Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56bdb557-2036-4c97-800e-df0149c7ae83/228c76b0-a36e-3587-8a90-4debcd6cbfad.roa
File: 228c76b0-a36e-3587-8a90-4debcd6cbfad.roa (raw, json)
Hash identifier: 4Z0jY0P9y01zojPddvYYe7lBccuvEkU8WESesEJTBqU=
Subject key identifier: BF:DC:4B:2C:4A:FC:EB:AF:1B:E9:35:9C:AF:ED:93:1C:CE:3D:E4:D0
Certificate issuer: /CN=56bdb557-2036-4c97-800e-df0149c7ae83
Certificate serial: 010D0C9F432858487325B524080D3FE8CC590C00
Authority key identifier: 72:01:C3:06:BC:B0:68:ED:43:E5:DA:2C:E6:75:E6:C9:04:3E:E8:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56bdb557-2036-4c97-800e-df0149c7ae83.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56bdb557-2036-4c97-800e-df0149c7ae83/228c76b0-a36e-3587-8a90-4debcd6cbfad.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 149513
IP address blocks: 23.177.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:b5:24:08:0d:3f:e8:cc:59:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56bdb557-2036-4c97-800e-df0149c7ae83
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=eca9cb59-adc7-4902-bbdb-2153832f0295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b8:e7:99:97:d6:fa:b2:b4:6d:f1:01:f1:05:
91:a2:2b:6d:19:7c:f8:00:93:9f:1d:92:26:46:07:
78:ac:28:96:33:19:1c:8a:24:72:05:a9:7c:f2:c3:
c0:6f:23:88:ff:0a:ad:01:a1:34:9b:26:d8:73:ca:
46:74:f8:c0:5b:0a:53:4e:58:e4:b1:56:3e:7c:c7:
2d:b8:d8:24:e9:38:52:82:7c:91:af:dc:59:c4:b1:
50:54:bf:6a:ed:45:38:c4:e5:21:f7:e1:06:ee:e3:
50:9f:7d:78:e3:3f:ef:d2:66:7c:e7:6a:2d:22:41:
31:59:91:f7:fb:3c:28:7c:ea:68:29:b0:13:fe:7b:
67:da:5f:46:52:15:c1:cc:f0:80:4d:90:63:54:99:
7a:fb:59:02:50:e0:17:5d:ef:b8:9f:d9:15:e0:26:
e1:4d:73:7e:c4:3f:3d:a3:bf:af:2a:f0:35:ad:67:
7d:02:19:1a:d5:43:29:a7:dd:d0:2f:81:d5:d7:e0:
04:60:13:09:80:bb:a0:7a:eb:cf:57:44:39:4a:a0:
8b:21:d8:d4:7d:d3:94:21:cc:86:4b:93:aa:a9:ca:
86:10:e3:ba:2a:7d:e5:90:da:eb:16:3e:ab:19:d0:
63:0c:cd:96:f1:a3:05:00:25:9b:ea:c0:36:2a:4c:
cc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DC:4B:2C:4A:FC:EB:AF:1B:E9:35:9C:AF:ED:93:1C:CE:3D:E4:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56bdb557-2036-4c97-800e-df0149c7ae83/228c76b0-a36e-3587-8a90-4debcd6cbfad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56bdb557-2036-4c97-800e-df0149c7ae83/56bdb557-2036-4c97-800e-df0149c7ae83.crl
X509v3 Authority Key Identifier:
keyid:72:01:C3:06:BC:B0:68:ED:43:E5:DA:2C:E6:75:E6:C9:04:3E:E8:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56bdb557-2036-4c97-800e-df0149c7ae83.cer
sbgp-ipAddrBlock: critical
IPv4:
