Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/1e02ac8d-32c8-3de0-b0d8-c586025ab8b1.roa
File: 1e02ac8d-32c8-3de0-b0d8-c586025ab8b1.roa (raw, json)
Hash identifier: MnunMun42PQJ8WqatRTCnMBdCW1vpUN54F1tOBfXE2s=
Subject key identifier: DB:89:C9:BA:30:9A:51:A1:AA:A9:AA:47:19:AB:09:76:46:30:4B:73
Certificate issuer: /CN=3e886672-55f3-450f-ab6e-342c76f256db
Certificate serial: 010D0C9F432858487FB5E112B30B2A28BD243E80
Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/1e02ac8d-32c8-3de0-b0d8-c586025ab8b1.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 964
IP address blocks: 23.140.96.0/24 maxlen: 24
23.140.97.0/24 maxlen: 24
23.140.98.0/24 maxlen: 24
23.140.99.0/24 maxlen: 24
172.111.12.0/22 maxlen: 24
204.9.36.0/22 maxlen: 24
2602:fe54::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:e1:12:b3:0b:2a:28:bd:24:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=cef3ae9a-cf54-4c89-8a12-9d2b6069b8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:75:96:a2:7c:9b:d2:d5:d6:8c:c7:f8:29:70:
81:8c:f1:a6:68:78:6a:16:83:57:5d:d9:7f:00:65:
a1:e4:72:6f:a7:f2:ec:fb:c8:63:6b:e4:63:f2:40:
ca:31:14:fa:bb:32:63:07:67:df:dd:a6:c4:3b:66:
f2:16:99:66:7c:0a:01:4a:26:3c:bf:f1:10:0e:e4:
20:bf:a8:27:94:61:0b:19:84:27:f3:10:c5:d2:c6:
b2:cf:5c:38:de:4f:d4:0f:62:da:e3:07:66:5d:cc:
93:aa:de:3b:f9:0e:95:13:bb:0a:53:e0:9f:f2:e6:
e4:79:e7:a6:3c:16:4f:ee:f6:69:9a:d1:27:30:5e:
08:46:d1:0d:48:dd:e3:7c:86:4b:84:48:f1:90:8e:
8f:68:06:02:33:25:7c:4c:e9:9e:20:fb:e7:88:13:
34:a2:37:24:30:54:0a:b3:1d:71:5f:64:d5:f1:ec:
0c:9f:91:66:43:da:cf:bb:97:87:ce:f3:6b:d0:dc:
48:ff:1c:6a:f5:fb:1e:1d:96:82:fd:87:eb:04:b8:
32:a2:e7:1e:f8:16:06:60:e7:91:74:26:66:15:ab:
c5:10:48:e0:50:63:65:dc:ca:f2:ec:a4:ba:77:03:
76:7b:13:86:87:6f:66:cc:40:dd:a1:97:c4:c9:b9:
66:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:89:C9:BA:30:9A:51:A1:AA:A9:AA:47:19:AB:09:76:46:30:4B:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/1e02ac8d-32c8-3de0-b0d8-c586025ab8b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl
X509v3 Authority Key Identifier:
keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
sbgp-ipAddrBlock: critical
IPv4:
23.140.96.0/22
172.111.12.0/22
204.9.36.0/22
IPv6:
2602:fe54::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:a7:da:89:9c:3f:18:77:50:59:e9:13:87:05:05:10:fa:a0:
9a:08:5a:a5:fd:b0:f2:83:93:ef:10:e4:bc:2f:98:06:53:7d:
c0:49:89:c0:46:4b:79:5c:3a:e0:3e:15:bd:1f:77:d0:92:28:
