:F3:22:7D:AE:04:EF:A6
Certificate issuer: /CN=ebff2bbd-fab0-4f48-a625-d53c63f1bbe6
Certificate serial: 010D0C9F43285848DA72F7278A6AB0A38C0A4C80
Authority key identifier: 43:DE:DC:F8:9F:C5:8D:6E:3C:61:F8:80:3F:72:0E:D5:0C:74:A6:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/b4a1398d-1b75-3e42-b92c-420bd70b3810.roa
Signing time: Wed 12 Feb 2025 02:04:45 +0000
ROA not before: Wed 12 Feb 2025 02:04:45 +0000
ROA not after: Tue 13 May 2025 01:04:45 +0000
asID: 18604
IP address blocks: 23.133.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:da:72:f7:27:8a:6a:b0:a3:8c:0a:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebff2bbd-fab0-4f48-a625-d53c63f1bbe6
Validity
Not Before: Feb 12 02:04:45 2025 GMT
Not After : May 13 01:04:45 2025 GMT
Subject: CN=d11d48c0-3f44-40fc-beee-f8d581e990cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dc:71:35:25:68:83:56:fc:ed:2c:0f:9c:cf:
5f:3a:62:fb:da:b4:21:d1:d0:d1:df:6c:84:a2:1e:
2e:c2:fd:32:52:6a:e9:94:0e:dc:e4:45:63:93:ab:
5f:8f:10:0c:bd:e8:e2:09:5d:da:10:d4:cb:22:08:
b6:72:28:01:05:6d:45:9b:16:66:1c:ee:e0:32:53:
c0:e8:60:7e:da:ce:58:ef:f2:24:c2:1c:6e:fd:1d:
b2:2d:65:ab:ce:bb:cb:7c:b8:55:8b:7a:38:54:4d:
53:25:87:79:f9:ce:28:18:10:79:de:4e:d9:33:41:
e1:9a:14:cf:8f:e8:ef:b9:8c:25:7b:66:91:df:f6:
a7:16:a7:1d:c3:35:47:0a:33:58:77:2f:d1:04:ae:
83:29:d8:16:af:2d:5d:fa:ba:9b:50:b5:64:63:88:
19:81:d5:5e:63:0d:6b:f0:bd:a2:4e:8a:59:d8:df:
74:7c:1e:15:34:dc:01:57:62:8a:09:bb:37:29:8a:
96:c5:4a:b8:c4:23:1a:23:de:90:f5:41:f6:ee:07:
dd:03:47:3c:f9:b8:7c:d5:2e:1e:4d:07:0f:f3:f8:
bc:0a:67:fa:fe:3e:05:db:83:2f:ab:60:45:95:55:
94:82:b3:29:91:72:b6:aa:e0:3d:21:e9:97:1c:90:
45:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:50:BF:F4:FF:8A:06:BB:7E:5C:BA:6D:50:F3:22:7D:AE:04:EF:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/b4a1398d-1b75-3e42-b92c-420bd70b3810.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.crl
X509v3 Authority Key Identifier:
keyid:43:DE:DC:F8:9F:C5:8D:6E:3C:61:F8:80:3F:72:0E:D5:0C:74:A6:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:f4:63:10:a2:14:e0:ca:47:77:81:54:c5:55:cc:71:ad:47:
72:cd:86:f5:13:c9:d8:8a:a7:cd:79:28:ae:1c:50:b4:9a:a8:
01:fa:a6:ac:1e:04:4a:40:ce:d2:61:fe:aa:be:1e:06:68:e2:
e6:c1:8b:5b:e1:fb:14:ff:8c:1d:b4:77:57:a9:eb:fb:f0:42:
