Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/f40713af-4a8a-3b63-8219-8552a9e6be05.roa
File: f40713af-4a8a-3b63-8219-8552a9e6be05.roa (raw, json)
Hash identifier: IkQsgPfeq6og0wSUBMBPHheLYwM2xD8kCOBN8rWtlE8=
Subject key identifier: 90:1D:82:BA:05:02:FC:FA:B9:5D:E9:89:D8:06:21:35:E7:35:A2:05
Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Certificate serial: 010D0C9F432858488AE09A6B079122623D8A5560
Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/f40713af-4a8a-3b63-8219-8552a9e6be05.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 46841
IP address blocks: 23.179.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:9a:6b:07:91:22:62:3d:8a:55:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=d54f55e8-1836-4479-ba59-0388719f4273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c3:b7:0c:6c:33:e7:17:7e:d5:f9:00:24:35:
e7:9d:9e:20:20:e1:65:d0:66:00:af:cf:0d:b4:05:
b4:06:cc:19:28:dc:6f:b5:90:99:23:6f:f2:fa:f2:
d0:42:28:87:e8:01:0e:28:25:49:9c:3e:a2:cb:08:
58:f0:5b:5c:87:57:46:81:01:66:30:7f:0d:39:d8:
bc:0b:f0:10:3e:6a:8c:41:f0:6b:7a:37:6d:af:9e:
26:cf:1f:b9:74:f9:42:97:c5:a3:6f:b7:ca:d7:1d:
e4:65:27:d1:f8:6e:6a:e6:98:65:4b:fa:e0:6e:30:
6e:68:db:d1:71:68:b9:ff:5d:b4:bc:41:61:84:75:
6b:d8:e8:57:74:2f:8a:f1:0d:9c:57:da:76:42:83:
b2:42:a7:16:7f:95:9e:44:92:a2:7e:96:97:25:fc:
9e:98:d3:3b:62:33:ee:d9:d7:bd:2e:4e:93:d8:5e:
c7:fe:66:0c:83:a7:5b:dc:d9:ab:fe:d5:bf:2b:f3:
a0:3a:f4:a4:32:d4:b0:eb:06:7f:d4:4e:03:88:e8:
6d:8a:db:ab:be:1e:1d:c2:e6:84:f8:b9:d2:36:4c:
bb:82:03:09:01:21:bd:de:f2:f1:e4:f4:49:14:ab:
86:a0:9f:6e:68:a3:93:b2:51:21:6b:d8:f1:c9:ca:
e4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1D:82:BA:05:02:FC:FA:B9:5D:E9:89:D8:06:21:35:E7:35:A2:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/f40713af-4a8a-3b63-8219-8552a9e6be05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl
X509v3 Authority Key Identifier:
keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.179.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:25:4d:d3:24:bc:0e:83:a8:c5:3d:da:a6:69:84:3e:70:5c:
b0:14:3d:cf:4f:4d:af:67:31:eb:03:84:69:46:f3:4b:f6:fd:
2b:0b:bd:cc:5f:56:5d:42:03:4c:24:7b:69:27:42:83:63:86:
61:2a:eb:ec:7a:fa:77:ff:c8:a7:dc:5d:5e:aa:c0:95:0d:fd:
8a:c5:a2:a8:ae:a2:20:29:4b:61:bc:bb:54:85:57:ea:57:fd:
e0:83:43:26:14:6b:54:84:a9:14:4b:ea:4d:32:21:6a:b1:b8:
a4:9e:67:f0:ce:00:4f:56:f9:98:b0:cb:8c:c5:4c:36:1a:42:
a4:f4:29:c5:fe:3e:18:67:03:52:fa:dd:dd:1a:bc:06:f0:bd:
6e:40:28:7d:87:1f:7f:64:5d:7a:48:99:9e:f9:93:a6:f5:b2:
b1:88:a0:94:36:b6:1c:3a:fc:50:26:1d:fc:e4:e4:dd:24:1e:
6c:03:9b:9c:e4:81:11:c1:0d:98:22:1c:e6:2a:80:f0:ff:38:
d1:fb:a5:a9:b4:37:36:3d:fb:43:73:eb:70:a6:4a:d7:a3:32:
cb:52:7e:05:e7:fe:99:7b:48:a2:2c:7b:6d:cf:4d:d4:fc:cd:
d5:09:24:a2:81:8c:03:11:db:81:69:94:8e:62:d6:2a:50:74:
e5:d4:dc:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4JprB5EiYj2KVWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0
YzhjMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk
ZDU0ZjU1ZTgtMTgzNi00NDc5LWJhNTktMDM4ODcxOWY0MjczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8O3DGwz5xd+1fkAJDXnnZ4gIOFl0GYAr88N
tAW0BswZKNxvtZCZI2/y+vLQQiiH6AEOKCVJnD6iywhY8Ftch1dGgQFmMH8NOdi8
C/AQPmqMQfBrejdtr54mzx+5dPlCl8Wjb7fK1x3kZSfR+G5q5phlS/rgbjBuaNvR
cWi5/120vEFhhHVr2OhXdC+K8Q2cV9p2QoOyQqcWf5WeRJKifpaXJfyemNM7YjPu
2de9Lk6T2F7H/mYMg6db3Nmr/tW/K/OgOvSkMtSw6wZ/1E4DiOhtiturvh4dwuaE
+LnSNky7ggMJASG93vLx5PRJFKuGoJ9uaKOTslEha9jxycrkXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJAdgroFAvz6uV3pidgGITXnNaIFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz
NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvZjQwNzEzYWYtNGE4YS0z
YjYzLTgyMTktODU1MmE5ZTZiZTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2
MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj
NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz
NTUyYzRjOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7NgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALwlTdMkvA6DqMU92qZphD5wXLAUPc9PTa9nMesDhGlG80v2/SsLvcxf
Vl1CA0wke2knQoNjhmEq6+x6+nf/yKfcXV6qwJUN/YrFoqiuoiApS2G8u1SFV+pX
/eCDQyYUa1SEqRRL6k0yIWqxuKSeZ/DOAE9W+Ziwy4zFTDYaQqT0KcX+PhhnA1L6
3d0avAbwvW5AKH2HH39kXXpImZ75k6b1srGIoJQ2thw6/FAmHfzk5N0kHmwDm5zk
gRHBDZgiHOYqgPD/ONH7pam0NzY9+0Nz63CmStejMstSfgXn/pl7SKIse23PTdT8
zdUJJKKBjAMR24FplI5i1ipQdOXU3H8=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:57:05 2025 by rpki-client