Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/028ad6f4-e7c2-3ac7-ae5b-b50b76ebe3d3.roa
File: 028ad6f4-e7c2-3ac7-ae5b-b50b76ebe3d3.roa (raw, json)
Hash identifier: VGmtixDJWN8s6dY1TpanI3BED09ZHmEflO0bwXmuJ8E=
Subject key identifier: 95:A0:31:24:D8:9A:F8:0A:A9:25:6F:30:D6:4D:B6:66:46:62:07:0E
Certificate issuer: /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial: 010D0C9F432858481F65387A21BFDD6C132C74C0
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/028ad6f4-e7c2-3ac7-ae5b-b50b76ebe3d3.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 7862
IP address blocks: 146.23.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:38:7a:21:bf:dd:6c:13:2c:74:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=416efa3b-d303-4b11-8366-fc43903e8555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bc:37:42:25:da:35:a0:2f:d7:54:28:36:8d:
4b:ae:dc:90:16:9c:e3:b8:98:33:67:26:9d:03:ac:
19:fe:5e:e2:28:23:d2:ba:3c:ef:3d:05:77:72:bd:
db:ca:63:33:f3:3b:83:17:28:8b:9d:8b:4f:2c:01:
1d:d9:e3:c7:75:8b:d1:cb:a2:95:11:4b:51:f0:be:
b8:2b:e9:19:61:cd:e6:b2:3a:83:4e:53:0a:55:54:
b7:09:a5:b5:25:cb:83:24:d9:8b:52:5c:2b:28:e5:
54:d5:a7:61:a6:19:3e:86:9b:58:28:d5:09:e2:e5:
de:0f:0e:3b:f1:26:9c:ac:fe:78:86:28:4f:08:b6:
a1:25:06:a1:95:f2:1d:48:e6:eb:06:e6:64:a8:9a:
8b:04:8d:28:92:21:63:8e:71:3e:35:7e:9d:d0:96:
5a:4e:29:71:4f:43:46:3a:98:95:70:d2:f7:33:64:
46:66:a6:8d:86:67:8d:b1:48:4c:77:58:b8:b3:56:
c2:10:f1:bb:b8:ab:9e:70:2d:fb:65:a9:39:a3:af:
eb:8f:0b:28:6a:60:8c:36:fd:25:d1:1d:94:2c:c4:
d0:1b:ee:c1:d0:8f:2d:b8:16:37:64:5c:e6:58:ee:
9b:15:a2:2e:c4:cb:89:58:9d:24:91:f0:24:29:13:
ab:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A0:31:24:D8:9A:F8:0A:A9:25:6F:30:D6:4D:B6:66:46:62:07:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/028ad6f4-e7c2-3ac7-ae5b-b50b76ebe3d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
X509v3 Authority Key Identifier:
keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
sbgp-ipAddrBlock: critical
IPv4:
146.23.24.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:b7:2a:9b:35:2c:1d:3c:d8:12:4e:89:7b:bf:00:db:eb:a6:
07:fd:04:46:fc:8f:39:d5:14:a0:cb:af:e8:e8:36:5d:42:1e:
6f:69:1a:a1:f7:d4:a3:ee:5f:c1:e6:ed:6e:7d:4a:16:af:d3:
5f:ba:b5:18:37:01:d7:a7:4c:26:50:51:f2:cd:dc:4e:ae:5a:
eb:6e:10:27:31:76:b4:4b:a4:a2:79:d5:6d:85:06:34:21:1d:
12:18:00:d4:e7:6c:b3:d2:b7:f0:d7:d2:94:19:fd:da:ee:08:
a8:81:20:2d:9a:55:92:61:1b:2b:21:c0:85:4e:56:81:63:db:
af:5d:75:92:6b:b4:71:30:be:24:14:90:ec:f9:76:b7:da:6c:
b9:8c:87:db:fb:b7:1a:2a:16:d8:ff:34:af:08:b3:3c:9d:b1:
79:0b:a0:c6:4a:b5:36:d2:d3:d5:d6:ca:46:fe:ab:d9:03:a3:
33:aa:04:15:a3:5a:a2:1c:af:bb:5c:f1:83:9e:fa:40:a1:4d:
34:e6:f6:24:19:83:2a:92:19:e1:91:f0:4d:20:33:6e:1f:9f:
88:f3:36:17:af:fc:b7:f9:cf:bc:0c:e6:63:05:56:ac:e4:c6:
74:e3:6f:78:c0:b4:e0:fa:f5:ab:53:91:72:53:03:1f:3f:cf:
60:dc:83:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgfZTh6Ib/dbBMsdMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzFlYTg5YjQtZWQ4NS00NjNmLTgzZDktODQ1MzMwMGJm
MmJkMB4XDTI0MTIwNzAyMDAzOVoXDTI1MDMwNzAyMDAzOVowLzEtMCsGA1UEAxMk
NDE2ZWZhM2ItZDMwMy00YjExLTgzNjYtZmM0MzkwM2U4NTU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLw3QiXaNaAv11QoNo1LrtyQFpzjuJgzZyad
A6wZ/l7iKCPSujzvPQV3cr3bymMz8zuDFyiLnYtPLAEd2ePHdYvRy6KVEUtR8L64
K+kZYc3msjqDTlMKVVS3CaW1JcuDJNmLUlwrKOVU1adhphk+hptYKNUJ4uXeDw47
8SacrP54hihPCLahJQahlfIdSObrBuZkqJqLBI0okiFjjnE+NX6d0JZaTilxT0NG
OpiVcNL3M2RGZqaNhmeNsUhMd1i4s1bCEPG7uKuecC37Zak5o6/rjwsoamCMNv0l
0R2ULMTQG+7B0I8tuBY3ZFzmWO6bFaIuxMuJWJ0kkfAkKROr7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJWgMSTYmvgKqSVvMNZNtmZGYgcOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MWVh
ODliNC1lZDg1LTQ2M2YtODNkOS04NDUzMzAwYmYyYmQvMDI4YWQ2ZjQtZTdjMi0z
YWM3LWFlNWItYjUwYjc2ZWJlM2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzFlYTg5YjQtZWQ4NS00NjNmLTgz
ZDktODQ1MzMwMGJmMmJkLzcxZWE4OWI0LWVkODUtNDYzZi04M2Q5LTg0NTMzMDBi
ZjJiZC5jcmwwHwYDVR0jBBgwFoAUAPoosGNeNAxamY5KWp40aTpaVmIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83MWVhODliNC1lZDg1LTQ2M2YtODNkOS04NDUz
MzAwYmYyYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkhcYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA23Kps1LB082BJOiXu/ANvrpgf9BEb8jznVFKDLr+joNl1CHm9pGqH3
1KPuX8Hm7W59Shav01+6tRg3AdenTCZQUfLN3E6uWutuECcxdrRLpKJ51W2FBjQh
HRIYANTnbLPSt/DX0pQZ/druCKiBIC2aVZJhGyshwIVOVoFj269ddZJrtHEwviQU
kOz5drfabLmMh9v7txoqFtj/NK8IszydsXkLoMZKtTbS09XWykb+q9kDozOqBBWj
WqIcr7tc8YOe+kChTTTm9iQZgyqSGeGR8E0gM24fn4jzNhev/Lf5z7wM5mMFVqzk
xnTjb3jAtOD69atTkXJTAx8/z2Dcgzg=
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:14 2025 by rpki-client