Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a/19a3d378-08f4-3987-94a8-a0680096b19f.roa
File: 19a3d378-08f4-3987-94a8-a0680096b19f.roa (raw, json)
Hash identifier: rAduPJbwqjWZdShLqxo8tw88q+0vRyanERMfBWPZias=
Subject key identifier: 3B:FD:76:96:8F:1B:FC:24:82:74:09:58:C4:E8:92:E9:37:3D:99:22
Certificate issuer: /CN=fe38e0f9-f100-419a-915a-3e2451a50c5a
Certificate serial: 010D0C9F4328584949FE81F0DB9C0FCF4B75A760
Authority key identifier: 2B:B7:9F:5F:1E:21:45:E5:DF:E7:98:93:53:3E:A2:62:42:2D:16:A6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a/19a3d378-08f4-3987-94a8-a0680096b19f.roa
Signing time: Mon 24 Mar 2025 01:00:38 +0000
ROA not before: Mon 24 Mar 2025 01:00:38 +0000
ROA not after: Sun 22 Jun 2025 01:00:38 +0000
asID: 16635
IP address blocks: 23.149.16.0/24 maxlen: 24
104.250.232.0/22 maxlen: 24
2602:803:4000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:49:fe:81:f0:db:9c:0f:cf:4b:75:a7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe38e0f9-f100-419a-915a-3e2451a50c5a
Validity
Not Before: Mar 24 01:00:38 2025 GMT
Not After : Jun 22 01:00:38 2025 GMT
Subject: CN=601b17e9-ab0d-45c6-852d-25a0db84fc3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:95:d6:7d:b3:51:fe:02:57:5a:8f:18:b8:b1:
d3:ae:21:b5:9c:77:d6:f4:c4:40:f6:38:07:01:01:
44:80:cc:68:7f:e8:bf:87:ab:28:e1:6e:f0:e8:99:
de:87:06:90:2e:73:70:4c:20:f9:0e:27:b1:26:ea:
df:15:5c:4d:a6:a3:db:d6:fc:e0:13:38:56:2f:7b:
ee:52:b9:58:05:eb:27:05:11:4c:64:c3:46:a5:97:
92:bd:d4:e2:7b:f2:5e:da:6b:cb:0d:e0:3e:09:b0:
ed:24:47:1f:01:b3:24:c1:8a:48:75:f0:08:5b:9a:
8a:99:a6:4f:c0:94:62:6d:fe:c1:ed:78:18:93:d0:
82:12:39:1f:a0:87:13:12:2a:67:ac:9f:3a:ca:24:
ae:eb:81:0d:a2:7d:51:f5:dc:95:58:43:50:ce:5a:
60:d3:12:25:a9:7c:12:f5:c9:ba:95:f2:f8:d4:58:
b4:7a:3c:94:6e:b1:e5:ea:ef:29:e2:cf:8b:db:13:
8c:4f:2a:d2:4e:1e:6a:aa:2d:97:e0:2c:2c:fd:2f:
dc:48:ff:5b:4f:bb:24:f9:a3:63:e6:30:1a:85:9c:
5e:6a:be:11:d8:27:ac:50:86:1b:ca:c0:09:2d:74:
43:08:c0:e4:bf:c9:3b:45:ae:4a:4c:3d:df:9d:8f:
bb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FD:76:96:8F:1B:FC:24:82:74:09:58:C4:E8:92:E9:37:3D:99:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a/19a3d378-08f4-3987-94a8-a0680096b19f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a/fe38e0f9-f100-419a-915a-3e2451a50c5a.crl
X509v3 Authority Key Identifier:
keyid:2B:B7:9F:5F:1E:21:45:E5:DF:E7:98:93:53:3E:A2:62:42:2D:16:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.149.16.0/24
104.250.232.0/22
IPv6:
2602:803:4000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:56:34:5d:ef:b6:70:b0:b8:a6:9e:57:64:ee:50:e8:b6:59:
