Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/cea164f1-b74b-3570-ba6a-93e8271df569.roa
File: cea164f1-b74b-3570-ba6a-93e8271df569.roa (raw, json)
Hash identifier: sFKfk0P7hWwd/SxXBldmU3dcMymKPhLS8bj16PBIOFE=
Subject key identifier: 62:FC:D2:F0:FC:D9:0E:18:95:42:BB:28:39:E6:A0:11:77:2F:90:3D
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F432858486D905ED5F933B1CA22D2D740
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/cea164f1-b74b-3570-ba6a-93e8271df569.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 11232
IP address blocks: 165.23.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:5e:d5:f9:33:b1:ca:22:d2:d7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=7ceea421-c1d0-4ac2-a712-0a55fcab1cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5b:01:36:e4:34:5c:b6:75:cd:0d:cd:b5:9c:
27:47:90:a3:fa:88:f1:ca:46:a8:a7:fa:d8:62:55:
e6:75:54:5c:d9:1f:c1:44:61:af:5f:36:4d:d0:54:
2b:6d:7f:c8:3c:61:25:7d:e0:55:53:91:5c:b7:9b:
a3:8f:bf:be:6e:1d:a2:78:1a:7c:12:0e:ce:09:97:
25:e5:27:68:92:0c:00:60:a4:22:2f:6e:9b:d6:90:
a2:bb:f7:29:69:b9:36:53:dc:f0:fb:d6:05:ca:dc:
bc:d0:6d:e8:95:06:1b:f8:d6:3e:3c:d9:5c:0d:d0:
0c:29:13:52:4a:b5:3c:b7:ff:89:ad:70:ff:69:fa:
5c:cb:94:c0:ee:1a:8e:fc:05:ba:01:08:dd:d2:9e:
5e:c9:1a:f2:fe:32:04:4d:f2:01:7d:a2:0b:18:9e:
61:a4:06:12:a8:f9:4b:5f:c4:94:a0:6a:21:38:02:
be:be:6f:36:0e:60:9e:cb:7a:ce:1f:60:90:ef:23:
44:3b:bb:e7:c8:c3:22:30:ef:9e:45:0a:d4:b6:1c:
8c:e1:66:1f:aa:5c:5d:3a:28:2c:d5:49:46:91:c4:
6f:45:e6:81:80:de:dc:e8:b5:82:df:9d:2a:2b:c4:
f3:66:e5:25:0b:7b:e7:cf:b3:5f:1f:e3:d1:ea:eb:
1e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FC:D2:F0:FC:D9:0E:18:95:42:BB:28:39:E6:A0:11:77:2F:90:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/cea164f1-b74b-3570-ba6a-93e8271df569.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
165.23.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:2b:e6:74:a3:da:0b:19:13:89:89:16:60:f9:42:20:86:90:
94:97:4a:19:45:cb:3b:5f:4f:f9:12:90:df:03:85:8a:0f:44:
bc:05:5d:25:ec:95:e4:cd:3d:67:ee:f1:bb:cb:95:96:41:83:
6a:8a:99:90:f1:32:31:ac:f8:60:76:63:f1:4d:76:a7:b4:8b:
14:38:87:75:67:b5:d9:9f:e8:2f:ff:5b:42:84:da:a3:e5:85:
75:bb:c1:f5:7d:e1:24:4b:f7:8d:50:3e:53:de:b9:d2:75:ab:
21:cc:28:21:20:23:d3:56:d8:21:60:4e:da:48:a5:ee:7d:54:
e8:7b:05:1a:f6:95:f2:b0:b2:50:bc:46:0b:19:fd:6d:34:36:
18:7f:d9:d8:3f:bd:2b:75:bc:75:02:5d:aa:d0:12:17:a5:4a:
e4:a0:6a:9b:61:3f:9f:68:0d:74:7c:a2:a8:dc:f6:96:be:9b:
96:55:b5:6a:cb:7c:97:e5:ea:0d:bd:d1:e0:c0:d6:64:25:bf:
ca:a7:00:2c:29:70:8f:bd:35:05:00:e1:c0:31:a6:9e:2c:de:
bb:57:25:d4:ea:c8:30:cb:e6:fb:05:87:7a:64:28:be:d6:9d:
08:3a:56:f2:9d:ad:a5:34:81:67:e4:6d:1e:aa:11:e8:14:aa:
19:c6:c5:be
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEhtkF7V+TOxyiLS10AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3
MDg1MB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk
N2NlZWE0MjEtYzFkMC00YWMyLWE3MTItMGE1NWZjYWIxY2JiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlsBNuQ0XLZ1zQ3NtZwnR5Cj+ojxykaop/rY
YlXmdVRc2R/BRGGvXzZN0FQrbX/IPGElfeBVU5Fct5ujj7++bh2ieBp8Eg7OCZcl
5SdokgwAYKQiL26b1pCiu/cpabk2U9zw+9YFyty80G3olQYb+NY+PNlcDdAMKRNS
SrU8t/+JrXD/afpcy5TA7hqO/AW6AQjd0p5eyRry/jIETfIBfaILGJ5hpAYSqPlL
X8SUoGohOAK+vm82DmCey3rOH2CQ7yNEO7vnyMMiMO+eRQrUthyM4WYfqlxdOigs
1UlGkcRvReaBgN7c6LWC350qK8TzZuUlC3vnz7NfH+PR6use/QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGL80vD82Q4YlUK7KDnmoBF3L5A9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2
M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvY2VhMTY0ZjEtYjc0Yi0z
NTcwLWJhNmEtOTNlODI3MWRmNTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm
YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3
NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2
NDNhNzcwODUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApRcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAgivmdKPaCxkTiYkWYPlCIIaQlJdKGUXLO19P+RKQ3wOFig9EvAVdJeyV
5M09Z+7xu8uVlkGDaoqZkPEyMaz4YHZj8U12p7SLFDiHdWe12Z/oL/9bQoTao+WF
dbvB9X3hJEv3jVA+U9650nWrIcwoISAj01bYIWBO2kil7n1U6HsFGvaV8rCyULxG
Cxn9bTQ2GH/Z2D+9K3W8dQJdqtASF6VK5KBqm2E/n2gNdHyiqNz2lr6bllW1ast8
l+XqDb3R4MDWZCW/yqcALClwj701BQDhwDGmnizeu1cl1OrIMMvm+wWHemQovtad
CDpW8p2tpTSBZ+RtHqoR6BSqGcbFvg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:53:31 2025 by rpki-client