Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987/4b08360c-1313-3bbb-a1c8-d6e7251e2ed2.roa
File: 4b08360c-1313-3bbb-a1c8-d6e7251e2ed2.roa (raw, json)
Hash identifier: Vh8bCP/PEOkl6F7bMW0dGtbiGwBW533Oelrm2twgAVA=
Subject key identifier: 3E:91:D7:72:B1:D4:0B:99:44:AA:A7:0A:9B:AE:C1:81:32:3B:6E:BE
Certificate issuer: /CN=b511cf32-0933-4308-8981-9c296fc06987
Certificate serial: 010D0C9F432858487755DD387217A8276C7F6740
Authority key identifier: B7:63:09:26:C1:4A:FB:97:17:CC:67:FB:FB:6B:C0:FE:A5:E1:52:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987/4b08360c-1313-3bbb-a1c8-d6e7251e2ed2.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 32995
IP address blocks: 23.137.160.0/24 maxlen: 24
2620:4d:a000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:dd:38:72:17:a8:27:6c:7f:67:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b511cf32-0933-4308-8981-9c296fc06987
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=c4074012-c962-4f4e-bb46-abff88bb1e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:3b:40:7a:25:b8:88:f3:d0:5d:3c:a9:9f:
ce:f6:cf:8f:85:83:bb:cd:6d:1e:0a:4a:b6:cd:03:
4f:99:48:7c:43:82:ca:00:1e:81:ca:86:c4:2a:17:
b8:ed:70:86:f6:62:0e:c3:0c:97:fb:d0:7b:0c:8e:
9f:53:53:b7:82:86:77:77:fa:42:0a:a3:f7:23:97:
51:cb:ad:94:d6:86:27:62:35:87:b4:c0:8b:67:6b:
a0:1c:d0:65:2d:72:11:73:bf:59:7b:3e:34:3e:25:
f3:b0:51:79:c8:3e:11:f1:64:36:f2:63:1e:fc:83:
2c:7b:07:50:52:60:69:ae:9d:4c:7e:41:ae:80:f7:
0a:0c:6b:4d:15:d1:80:74:13:b2:54:76:8b:7e:54:
b7:4b:b6:d4:86:20:56:59:33:fb:46:10:4e:e8:80:
ff:06:07:b3:41:7e:e9:fb:90:8f:b1:6e:50:d6:87:
ad:c1:ea:ed:ac:6d:33:3f:8a:4b:1a:81:5b:bf:1b:
0a:e3:d3:a6:e5:9c:e4:46:73:cc:2e:13:cb:eb:7e:
fc:fe:6f:b3:56:77:d1:34:d8:8e:b3:ad:f5:42:e4:
f8:41:39:6d:62:9d:81:64:52:02:cd:b5:e7:4f:4a:
95:ab:ea:74:b7:cb:31:84:10:7a:4f:b0:80:9d:40:
37:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:91:D7:72:B1:D4:0B:99:44:AA:A7:0A:9B:AE:C1:81:32:3B:6E:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987/4b08360c-1313-3bbb-a1c8-d6e7251e2ed2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987/b511cf32-0933-4308-8981-9c296fc06987.crl
X509v3 Authority Key Identifier:
keyid:B7:63:09:26:C1:4A:FB:97:17:CC:67:FB:FB:6B:C0:FE:A5:E1:52:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987.cer
sbgp-ipAddrBlock: critical
IPv4:
23.137.160.0/24
IPv6:
2620:4d:a000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:91:62:c2:cd:ba:8b:84:7d:26:74:da:30:50:f5:b4:38:16:
