Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/322cbd0c-4d36-306f-ab3d-e081df5fe1fe.roa
File: 322cbd0c-4d36-306f-ab3d-e081df5fe1fe.roa (raw, json)
Hash identifier: 2//iVR7pxV7LpMJsFsxDVpNAwms1JXLvukGYO7Ttd2E=
Subject key identifier: FA:29:EE:D3:CE:A9:6C:51:FA:E5:75:52:5C:66:60:0B:32:FC:08:1C
Certificate issuer: /CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c
Certificate serial: 010D0C9F432858487B85B600D1E96C3CC7FEC1C0
Authority key identifier: 44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/322cbd0c-4d36-306f-ab3d-e081df5fe1fe.roa
Signing time: Thu 09 Jan 2025 02:00:40 +0000
ROA not before: Thu 09 Jan 2025 02:00:40 +0000
ROA not after: Wed 09 Apr 2025 01:00:40 +0000
asID: 53856
IP address blocks: 23.174.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7b:85:b6:00:d1:e9:6c:3c:c7:fe:c1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c
Validity
Not Before: Jan 9 02:00:40 2025 GMT
Not After : Apr 9 01:00:40 2025 GMT
Subject: CN=66cf7e0c-451d-46e1-a4a2-b689a26af7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:90:b1:89:e5:b1:0c:a8:a8:9a:96:f2:28:52:
a9:16:0f:fc:84:1f:c5:b6:5e:2a:5a:0c:bf:d8:80:
a3:7a:ce:62:62:0d:20:7a:68:5b:1d:4f:23:01:af:
c2:d0:a8:38:ce:d1:a8:5e:6c:42:5c:c8:9c:dd:fe:
3b:22:2a:28:0b:a7:52:0b:03:ee:68:84:8c:36:a0:
6b:74:18:82:22:23:c3:f6:ed:b6:8d:a7:bc:e6:c4:
88:23:6e:26:1d:1a:77:7c:45:89:65:77:f7:a2:7f:
ad:00:0c:8b:21:48:96:99:d8:d2:e4:93:65:43:ad:
4c:3e:c7:d1:35:4b:e0:9b:91:da:84:58:08:a9:cc:
e7:c6:7e:2e:55:2e:e7:93:bd:c9:39:5c:51:68:83:
30:04:f3:0a:f4:9f:78:e8:d4:23:c4:97:0a:ae:d3:
fa:86:f9:03:7b:8d:1d:5e:f1:6e:06:4e:90:7e:7d:
c7:80:05:ba:1d:ba:6f:d0:50:f8:a6:da:8d:c6:f6:
a7:26:bd:46:47:42:ec:90:17:09:4b:32:b9:de:11:
8e:4a:3d:7f:c4:ac:42:c0:41:c9:0e:e3:af:84:62:
54:30:d0:7a:cb:ed:f8:fd:8a:83:63:7d:53:30:ae:
a2:78:c9:75:a5:4d:11:1b:7d:75:21:c6:c8:a2:e3:
f9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:29:EE:D3:CE:A9:6C:51:FA:E5:75:52:5C:66:60:0B:32:FC:08:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/322cbd0c-4d36-306f-ab3d-e081df5fe1fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl
X509v3 Authority Key Identifier:
keyid:44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.174.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:4c:07:fa:46:78:32:b6:80:ed:7b:20:e0:c4:da:05:1c:d6:
9d:75:d5:ba:ef:28:79:6e:ef:4a:b6:d5:54:86:81:c9:68:c1:
8a:45:ee:97:17:ed:fe:be:29:3d:87:f6:9e:55:81:47:1a:64:
