Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba/4b41e20f-4681-3b72-b8c6-62058d29fffa.roa
File: 4b41e20f-4681-3b72-b8c6-62058d29fffa.roa (raw, json)
Hash identifier: ugyl3Qn+j3WYntg+JyZtlDv3BF2HKhD9TQgYQnnPFVE=
Subject key identifier: 93:66:2D:B3:CC:69:CB:93:3E:5D:CA:45:57:65:41:E7:96:9C:10:20
Certificate issuer: /CN=d30c475d-8944-47ed-ba1d-63ff537595ba
Certificate serial: 010D0C9F432858489340AE3EE42487DBAEA8C180
Authority key identifier: 4A:44:7A:35:AC:B8:5B:C6:35:98:E0:D3:A7:A1:14:C8:1A:DA:08:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba/4b41e20f-4681-3b72-b8c6-62058d29fffa.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 32872
IP address blocks: 23.157.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:ae:3e:e4:24:87:db:ae:a8:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d30c475d-8944-47ed-ba1d-63ff537595ba
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=9c072567-5433-4b5d-b6ed-bbde2385781e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e7:ef:ba:1f:b7:ad:a8:26:48:3d:2d:b8:89:
b2:4c:88:dc:39:e7:b2:17:9d:46:16:7f:e1:6a:66:
3b:e5:c6:72:05:7d:c5:79:07:71:a4:95:b5:18:a8:
72:aa:ae:59:56:41:2e:24:74:10:f9:38:b8:ab:31:
3f:3f:7b:87:11:e2:ca:ec:c5:bf:42:09:e9:67:84:
3a:b0:65:6c:60:bf:08:64:a3:79:e7:a8:8c:e3:75:
ea:a3:ec:f5:50:48:db:5c:f9:c2:92:b7:d5:33:24:
e2:9c:e7:d4:58:23:ca:09:4d:d1:ec:0c:05:3f:2e:
ea:97:d3:73:67:7c:3a:7a:b0:b6:76:97:c5:5f:32:
7c:bf:be:65:85:8c:d0:78:41:07:e1:1d:53:b3:57:
a9:8d:38:9a:81:c9:09:0e:34:20:b3:14:a9:6a:16:
0c:bb:cb:b0:fc:d8:f7:b9:48:a6:20:22:4e:22:be:
cc:d3:15:6c:6e:0e:39:55:3d:11:7d:34:17:6d:1d:
67:43:5d:93:c1:bc:54:c3:5b:bb:53:13:13:fb:f1:
9a:87:ee:be:4e:a6:18:4f:e9:9e:6e:8e:6d:0d:72:
43:85:b0:53:d8:e1:b3:25:0f:e9:27:be:89:e3:86:
5d:ea:50:69:06:e3:ce:ee:8a:11:ea:e9:82:5a:7f:
3f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:66:2D:B3:CC:69:CB:93:3E:5D:CA:45:57:65:41:E7:96:9C:10:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba/4b41e20f-4681-3b72-b8c6-62058d29fffa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba/d30c475d-8944-47ed-ba1d-63ff537595ba.crl
X509v3 Authority Key Identifier:
keyid:4A:44:7A:35:AC:B8:5B:C6:35:98:E0:D3:A7:A1:14:C8:1A:DA:08:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba.cer
sbgp-ipAddrBlock: critical
IPv4:
23.157.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:e7:79:bc:8c:e9:ab:19:ba:9b:18:e6:96:69:08:5d:2b:69:
c4:c0:17:a2:ce:e5:36:22:52:05:d9:ba:c4:dc:08:cc:a0:8d:
dc:2f:0b:a1:66:d3:89:b0:f7:8f:b3:17:7d:f8:55:60:6b:a0:
2a:2c:49:92:9d:9e:15:49:1f:be:48:4e:aa:d1:92:ae:0f:40:
ba:c2:ee:92:86:11:90:48:d9:9f:67:ec:e5:cf:5d:c4:65:bd:
22:9c:0d:69:3f:70:06:3b:50:15:ca:e8:83:8c:d4:65:fc:9c:
33:d0:fc:7f:d8:06:7e:d0:d9:33:e6:93:e1:07:8f:27:1b:89:
c3:7a:df:3b:d5:16:9f:16:06:3e:0b:c0:f4:4a:6c:a4:1c:86:
27:d6:17:c4:84:3c:c2:ab:cb:8e:41:e5:db:1f:0b:e9:4f:f6:
5b:45:3d:b0:8b:13:18:5a:a1:16:b1:cf:ba:30:b3:27:7e:8a:
f3:4c:bc:6c:d5:a5:1c:9b:2f:8f:8e:9b:58:64:ec:07:9c:2d:
e1:18:66:09:d6:63:57:fb:6f:7e:69:b3:39:ee:5b:35:bf:92:
8c:86:86:f2:1d:d3:2b:1d:4e:9d:0c:79:17:d9:76:4c:a9:c4:
23:8f:3a:4b:84:e0:ea:25:7f:e8:80:26:b7:65:da:70:c9:47:
88:e5:a6:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQK4+5CSH266owYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDMwYzQ3NWQtODk0NC00N2VkLWJhMWQtNjNmZjUzNzU5
NWJhMB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk
OWMwNzI1NjctNTQzMy00YjVkLWI2ZWQtYmJkZTIzODU3ODFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyefvuh+3ragmSD0tuImyTIjcOeeyF51GFn/h
amY75cZyBX3FeQdxpJW1GKhyqq5ZVkEuJHQQ+Ti4qzE/P3uHEeLK7MW/QgnpZ4Q6
sGVsYL8IZKN556iM43Xqo+z1UEjbXPnCkrfVMyTinOfUWCPKCU3R7AwFPy7ql9Nz
Z3w6erC2dpfFXzJ8v75lhYzQeEEH4R1Ts1epjTiagckJDjQgsxSpahYMu8uw/Nj3
uUimICJOIr7M0xVsbg45VT0RfTQXbR1nQ12TwbxUw1u7UxMT+/Gah+6+TqYYT+me
bo5tDXJDhbBT2OGzJQ/pJ76J44Zd6lBpBuPO7ooR6umCWn8/xQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJNmLbPMacuTPl3KRVdlQeeWnBAgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMzBj
NDc1ZC04OTQ0LTQ3ZWQtYmExZC02M2ZmNTM3NTk1YmEvNGI0MWUyMGYtNDY4MS0z
YjcyLWI4YzYtNjIwNThkMjlmZmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDMwYzQ3NWQtODk0NC00N2VkLWJh
MWQtNjNmZjUzNzU5NWJhL2QzMGM0NzVkLTg5NDQtNDdlZC1iYTFkLTYzZmY1Mzc1
OTViYS5jcmwwHwYDVR0jBBgwFoAUSkR6Nay4W8Y1mODTp6EUyBraCCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMzBjNDc1ZC04OTQ0LTQ3ZWQtYmExZC02M2Zm
NTM3NTk1YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF514MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACnnebyM6asZupsY5pZpCF0racTAF6LO5TYiUgXZusTcCMygjdwvC6Fm
04mw94+zF334VWBroCosSZKdnhVJH75ITqrRkq4PQLrC7pKGEZBI2Z9n7OXPXcRl
vSKcDWk/cAY7UBXK6IOM1GX8nDPQ/H/YBn7Q2TPmk+EHjycbicN63zvVFp8WBj4L
wPRKbKQchifWF8SEPMKry45B5dsfC+lP9ltFPbCLExhaoRaxz7owsyd+ivNMvGzV
pRybL4+Om1hk7AecLeEYZgnWY1f7b35psznuWzW/koyGhvId0ysdTp0MeRfZdkyp
xCOPOkuE4Oolf+iAJrdl2nDJR4jlpiY=
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:30:40 2025 by rpki-client