73:8f:88:cd:5b:74:e8:98:6c:81:bf:cc:85:2e:de:d9:38:56:
fa:e6:a3:28:2c:18:81:da:31:60:4f:38:bc:ea:e1:87:22:bf:
10:32:0c:57:f2:6a:57:06:7e:6a:b5:c4:f0:d5:a5:9d:00:5c:
01:59:82:bc:27:c3:ea:99:04:77:52:9a:48:56:e1:c5:5a:a8:
6b:3c:fa:54:c9:8f:be:0a:4e:da:35:3c:c7:9c:44:84:41:c8:
8c:d6:ab:f7:00:a2:de:ce:23:bb:ce:c7:4b:ea:08:a5:cc:6b:
8e:8b:a9:d2:4e:45:7a:fb:56:7a:9b:66:6a:56:6f:7d:bb:25:
e1:9d:5e:fb:f7:d9:72:40:a4:77:3a:f5:cf:43:3a:3d:3f:a9:
da:dc:be:68:21:95:63:b1:da:2d:22:61:a8:61:5a:27:b3:91:
b6:22:3e:93:84:9a:10:a8:87:59:ff:37:bd:cd:c4:41:db:1a:
6e:7e:0b:ec:8b:d7:ac:2f:7d:89:31:36:72:9a:78:f7:66:f7:
c7:9c:01:38:94:74:33:66:3c:25:5f:2a:ee:b4:75:0a:a6:03:
bb:b6:56:99:ef:19:3e:7f:31:1a:03:4d:f3:b1:fd:c9:26:9b:
30:8c:59:49
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEh3Vd04cheoJ2x/Z0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjUxMWNmMzItMDkzMy00MzA4LTg5ODEtOWMyOTZmYzA2
OTg3MB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk
YzQwNzQwMTItYzk2Mi00ZjRlLWJiNDYtYWJmZjg4YmIxZTYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR47QHoluIjz0F08qZ/O9s+PhYO7zW0eCkq2
zQNPmUh8Q4LKAB6ByobEKhe47XCG9mIOwwyX+9B7DI6fU1O3goZ3d/pCCqP3I5dR
y62U1oYnYjWHtMCLZ2ugHNBlLXIRc79Zez40PiXzsFF5yD4R8WQ28mMe/IMsewdQ
UmBprp1MfkGugPcKDGtNFdGAdBOyVHaLflS3S7bUhiBWWTP7RhBO6ID/BgezQX7p
+5CPsW5Q1oetwertrG0zP4pLGoFbvxsK49Om5ZzkRnPMLhPL6378/m+zVnfRNNiO
s631QuT4QTltYp2BZFICzbXnT0qVq+p0t8sxhBB6T7CAnUA3OQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFD6R13Kx1AuZRKqnCpuuwYEyO26+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iNTEx
Y2YzMi0wOTMzLTQzMDgtODk4MS05YzI5NmZjMDY5ODcvNGIwODM2MGMtMTMxMy0z
YmJiLWExYzgtZDZlNzI1MWUyZWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjUxMWNmMzItMDkzMy00MzA4LTg5
ODEtOWMyOTZmYzA2OTg3L2I1MTFjZjMyLTA5MzMtNDMwOC04OTgxLTljMjk2ZmMw
Njk4Ny5jcmwwHwYDVR0jBBgwFoAUt2MJJsFK+5cXzGf7+2vA/qXhUsQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iNTExY2YzMi0wOTMzLTQzMDgtODk4MS05YzI5
NmZjMDY5ODcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF4mgMA8E
AgACMAkDBwAmIABNoAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOZFiws26i4R9JnTaMFD1tDgWc4+IzVt0
6Jhsgb/MhS7e2ThW+uajKCwYgdoxYE84vOrhhyK/EDIMV/JqVwZ+arXE8NWlnQBc
AVmCvCfD6pkEd1KaSFbhxVqoazz6VMmPvgpO2jU8x5xEhEHIjNar9wCi3s4ju87H
S+oIpcxrjoup0k5FevtWeptmalZvfbsl4Z1e+/fZckCkdzr1z0M6PT+p2ty+aCGV
Y7HaLSJhqGFaJ7ORtiI+k4SaEKiHWf83vc3EQdsabn4L7IvXrC99iTE2cpp492b3
x5wBOJR0M2Y8JV8q7rR1CqYDu7ZWme8ZPn8xGgNN87H9ySabMIxZSQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:36 2025 by rpki-client