Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a/c94cc673-123f-3658-9faf-ceb1370310f2.roa
File: c94cc673-123f-3658-9faf-ceb1370310f2.roa (raw, json)
Hash identifier: HNokbFIOreZYMWkJxkwoNa2MpFM4Tcp13+ljui+7n0E=
Subject key identifier: 60:4C:00:8D:0B:35:FF:AE:BC:6B:6A:E2:0C:DC:AD:E5:B5:D3:60:7B
Certificate issuer: /CN=bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a
Certificate serial: 010D0C9F4328584802150E391121BB1B67DDF450
Authority key identifier: 5E:87:0B:B5:65:AC:44:E9:2C:ED:8B:5C:3C:07:B5:99:5B:10:21:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a/c94cc673-123f-3658-9faf-ceb1370310f2.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 401147
IP address blocks: 23.182.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:15:0e:39:11:21:bb:1b:67:dd:f4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=c20ececc-5da0-476f-836a-4fddc209d6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5b:38:89:11:8d:55:fe:8e:3f:c5:ac:6f:de:
56:a1:18:3a:cc:af:f9:03:4b:b6:75:df:af:15:fb:
fe:da:83:b6:6f:37:45:6b:2b:47:91:9d:dc:9b:e3:
62:6c:c9:08:0d:8e:e0:7d:ee:a1:55:9b:e1:5f:d4:
d3:18:6d:8b:e7:dd:84:f5:fb:1f:4d:52:74:e3:bb:
10:b3:4c:e8:1a:a2:7b:34:25:ea:d8:a9:23:ab:92:
5b:88:46:74:25:9e:c0:d4:08:0c:04:22:1c:96:6b:
6d:77:26:8e:2b:f5:6c:09:e6:36:08:15:00:9b:26:
ec:f5:b6:c7:70:76:f7:93:e0:7f:21:c1:7c:ce:e0:
dc:25:42:9e:7f:bd:70:ff:d9:96:24:60:9b:cd:11:
16:b5:1a:83:ae:7c:1b:0d:bd:30:85:06:dc:97:86:
86:6a:03:f6:16:9c:c5:7f:2d:1c:be:79:95:e4:37:
ce:03:bc:aa:d4:d7:93:14:63:80:52:67:72:24:84:
2b:28:09:ec:e4:6b:8b:d7:88:36:74:dc:d7:8f:0b:
23:bf:76:56:de:14:74:14:0d:4b:61:3e:42:81:31:
ea:3a:4f:b7:1b:cc:00:62:0b:08:f2:be:28:25:63:
d1:7b:c7:4f:c6:35:9d:be:90:dc:dd:a1:b1:95:ca:
37:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4C:00:8D:0B:35:FF:AE:BC:6B:6A:E2:0C:DC:AD:E5:B5:D3:60:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a/c94cc673-123f-3658-9faf-ceb1370310f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a.crl
X509v3 Authority Key Identifier:
keyid:5E:87:0B:B5:65:AC:44:E9:2C:ED:8B:5C:3C:07:B5:99:5B:10:21:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.182.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:b2:ba:3c:34:c5:60:ac:9d:52:60:e1:32:49:98:85:f8:6a:
35:09:12:e1:44:bf:d9:9a:66:13:47:bd:ba:0f:fd:4d:c4:84:
e5:e1:11:81:58:82:82:b2:00:2b:8c:98:9e:52:c1:d1:d4:ff:
f4:2e:fd:0b:53:46:e4:76:45:c6:f3:c1:ef:18:39:66:31:46:
1a:ce:5a:7e:40:d9:4f:44:cf:13:5c:10:fa:26:fe:f2:c4:30:
b2:79:85:ff:74:b2:47:48:a3:1d:2b:ea:4a:d9:a0:65:82:96:
ef:67:e7:5c:ae:af:7a:89:62:45:be:a3:2d:92:8c:f6:fd:cc:
82:dc:16:d5:3c:de:7c:eb:6d:75:d0:6e:63:61:1a:d7:5e:32:
53:91:6f:78:e4:67:0c:af:f5:cf:c9:1d:18:94:0c:a7:98:87:
36:2a:2d:97:24:d8:a9:e4:da:2c:60:1f:ff:e2:86:4a:65:6f:
7c:0f:24:52:71:5d:09:d6:a3:7a:2b:c4:f2:f6:c9:11:ed:62:
c4:ae:e6:9a:22:fc:87:c1:93:48:81:e1:da:f8:f9:76:7a:a6:
07:82:23:c0:c0:94:b0:7b:dc:1d:99:f6:dd:1f:91:62:14:06:
0f:22:57:2f:e7:7e:78:66:f3:29:dd:c8:ae:c3:e9:1f:21:27:
31:9a:f1:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgCFQ45ESG7G2fd9FAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmI3OWNkOGMtYmVhMS00NWIwLWJiNTMtOWM0ZTk3NmUx
YzFhMB4XDTI0MTEyNjE0MDAzOVoXDTI1MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk
YzIwZWNlY2MtNWRhMC00NzZmLTgzNmEtNGZkZGMyMDlkNmZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjls4iRGNVf6OP8Wsb95WoRg6zK/5A0u2dd+v
Ffv+2oO2bzdFaytHkZ3cm+NibMkIDY7gfe6hVZvhX9TTGG2L592E9fsfTVJ047sQ
s0zoGqJ7NCXq2Kkjq5JbiEZ0JZ7A1AgMBCIclmttdyaOK/VsCeY2CBUAmybs9bbH
cHb3k+B/IcF8zuDcJUKef71w/9mWJGCbzREWtRqDrnwbDb0whQbcl4aGagP2FpzF
fy0cvnmV5DfOA7yq1NeTFGOAUmdyJIQrKAns5GuL14g2dNzXjwsjv3ZW3hR0FA1L
YT5CgTHqOk+3G8wAYgsI8r4oJWPRe8dPxjWdvpDc3aGxlco38wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGBMAI0LNf+uvGtq4gzcreW102B7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYjc5
Y2Q4Yy1iZWExLTQ1YjAtYmI1My05YzRlOTc2ZTFjMWEvYzk0Y2M2NzMtMTIzZi0z
NjU4LTlmYWYtY2ViMTM3MDMxMGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmI3OWNkOGMtYmVhMS00NWIwLWJi
NTMtOWM0ZTk3NmUxYzFhL2JiNzljZDhjLWJlYTEtNDViMC1iYjUzLTljNGU5NzZl
MWMxYS5jcmwwHwYDVR0jBBgwFoAUXocLtWWsROks7YtcPAe1mVsQIQYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iYjc5Y2Q4Yy1iZWExLTQ1YjAtYmI1My05YzRl
OTc2ZTFjMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7YIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGayujw0xWCsnVJg4TJJmIX4ajUJEuFEv9maZhNHvboP/U3EhOXhEYFY
goKyACuMmJ5SwdHU//Qu/QtTRuR2Rcbzwe8YOWYxRhrOWn5A2U9EzxNcEPom/vLE
MLJ5hf90skdIox0r6krZoGWClu9n51yur3qJYkW+oy2SjPb9zILcFtU83nzrbXXQ
bmNhGtdeMlORb3jkZwyv9c/JHRiUDKeYhzYqLZck2Knk2ixgH//ihkplb3wPJFJx
XQnWo3orxPL2yRHtYsSu5poi/IfBk0iB4dr4+XZ6pgeCI8DAlLB73B2Z9t0fkWIU
Bg8iVy/nfnhm8yndyK7D6R8hJzGa8YM=
-----END CERTIFICATE-----
Generated at Tue Apr 29 12:03:02 2025 by rpki-client