2b:b2:95:8e:99:b9:f1:e9:52:51:4b:07:70:d8:54:0b:0e:67:
dc:2c:73:f8:e0:a7:f7:07:8f:2f:b6:37:16:0e:04:70:be:2d:
c3:a7:9e:f8:b7:8d:1e:5a:b5:11:9e:f5:dc:50:36:b6:6b:9b:
d1:06:1b:31:3a:ca:11:ef:f7:2d:98:17:93:27:d3:e1:98:cb:
14:5b:24:2e:98:a1:a3:09:d3:37:ec:9c:3c:c9:b7:da:37:86:
a1:ef:3a:7e:68:28:f7:9c:a3:fd:b0:8a:1e:fc:04:ab:d8:3f:
2c:a3:25:6a:7a:6c:7c:cc:18:29:73:4b:e3:fd:02:e8:41:32:
a4:28:30:28:48:2a:8f:d9:69:a4:24:29:7f:e2:93:89:64:c6:
fe:6e:81:fe:d4:02:38:01:fd:43:3e:b2:5f:d2:8e:d4:d7:e0:
9b:3e:2f:6c:1e:35:b7:a2:d0:54:f8:a4:70:6d:c7:56:2a:60:
38:a1:c6:0c:47:f0:30:ac:fd:62:2f:ab:1e:2c:c2:d2:02:a4:
87:56:c4:fd
-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEh/teESswsqKL0kPoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2U4ODY2NzItNTVmMy00NTBmLWFiNmUtMzQyYzc2ZjI1
NmRiMB4XDTI1MDExMDE0MDA1MVoXDTI1MDQxMDEzMDA1MVowLzEtMCsGA1UEAxMk
Y2VmM2FlOWEtY2Y1NC00Yzg5LThhMTItOWQyYjYwNjliOGYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXWWonyb0tXWjMf4KXCBjPGmaHhqFoNXXdl/
AGWh5HJvp/Ls+8hja+Rj8kDKMRT6uzJjB2ff3abEO2byFplmfAoBSiY8v/EQDuQg
v6gnlGELGYQn8xDF0sayz1w43k/UD2La4wdmXcyTqt47+Q6VE7sKU+Cf8ubkeeem
PBZP7vZpmtEnMF4IRtENSN3jfIZLhEjxkI6PaAYCMyV8TOmeIPvniBM0ojckMFQK
sx1xX2TV8ewMn5FmQ9rPu5eHzvNr0NxI/xxq9fseHZaC/YfrBLgyouce+BYGYOeR
dCZmFavFEEjgUGNl3Mry7KS6dwN2exOGh29mzEDdoZfEyblmbwIDAQABo4IDcDCC
A2wwHQYDVR0OBBYEFNuJybowmlGhqqmqRxmrCXZGMEtzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4
NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJjNzZmMjU2ZGIvMWUwMmFjOGQtMzJjOC0z
ZGUwLWIwZDgtYzU4NjAyNWFiOGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2U4ODY2NzItNTVmMy00NTBmLWFi
NmUtMzQyYzc2ZjI1NmRiLzNlODg2NjcyLTU1ZjMtNDUwZi1hYjZlLTM0MmM3NmYy
NTZkYi5jcmwwHwYDVR0jBBgwFoAUyffaYgRlgk+Ha8qShuQWCtT5MZwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJj
NzZmMjU2ZGIuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCF4xgAwQC
rG8MAwQCzAkkMA0EAgACMAcDBQAmAv5UMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAen2omcPxh3UFnpE4cF
BRD6oJoIWqX9sPKDk+8Q5LwvmAZTfcBJicBGS3lcOuA+Fb0fd9CSKCuylY6ZufHp
UlFLB3DYVAsOZ9wsc/jgp/cHjy+2NxYOBHC+LcOnnvi3jR5atRGe9dxQNrZrm9EG
GzE6yhHv9y2YF5Mn0+GYyxRbJC6YoaMJ0zfsnDzJt9o3hqHvOn5oKPeco/2wih78
BKvYPyyjJWp6bHzMGClzS+P9AuhBMqQoMChIKo/ZaaQkKX/ik4lkxv5ugf7UAjgB
/UM+sl/SjtTX4Js+L2weNbei0FT4pHBtx1YqYDihxgxH8DCs/WIvqx4swtICpIdW
xP0=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:02:19 2025 by rpki-client