Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/1fc61e72-5b1c-358a-87b2-c4b81dedb809.roa
File: 1fc61e72-5b1c-358a-87b2-c4b81dedb809.roa (raw, json)
Hash identifier: jNTTteABSfLM09sOcFAjQec81PWXmoFbGVw0qKqNnGY=
Subject key identifier: C1:B3:D0:30:A6:5D:58:22:A0:09:DD:86:C9:A2:F1:CF:43:7E:3D:A3
Certificate issuer: /CN=974309dc-20f5-4894-9707-f2e446573ea1
Certificate serial: 010D0C9F43285848A22B84A843D71D09D9856930
Authority key identifier: F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/1fc61e72-5b1c-358a-87b2-c4b81dedb809.roa
Signing time: Wed 22 Jan 2025 22:15:31 +0000
ROA not before: Wed 22 Jan 2025 22:15:31 +0000
ROA not after: Tue 22 Apr 2025 21:15:31 +0000
asID: 16509
IP address blocks: 23.131.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:2b:84:a8:43:d7:1d:09:d9:85:69:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974309dc-20f5-4894-9707-f2e446573ea1
Validity
Not Before: Jan 22 22:15:31 2025 GMT
Not After : Apr 22 21:15:31 2025 GMT
Subject: CN=1ea2b7c8-2c56-47ea-b958-56c8f46b8dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:28:8c:f0:c6:8c:3f:4e:ba:d8:42:61:5b:bc:
6f:22:da:9e:0f:c2:49:37:48:fd:71:21:ed:43:42:
9e:f1:a1:b1:48:52:e5:a9:2a:0d:68:07:ba:d3:e5:
d9:c2:c9:60:e1:d0:08:42:37:be:27:c6:9b:39:04:
dd:7d:0b:8d:46:c0:c4:e1:3c:1c:b0:78:7a:0e:3b:
6d:30:48:e7:43:b2:2f:cf:21:03:c3:b8:a4:93:fb:
02:ae:21:12:fd:20:82:b3:dd:8d:cb:89:0c:44:30:
97:7b:3a:58:ac:72:03:9e:9d:94:a3:6b:bc:22:7d:
0d:2d:cb:fa:b3:52:ac:ed:a4:f0:33:b8:bb:19:62:
19:6b:58:09:fb:b9:96:7a:72:65:95:7a:96:4f:99:
ac:49:93:ac:ce:c7:c5:1e:4a:ea:61:2f:5e:81:3f:
70:e2:bc:21:b1:9f:da:a8:3c:3a:7c:22:09:6e:30:
34:67:13:0d:29:69:f6:9a:09:61:33:d2:6a:48:ad:
e2:fe:2d:ea:2d:21:4f:a6:c2:1a:c0:c1:9b:f2:c3:
36:65:a5:6b:82:2d:e6:98:18:a1:b7:85:f1:d7:ae:
e2:97:04:f6:e4:03:b3:c5:16:0b:d2:ee:21:83:09:
b2:b7:da:e3:aa:48:35:de:30:cc:fd:6a:56:06:24:
5f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B3:D0:30:A6:5D:58:22:A0:09:DD:86:C9:A2:F1:CF:43:7E:3D:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/1fc61e72-5b1c-358a-87b2-c4b81dedb809.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl
X509v3 Authority Key Identifier:
keyid:F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
sbgp-ipAddrBlock: critical
IPv4:
23.131.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:b4:0d:5a:25:28:47:b8:cf:8d:2e:25:06:d8:57:ec:71:51:
80:79:9b:6e:b2:86:22:28:d0:38:11:76:99:29:64:19:54:11:
36:82:33:2d:90:84:91:31:c7:b3:2b:10:28:88:51:ed:82:3f:
3b:23:28:c7:03:04:9c:9c:a1:c7:8a:71:c3:ba:34:d1:e7:79:
1c:b1:d6:c9:92:4b:56:17:8d:85:35:dc:48:ef:c0:c5:83:ed:
8e:d8:42:65:1f:45:eb:95:cf:e7:19:7b:fa:e6:b6:c7:3e:d1:
a9:c5:94:7c:4e:6d:39:3c:17:0d:fb:40:f7:6f:b9:b9:f3:9f:
62:6a:07:3a:ce:ad:9e:d8:41:14:8c:b8:05:74:51:7f:f9:7a:
9e:7a:1a:59:33:cc:19:51:75:82:52:d9:3f:4f:f6:4a:b6:ad:
18:15:fe:24:2c:32:49:48:d0:55:25:5e:53:de:12:b6:ec:e2:
de:22:12:c7:8e:ca:7b:86:49:d8:33:1b:4e:6f:c6:8b:82:0c:
fb:2d:d7:32:3b:8b:fc:db:20:ca:6d:62:bd:5a:1e:d8:f5:2e:
3a:1b:03:b4:08:24:dc:ec:aa:b0:40:9b:d2:a6:58:52:e7:8c:
cb:4d:e7:a9:15:1f:cd:9f:e2:b5:f5:24:61:62:fe:fd:52:70:
08:d5:88:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiiK4SoQ9cdCdmFaTAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTc0MzA5ZGMtMjBmNS00ODk0LTk3MDctZjJlNDQ2NTcz
ZWExMB4XDTI1MDEyMjIyMTUzMVoXDTI1MDQyMjIxMTUzMVowLzEtMCsGA1UEAxMk
MWVhMmI3YzgtMmM1Ni00N2VhLWI5NTgtNTZjOGY0NmI4ZGFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSiM8MaMP0662EJhW7xvItqeD8JJN0j9cSHt
Q0Ke8aGxSFLlqSoNaAe60+XZwslg4dAIQje+J8abOQTdfQuNRsDE4TwcsHh6Djtt
MEjnQ7IvzyEDw7ikk/sCriES/SCCs92Ny4kMRDCXezpYrHIDnp2Uo2u8In0NLcv6
s1Ks7aTwM7i7GWIZa1gJ+7mWenJllXqWT5msSZOszsfFHkrqYS9egT9w4rwhsZ/a
qDw6fCIJbjA0ZxMNKWn2mglhM9JqSK3i/i3qLSFPpsIawMGb8sM2ZaVrgi3mmBih
t4Xx167ilwT25AOzxRYL0u4hgwmyt9rjqkg13jDM/WpWBiRf0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMGz0DCmXVgioAndhsmi8c9Dfj2jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85NzQz
MDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0NDY1NzNlYTEvMWZjNjFlNzItNWIxYy0z
NThhLTg3YjItYzRiODFkZWRiODA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTc0MzA5ZGMtMjBmNS00ODk0LTk3
MDctZjJlNDQ2NTczZWExLzk3NDMwOWRjLTIwZjUtNDg5NC05NzA3LWYyZTQ0NjU3
M2VhMS5jcmwwHwYDVR0jBBgwFoAU8wpyK8l5Fe1rdy/fvqwHji6l1eEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85NzQzMDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0
NDY1NzNlYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4NEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIq0DVolKEe4z40uJQbYV+xxUYB5m26yhiIo0DgRdpkpZBlUETaCMy2Q
hJExx7MrECiIUe2CPzsjKMcDBJycoceKccO6NNHneRyx1smSS1YXjYU13EjvwMWD
7Y7YQmUfReuVz+cZe/rmtsc+0anFlHxObTk8Fw37QPdvubnzn2JqBzrOrZ7YQRSM
uAV0UX/5ep56GlkzzBlRdYJS2T9P9kq2rRgV/iQsMklI0FUlXlPeErbs4t4iEseO
ynuGSdgzG05vxouCDPst1zI7i/zbIMptYr1aHtj1LjobA7QIJNzsqrBAm9KmWFLn
jMtN56kVH82f4rX1JGFi/v1ScAjViIA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:47:45 2025 by rpki-client