56:17:da:7e:7a:ed:ad:4e:bb:de:85:22:70:92:ff:74:0b:a9:
a9:59:ef:26:28:2a:a0:14:49:14:4a:2c:5c:6c:d6:9d:04:d3:
f0:8d:d9:f7:2d:c3:14:60:17:18:9f:43:25:ff:31:a0:ec:f2:
15:0d:c7:3d:e0:ce:de:47:f5:b6:0d:99:63:b8:c6:ef:22:fd:
44:9b:64:61:ad:eb:8a:a0:71:a3:7d:f1:6b:07:77:77:35:7e:
5b:a1:fc:32:2c:64:82:18:83:cc:11:10:cb:58:90:24:f9:28:
c2:aa:86:92:4a:1b:d9:ac:4a:d3:a5:9c:57:af:bf:32:1e:25:
2e:d7:1c:90:eb:14:9e:d0:a4:81:4c:2e:a6:f3:cc:21:7d:40:
6d:56:2f:84:26:04:c5:ba:34:f6:f9:19:61:23:b0:ad:f2:32:
a1:34:8e:72:67:9a:2b:f9:33:e6:7f:7a:f3:15:d3:68:bf:00:
5e:1a:40:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacvcnimqwo4wKTIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWJmZjJiYmQtZmFiMC00ZjQ4LWE2MjUtZDUzYzYzZjFi
YmU2MB4XDTI1MDIxMjAyMDQ0NVoXDTI1MDUxMzAxMDQ0NVowLzEtMCsGA1UEAxMk
ZDExZDQ4YzAtM2Y0NC00MGZjLWJlZWUtZjhkNTgxZTk5MGNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtxxNSVog1b87SwPnM9fOmL72rQh0dDR32yE
oh4uwv0yUmrplA7c5EVjk6tfjxAMvejiCV3aENTLIgi2cigBBW1FmxZmHO7gMlPA
6GB+2s5Y7/Ikwhxu/R2yLWWrzrvLfLhVi3o4VE1TJYd5+c4oGBB53k7ZM0HhmhTP
j+jvuYwle2aR3/anFqcdwzVHCjNYdy/RBK6DKdgWry1d+rqbULVkY4gZgdVeYw1r
8L2iTopZ2N90fB4VNNwBV2KKCbs3KYqWxUq4xCMaI96Q9UH27gfdA0c8+bh81S4e
TQcP8/i8Cmf6/j4F24Mvq2BFlVWUgrMpkXK2quA9IemXHJBFRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAFQv/T/iga7fly6bVDzIn2uBO+mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lYmZm
MmJiZC1mYWIwLTRmNDgtYTYyNS1kNTNjNjNmMWJiZTYvYjRhMTM5OGQtMWI3NS0z
ZTQyLWI5MmMtNDIwYmQ3MGIzODEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZWJmZjJiYmQtZmFiMC00ZjQ4LWE2
MjUtZDUzYzYzZjFiYmU2L2ViZmYyYmJkLWZhYjAtNGY0OC1hNjI1LWQ1M2M2M2Yx
YmJlNi5jcmwwHwYDVR0jBBgwFoAUQ97c+J/FjW48YfiAP3IO1Qx0ppMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9lYmZmMmJiZC1mYWIwLTRmNDgtYTYyNS1kNTNj
NjNmMWJiZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4XUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFj0YxCiFODKR3eBVMVVzHGtR3LNhvUTydiKp815KK4cULSaqAH6pqwe
BEpAztJh/qq+HgZo4ubBi1vh+xT/jB20d1ep6/vwQlYX2n567a1Ou96FInCS/3QL
qalZ7yYoKqAUSRRKLFxs1p0E0/CN2fctwxRgFxifQyX/MaDs8hUNxz3gzt5H9bYN
mWO4xu8i/USbZGGt64qgcaN98WsHd3c1fluh/DIsZIIYg8wREMtYkCT5KMKqhpJK
G9msStOlnFevvzIeJS7XHJDrFJ7QpIFMLqbzzCF9QG1WL4QmBMW6NPb5GWEjsK3y
MqE0jnJnmiv5M+Z/evMV02i/AF4aQMs=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:33:53 2025 by rpki-client