23.177.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:b7:fe:04:5a:06:d8:ad:d0:ed:59:cd:83:1e:76:ec:52:f7:
1e:a0:54:44:05:24:e7:5f:2d:71:03:d6:6b:09:df:dc:ba:c4:
f1:04:b4:49:68:d7:f2:c3:45:ce:3b:8a:22:75:c7:4b:bc:06:
96:67:ce:b2:35:0d:bb:0f:ee:88:25:b7:54:a0:84:3a:26:92:
c3:55:58:bd:6e:9e:ed:d7:df:23:3a:e6:da:b2:00:01:8b:63:
8b:74:5c:4a:1a:d5:f7:2c:2e:d2:8e:f2:a8:9e:fe:9e:18:c1:
7d:bc:eb:0d:28:79:41:9c:6f:8d:27:a7:e9:73:7f:a1:a0:2a:
84:00:56:07:f2:78:48:3d:a1:0a:07:5b:18:cd:32:20:15:af:
03:cf:ae:63:58:a2:cf:77:49:1a:bf:59:a0:ad:ba:84:a5:64:
1b:bf:bf:49:cc:5c:b5:36:10:b3:c2:25:55:6b:0e:88:33:f7:
d5:da:30:37:20:ec:d7:a6:8e:c1:14:c5:78:26:1d:6a:e7:57:
1a:57:24:c3:46:87:74:ef:a3:15:6f:08:4a:af:36:d7:66:1d:
70:69:77:02:6a:84:85:b1:7c:93:68:91:84:a4:c8:18:ee:57:
b6:88:d8:00:47:aa:2e:c4:24:6f:cd:ff:83:6c:a4:37:6e:4e:
2a:6e:8f:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhzJbUkCA0/6MxZDAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTZiZGI1NTctMjAzNi00Yzk3LTgwMGUtZGYwMTQ5Yzdh
ZTgzMB4XDTI1MDEwNjAyMDA0MFoXDTI1MDQwNjAxMDA0MFowLzEtMCsGA1UEAxMk
ZWNhOWNiNTktYWRjNy00OTAyLWJiZGItMjE1MzgzMmYwMjk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLjnmZfW+rK0bfEB8QWRoittGXz4AJOfHZIm
Rgd4rCiWMxkciiRyBal88sPAbyOI/wqtAaE0mybYc8pGdPjAWwpTTljksVY+fMct
uNgk6ThSgnyRr9xZxLFQVL9q7UU4xOUh9+EG7uNQn3144z/v0mZ852otIkExWZH3
+zwofOpoKbAT/ntn2l9GUhXBzPCATZBjVJl6+1kCUOAXXe+4n9kV4CbhTXN+xD89
o7+vKvA1rWd9Ahka1UMpp93QL4HV1+AEYBMJgLugeuvPV0Q5SqCLIdjUfdOUIcyG
S5OqqcqGEOO6Kn3lkNrrFj6rGdBjDM2W8aMFACWb6sA2KkzMjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL/cSyxK/OuvG+k1nK/tkxzOPeTQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81NmJk
YjU1Ny0yMDM2LTRjOTctODAwZS1kZjAxNDljN2FlODMvMjI4Yzc2YjAtYTM2ZS0z
NTg3LThhOTAtNGRlYmNkNmNiZmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTZiZGI1NTctMjAzNi00Yzk3LTgw
MGUtZGYwMTQ5YzdhZTgzLzU2YmRiNTU3LTIwMzYtNGM5Ny04MDBlLWRmMDE0OWM3
YWU4My5jcmwwHwYDVR0jBBgwFoAUcgHDBrywaO1D5dos5nXmyQQ+6EEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81NmJkYjU1Ny0yMDM2LTRjOTctODAwZS1kZjAx
NDljN2FlODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7F4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACC3/gRaBtit0O1ZzYMeduxS9x6gVEQFJOdfLXED1msJ39y6xPEEtElo
1/LDRc47iiJ1x0u8BpZnzrI1DbsP7oglt1SghDomksNVWL1unu3X3yM65tqyAAGL
Y4t0XEoa1fcsLtKO8qie/p4YwX286w0oeUGcb40np+lzf6GgKoQAVgfyeEg9oQoH
WxjNMiAVrwPPrmNYos93SRq/WaCtuoSlZBu/v0nMXLU2ELPCJVVrDogz99XaMDcg
7NemjsEUxXgmHWrnVxpXJMNGh3TvoxVvCEqvNtdmHXBpdwJqhIWxfJNokYSkyBju
V7aI2ABHqi7EJG/N/4NspDduTipuj2w=
-----END CERTIFICATE-----
Generated at Sun Apr 27 03:30:47 2025 by rpki-client