40:aa:ca:6b:42:a8:21:da:8d:52:b7:72:08:d3:69:48:7b:a5:
92:9b:9a:c0:71:74:1e:96:92:79:c1:7a:4f:c6:15:c1:61:d7:
09:15:04:26:f9:cd:a2:e2:54:32:43:50:a9:6a:29:4d:9f:9b:
67:a8:e6:b8:17:c3:03:6a:4c:e6:d1:fe:65:23:16:9c:b0:08:
d2:1e:bd:07:50:6d:99:6e:16:59:ee:f8:10:eb:26:33:f8:49:
47:7d:73:c3:b7:f8:87:66:38:a1:7e:9a:bc:b3:17:a4:fc:79:
5b:ff:69:7a:20:bf:c7:64:ac:c9:cd:09:25:34:3c:47:44:1e:
4e:b9:96:59:7d:f4:18:0f:49:fe:7f:21:38:88:fa:6b:ca:f2:
dd:a2:f1:9b:bc:d9:e0:ba:60:ba:41:01:71:2e:58:86:58:f0:
07:5d:d1:17:bc:ee:bf:5e:8e:33:33:a5:ff:92:05:d5:b1:a3:
c6:90:0f:9b:5e:8f:2b:d1:18:9a:56:a3:e8:7d:e6:ac:3b:fd:
e1:e7:b4:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh7hbYA0elsPMf+wcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjhlMWY5ZWEtMjRiZi00YzIyLWExODItZmM5MjVkNWE4
MTljMB4XDTI1MDEwOTAyMDA0MFoXDTI1MDQwOTAxMDA0MFowLzEtMCsGA1UEAxMk
NjZjZjdlMGMtNDUxZC00NmUxLWE0YTItYjY4OWEyNmFmN2ZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZCxieWxDKiompbyKFKpFg/8hB/Ftl4qWgy/
2ICjes5iYg0gemhbHU8jAa/C0Kg4ztGoXmxCXMic3f47IiooC6dSCwPuaISMNqBr
dBiCIiPD9u22jae85sSII24mHRp3fEWJZXf3on+tAAyLIUiWmdjS5JNlQ61MPsfR
NUvgm5HahFgIqcznxn4uVS7nk73JOVxRaIMwBPMK9J946NQjxJcKrtP6hvkDe40d
XvFuBk6Qfn3HgAW6Hbpv0FD4ptqNxvanJr1GR0LskBcJSzK53hGOSj1/xKxCwEHJ
DuOvhGJUMNB6y+34/YqDY31TMK6ieMl1pU0RG311IcbIouP5CwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPop7tPOqWxR+uV1UlxmYAsy/AgcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yOGUx
ZjllYS0yNGJmLTRjMjItYTE4Mi1mYzkyNWQ1YTgxOWMvMzIyY2JkMGMtNGQzNi0z
MDZmLWFiM2QtZTA4MWRmNWZlMWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjhlMWY5ZWEtMjRiZi00YzIyLWEx
ODItZmM5MjVkNWE4MTljLzI4ZTFmOWVhLTI0YmYtNGMyMi1hMTgyLWZjOTI1ZDVh
ODE5Yy5jcmwwHwYDVR0jBBgwFoAURJcM9+Kw97NRT515flzDl/luGxkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yOGUxZjllYS0yNGJmLTRjMjItYTE4Mi1mYzky
NWQ1YTgxOWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF65wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHNMB/pGeDK2gO17IODE2gUc1p111brvKHlu70q21VSGgclowYpF7pcX
7f6+KT2H9p5VgUcaZECqymtCqCHajVK3cgjTaUh7pZKbmsBxdB6WknnBek/GFcFh
1wkVBCb5zaLiVDJDUKlqKU2fm2eo5rgXwwNqTObR/mUjFpywCNIevQdQbZluFlnu
+BDrJjP4SUd9c8O3+IdmOKF+mryzF6T8eVv/aXogv8dkrMnNCSU0PEdEHk65lll9
9BgPSf5/ITiI+mvK8t2i8Zu82eC6YLpBAXEuWIZY8Add0Re87r9ejjMzpf+SBdWx
o8aQD5tejyvRGJpWo+h95qw7/eHntAA=
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:33:07 2025 by rpki-client