Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/8dbc74e3-7582-3a14-8bd4-683c9256d6ce.roa
File: 8dbc74e3-7582-3a14-8bd4-683c9256d6ce.roa (raw, json)
Hash identifier: WrNmnT4lqyPDwKNwLmTqxwnxlg68laHyRlWOUTxPJ54=
Subject key identifier: 48:DE:A4:81:BE:7D:9D:DE:A8:E8:C5:AF:EC:C0:33:07:4C:CA:C2:E4
Certificate issuer: /CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41
Certificate serial: 010D0C9F43285848F926985D5AE3216EBBB35100
Authority key identifier: 42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/8dbc74e3-7582-3a14-8bd4-683c9256d6ce.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 54632
IP address blocks: 23.159.112.0/24 maxlen: 24
23.160.176.0/24 maxlen: 24
23.170.32.0/24 maxlen: 24
23.170.33.0/24 maxlen: 24
2602:fe6a::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:98:5d:5a:e3:21:6e:bb:b3:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=1cbbe63e-d233-4bcf-953a-55180399a6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:07:49:f1:b8:fa:33:4b:fc:f2:91:18:59:2d:
b4:6d:aa:74:3f:f5:14:29:cf:9d:54:21:01:83:e8:
cf:d5:bb:ac:06:37:63:0e:d6:fb:97:15:9b:c5:b8:
c6:81:70:f4:bf:66:6f:a2:0b:3f:ab:73:72:97:d0:
5a:fa:29:66:a3:d8:26:da:be:11:ae:2c:27:4b:6c:
f2:95:bc:60:d9:3d:d0:c4:f0:0b:6c:70:5c:08:d2:
8d:9c:c8:9f:06:5b:99:e5:8f:15:8e:e9:f2:b7:50:
b0:53:67:c7:62:65:7d:f5:2b:2c:0a:85:b8:41:58:
cd:21:17:f7:cb:0e:07:cd:08:28:b4:64:28:e2:ad:
5f:74:9f:b0:a7:09:23:b8:e9:23:e3:ae:10:d4:3c:
34:6f:91:46:25:48:ab:b7:4a:4e:d4:c4:8c:fd:73:
75:21:fc:df:b3:ba:a8:6b:29:bd:03:b2:e2:d5:2f:
bd:55:44:5b:78:61:45:ac:1c:df:16:80:02:fe:30:
64:0d:ba:3c:e5:31:dd:d5:c2:90:be:93:5c:da:66:
2d:dc:54:89:7e:3a:96:70:04:6e:33:cd:f8:00:d8:
33:3e:f8:f9:dd:be:1a:4e:d7:48:be:fc:2e:6e:56:
44:b3:f3:b4:a4:66:14:55:72:ad:c8:04:bc:a1:f7:
b5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DE:A4:81:BE:7D:9D:DE:A8:E8:C5:AF:EC:C0:33:07:4C:CA:C2:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/8dbc74e3-7582-3a14-8bd4-683c9256d6ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl
X509v3 Authority Key Identifier:
keyid:42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer
sbgp-ipAddrBlock: critical
IPv4:
23.159.112.0/24
23.160.176.0/24
23.170.32.0/23
IPv6:
2602:fe6a::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:bc:c9:fe:53:1d:af:ea:b1:67:89:1f:9e:91:1f:9a:1d:e6:
70:eb:2c:99:c9:10:bf:15:57:46:b3:44:78:96:bc:f6:7d:2b:
8e:67:d5:68:31:46:9e:15:15:44:b9:33:27:24:1c:6d:98:16:
8c:c1:fc:31:b8:af:99:39:0f:e1:57:06:48:53:9c:07:1f:2c:
37:d4:78:7d:9a:96:38:98:dd:1e:98:33:df:9a:82:e5:5b:c1:
60:8e:31:63:22:4a:2a:22:87:1f:45:7d:d2:8b:f5:3b:d5:35:
70:84:bd:0b:96:fb:c5:c2:e6:94:c2:6d:63:32:76:8a:8c:42:
d8:11:72:af:d3:2d:b8:be:23:72:36:31:ac:86:73:4a:b9:a8:
b4:0d:5e:3e:da:9c:ed:05:97:93:57:cf:61:c2:9e:5e:cb:f1:
1b:c5:df:2d:26:c4:e5:17:ff:28:ec:45:60:36:4e:c1:b5:da:
00:1e:21:0c:e0:81:09:5b:db:b8:6c:c0:a6:3d:53:d3:4c:d5:
21:47:f4:ba:e3:67:76:3b:d7:08:31:62:14:09:cd:04:c3:50:
44:93:d1:e0:80:99:47:22:1e:31:2b:52:62:1b:96:7a:41:dd:
5e:13:94:44:ec:e8:74:d0:1e:39:e5:e2:d4:f3:fc:33:e1:12:
aa:18:fb:59
-----BEGIN CERTIFICATE-----
MIIGXzCCBUegAwIBAgIUAQ0Mn0MoWEj5JphdWuMhbruzUQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjIxMTJjZTAtYzkxYy00NDllLThiYmItMTJlNDRmNWEz
ZTQxMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
MWNiYmU2M2UtZDIzMy00YmNmLTk1M2EtNTUxODAzOTlhNmZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwdJ8bj6M0v88pEYWS20bap0P/UUKc+dVCEB
g+jP1busBjdjDtb7lxWbxbjGgXD0v2Zvogs/q3Nyl9Ba+ilmo9gm2r4RriwnS2zy
lbxg2T3QxPALbHBcCNKNnMifBluZ5Y8Vjunyt1CwU2fHYmV99SssCoW4QVjNIRf3
yw4HzQgotGQo4q1fdJ+wpwkjuOkj464Q1Dw0b5FGJUirt0pO1MSM/XN1Ifzfs7qo
aym9A7Li1S+9VURbeGFFrBzfFoAC/jBkDbo85THd1cKQvpNc2mYt3FSJfjqWcARu
M834ANgzPvj53b4aTtdIvvwublZEs/O0pGYUVXKtyAS8ofe1eQIDAQABo4IDcTCC
A20wHQYDVR0OBBYEFEjepIG+fZ3eqOjFr+zAMwdMysLkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMjEx
MmNlMC1jOTFjLTQ0OWUtOGJiYi0xMmU0NGY1YTNlNDEvOGRiYzc0ZTMtNzU4Mi0z
YTE0LThiZDQtNjgzYzkyNTZkNmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjIxMTJjZTAtYzkxYy00NDllLThi
YmItMTJlNDRmNWEzZTQxLzIyMTEyY2UwLWM5MWMtNDQ5ZS04YmJiLTEyZTQ0ZjVh
M2U0MS5jcmwwHwYDVR0jBBgwFoAUQrbxv8/ixWXOZWVoHK3h4/ijp1cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yMjExMmNlMC1jOTFjLTQ0OWUtOGJiYi0xMmU0
NGY1YTNlNDEuY2VyMDsGCCsGAQUFBwEHAQH/BCwwKjAYBAIAATASAwQAF59wAwQA
F6CwAwQBF6ogMA4EAgACMAgDBgQmAv5qADBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjvMn+Ux2v6rFniR+e
kR+aHeZw6yyZyRC/FVdGs0R4lrz2fSuOZ9VoMUaeFRVEuTMnJBxtmBaMwfwxuK+Z
OQ/hVwZIU5wHHyw31Hh9mpY4mN0emDPfmoLlW8FgjjFjIkoqIocfRX3Si/U71TVw
hL0LlvvFwuaUwm1jMnaKjELYEXKv0y24viNyNjGshnNKuai0DV4+2pztBZeTV89h
wp5ey/Ebxd8tJsTlF/8o7EVgNk7BtdoAHiEM4IEJW9u4bMCmPVPTTNUhR/S642d2
O9cIMWIUCc0Ew1BEk9HggJlHIh4xK1JiG5Z6Qd1eE5RE7Oh00B455eLU8/wz4RKq
GPtZ
-----END CERTIFICATE-----
Generated at Sat Apr 12 10:14:45 2025 by rpki-client