Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/843cf6ab-c96b-3e76-be87-2bea83664ff9.roa
File: 843cf6ab-c96b-3e76-be87-2bea83664ff9.roa (raw, json)
Hash identifier: d9/qoDtjr5wlS4IlNk9YzrIKmqvwORWKZFx58lbRy70=
Subject key identifier: 03:60:99:5B:78:49:0A:CF:F8:95:F9:D6:15:4F:30:14:F9:19:CB:EE
Certificate issuer: /CN=2d448124-6e45-40ca-b551-28ef364c99c7
Certificate serial: 010D0C9F432858484D758E8FE9CD581FB2DA2B80
Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/843cf6ab-c96b-3e76-be87-2bea83664ff9.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 397994
IP address blocks: 23.136.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:8e:8f:e9:cd:58:1f:b2:da:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=a37c81b9-bf5d-4876-ba34-00b4c2f8e28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:37:19:3d:6f:0f:c6:99:26:9d:be:a6:6c:d4:
02:17:f1:79:34:41:d8:1f:16:01:c7:a8:04:ad:6d:
86:cf:47:80:cb:8d:86:58:b7:41:2b:f7:a6:22:33:
6f:bb:47:94:43:38:2d:49:a8:02:f4:31:00:4b:49:
ce:68:7c:79:b4:88:bc:aa:31:f3:c0:1a:03:96:26:
8e:61:3b:54:ac:df:f3:4b:12:da:03:40:dd:75:92:
29:60:7c:aa:81:48:65:b5:42:c8:81:db:2a:bc:a2:
d6:51:8d:2c:67:ab:0e:f0:8f:7f:b7:ed:4a:01:ee:
81:3e:59:f4:b6:be:5d:bf:b2:24:4b:53:34:96:fd:
e5:72:fa:5c:cd:12:30:35:37:c4:25:e6:33:18:cc:
31:5e:b0:6f:0a:03:09:95:63:e4:3c:9c:05:82:8e:
a2:dc:11:c5:af:73:cd:cb:3b:39:c4:2e:79:cf:57:
1f:8a:fa:60:53:4c:66:c2:a6:30:32:c3:b4:33:cb:
14:9b:4f:13:62:4d:8d:b0:0f:19:f1:d6:40:55:67:
70:b6:2e:aa:02:55:4e:b9:64:9b:f8:81:be:69:c0:
9a:be:ed:b2:8b:88:71:92:e3:dc:87:18:a2:b0:2e:
29:32:59:33:66:07:b5:35:fd:75:17:16:6f:6b:67:
0a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:60:99:5B:78:49:0A:CF:F8:95:F9:D6:15:4F:30:14:F9:19:CB:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/843cf6ab-c96b-3e76-be87-2bea83664ff9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
X509v3 Authority Key Identifier:
keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
sbgp-ipAddrBlock: critical
IPv4:
23.136.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:4f:45:49:8c:2d:51:c8:07:a2:87:55:46:12:ec:7b:c0:c2:
01:23:1d:92:8f:99:08:ae:81:c3:50:e8:dc:5e:ca:d0:75:d5:
34:6b:81:33:d6:7b:07:f5:72:03:3c:a9:e6:fe:dd:5f:13:6e:
4b:a2:31:ea:34:b9:67:fd:e8:89:d9:98:b0:5d:d7:11:c6:cb:
f2:81:0e:8b:30:47:e4:14:fc:0f:98:33:d7:25:c5:f4:e6:4c:
1b:6e:b3:fe:c1:89:97:31:f2:0f:49:be:af:2f:0a:60:cb:25:
17:5b:42:d4:01:1d:cd:88:cb:e4:3a:b1:cf:b0:ad:9c:9f:90:
34:ec:66:e7:c7:2c:2c:04:bc:9f:b5:42:fd:08:7c:86:fe:61:
b4:fb:66:9d:d2:4f:ef:03:d7:e9:70:f0:81:71:78:1e:ba:ac:
9e:db:c5:8a:d9:5a:5d:c1:ce:bc:f1:e4:9d:dd:b9:cd:eb:53:
6a:76:37:38:16:c6:c5:8b:c8:bb:9d:64:a0:f3:5d:50:25:ba:
f4:9d:4e:42:0d:59:6b:4d:92:68:13:00:08:ac:07:bc:c1:6f:
e9:6c:a7:ee:05:e7:e9:5b:e5:09:a7:e7:71:85:66:97:b4:92:
38:c5:a5:46:62:1c:4a:f0:10:99:fb:d2:16:c5:87:68:3e:82:
25:d4:90:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhNdY6P6c1YH7LaK4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmQ0NDgxMjQtNmU0NS00MGNhLWI1NTEtMjhlZjM2NGM5
OWM3MB4XDTI0MTIyMzE0MDA1MVoXDTI1MDMyMzEzMDA1MVowLzEtMCsGA1UEAxMk
YTM3YzgxYjktYmY1ZC00ODc2LWJhMzQtMDBiNGMyZjhlMjhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzcZPW8Pxpkmnb6mbNQCF/F5NEHYHxYBx6gE
rW2Gz0eAy42GWLdBK/emIjNvu0eUQzgtSagC9DEAS0nOaHx5tIi8qjHzwBoDliaO
YTtUrN/zSxLaA0DddZIpYHyqgUhltULIgdsqvKLWUY0sZ6sO8I9/t+1KAe6BPln0
tr5dv7IkS1M0lv3lcvpczRIwNTfEJeYzGMwxXrBvCgMJlWPkPJwFgo6i3BHFr3PN
yzs5xC55z1cfivpgU0xmwqYwMsO0M8sUm08TYk2NsA8Z8dZAVWdwti6qAlVOuWSb
+IG+acCavu2yi4hxkuPchxiisC4pMlkzZge1Nf11FxZva2cKDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFANgmVt4SQrP+JX51hVPMBT5GcvuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0
ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVmMzY0Yzk5YzcvODQzY2Y2YWItYzk2Yi0z
ZTc2LWJlODctMmJlYTgzNjY0ZmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmQ0NDgxMjQtNmU0NS00MGNhLWI1
NTEtMjhlZjM2NGM5OWM3LzJkNDQ4MTI0LTZlNDUtNDBjYS1iNTUxLTI4ZWYzNjRj
OTljNy5jcmwwHwYDVR0jBBgwFoAUJX0bU4WU/K2RPsORNHt3eV5Y9aYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVm
MzY0Yzk5YzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4gIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEFPRUmMLVHIB6KHVUYS7HvAwgEjHZKPmQiugcNQ6NxeytB11TRrgTPW
ewf1cgM8qeb+3V8TbkuiMeo0uWf96InZmLBd1xHGy/KBDoswR+QU/A+YM9clxfTm
TBtus/7BiZcx8g9Jvq8vCmDLJRdbQtQBHc2Iy+Q6sc+wrZyfkDTsZufHLCwEvJ+1
Qv0IfIb+YbT7Zp3ST+8D1+lw8IFxeB66rJ7bxYrZWl3Bzrzx5J3duc3rU2p2NzgW
xsWLyLudZKDzXVAluvSdTkINWWtNkmgTAAisB7zBb+lsp+4F5+lb5Qmn53GFZpe0
kjjFpUZiHErwEJn70hbFh2g+giXUkLo=
-----END CERTIFICATE-----
Generated at Sun May 11 23:58:54 2025 by rpki-client