d7:4b:d5:4a:3c:5f:a2:0e:a3:9f:a6:50:0e:4f:04:93:02:11:
39:1d:c6:58:74:45:fa:48:cf:81:53:bc:48:73:82:20:68:43:
61:3e:aa:dd:ad:eb:9b:5a:52:38:61:b0:62:f5:58:fa:c2:42:
bb:77:55:1d:db:34:a5:43:ad:8f:f2:2d:6a:81:89:bf:8a:db:
84:48:93:06:18:58:76:46:d8:f3:56:f9:c7:1b:05:8c:c5:33:
c1:c1:55:aa:b7:15:0c:8c:29:8b:00:43:05:9f:6b:59:44:40:
b3:ad:2f:d9:38:bf:70:ef:d7:69:15:15:46:f3:f7:b6:e3:62:
44:88:ac:53:ff:6b:12:a3:5d:96:1d:b2:cb:dd:65:52:49:6a:
20:b3:55:8f:7a:d0:08:5c:22:36:0e:22:e7:85:c2:44:49:70:
33:24:dd:60:b8:da:58:ef:db:c7:a7:95:05:43:0a:79:17:b3:
63:e5:c8:0a:82:f1:b6:d3:0f:11:5c:c6:dc:b8:78:2e:68:d1:
7a:6b:95:1b:9c:3a:fb:49:3a:8e:cc:58:ca:58:86:76:d5:eb:
21:31:9a:1f:fb:0b:c0:da:26:f9:fe:e9:e5:5b:74:1a:2d:83:
3d:0d:bc:29
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWElJ/oHw25wPz0t1p2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmUzOGUwZjktZjEwMC00MTlhLTkxNWEtM2UyNDUxYTUw
YzVhMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk
NjAxYjE3ZTktYWIwZC00NWM2LTg1MmQtMjVhMGRiODRmYzNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZXWfbNR/gJXWo8YuLHTriG1nHfW9MRA9jgH
AQFEgMxof+i/h6so4W7w6JnehwaQLnNwTCD5DiexJurfFVxNpqPb1vzgEzhWL3vu
UrlYBesnBRFMZMNGpZeSvdTie/Je2mvLDeA+CbDtJEcfAbMkwYpIdfAIW5qKmaZP
wJRibf7B7XgYk9CCEjkfoIcTEipnrJ86yiSu64ENon1R9dyVWENQzlpg0xIlqXwS
9cm6lfL41Fi0ejyUbrHl6u8p4s+L2xOMTyrSTh5qqi2X4Cws/S/cSP9bT7sk+aNj
5jAahZxear4R2CesUIYbysAJLXRDCMDkv8k7Ra5KTD3fnY+7vQIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFDv9dpaPG/wkgnQJWMTokuk3PZkiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mZTM4
ZTBmOS1mMTAwLTQxOWEtOTE1YS0zZTI0NTFhNTBjNWEvMTlhM2QzNzgtMDhmNC0z
OTg3LTk0YTgtYTA2ODAwOTZiMTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmUzOGUwZjktZjEwMC00MTlhLTkx
NWEtM2UyNDUxYTUwYzVhL2ZlMzhlMGY5LWYxMDAtNDE5YS05MTVhLTNlMjQ1MWE1
MGM1YS5jcmwwHwYDVR0jBBgwFoAUK7efXx4hReXf55iTUz6iYkItFqYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mZTM4ZTBmOS1mMTAwLTQxOWEtOTE1YS0zZTI0
NTFhNTBjNWEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF5UQAwQC
aProMA4EAgACMAgDBgAmAggDQDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCbVjRd77ZwsLimnldk7lDotlnX
S9VKPF+iDqOfplAOTwSTAhE5HcZYdEX6SM+BU7xIc4IgaENhPqrdreubWlI4YbBi
9Vj6wkK7d1Ud2zSlQ62P8i1qgYm/ituESJMGGFh2RtjzVvnHGwWMxTPBwVWqtxUM
jCmLAEMFn2tZRECzrS/ZOL9w79dpFRVG8/e242JEiKxT/2sSo12WHbLL3WVSSWog
s1WPetAIXCI2DiLnhcJESXAzJN1guNpY79vHp5UFQwp5F7Nj5cgKgvG20w8RXMbc
uHguaNF6a5UbnDr7STqOzFjKWIZ21eshMZof+wvA2ib5/unlW3QaLYM9Dbwp
-----END CERTIFICATE-----
Generated at Sat Apr 12 09:29:13 2025 by rpki-client