Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/21b527bb-1915-3e52-a580-189ca74790aa.roa
File: 21b527bb-1915-3e52-a580-189ca74790aa.roa (raw, json)
Hash identifier: weHtJcqZQ+fOoq2ndZdNhWyHNDqLqcW+7RQ3FHfBqE4=
Subject key identifier: 1F:C4:DC:04:D5:AD:F6:62:B2:40:29:23:89:08:E4:F3:B2:24:76:AC
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F432858487CEB3BCB6D8ACB19C3906590
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/21b527bb-1915-3e52-a580-189ca74790aa.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 393249
IP address blocks: 207.23.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:3b:cb:6d:8a:cb:19:c3:90:65:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=29181b5d-71d0-4b70-9a5e-53ddc4497095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ce:ba:63:73:ed:6c:d8:d6:c6:f9:8f:40:e5:
93:76:53:f5:63:33:b3:3b:65:b7:9c:0a:03:6c:78:
87:ab:37:d1:9a:24:6d:ae:c1:96:6d:28:9e:f8:14:
aa:f7:ea:f3:1a:95:99:68:62:b2:e6:46:e2:78:d0:
59:2d:cc:16:81:59:fc:9d:27:dd:01:b9:9b:4c:28:
bf:b2:93:b1:d7:33:0f:f7:88:f1:6d:25:07:2c:ee:
6e:c5:44:37:10:f5:2d:63:06:01:16:b7:3f:69:e9:
09:ea:cb:16:67:e7:63:63:ca:98:a2:e4:80:82:ae:
b7:27:dc:43:cd:3f:3c:62:6e:3e:1a:c1:bc:35:be:
bb:82:0a:86:0c:bb:b2:c1:6a:a2:f7:ea:12:58:96:
38:05:9f:2f:24:77:d8:18:ab:c6:fd:a2:27:ed:ab:
55:e6:20:a5:37:c6:38:27:d6:65:b5:db:dd:73:ae:
bb:64:ca:5d:e4:9f:82:8b:1d:cb:28:be:02:26:9a:
bb:56:54:49:97:de:e9:b7:ac:87:7e:9e:26:ee:f5:
5e:f8:91:1f:8b:bc:eb:28:99:02:9b:a3:eb:00:36:
2b:7b:38:d6:c9:9b:e9:c5:04:a3:5f:b8:9d:28:9a:
57:7c:37:e0:61:2e:89:96:d6:a8:23:a3:b1:37:66:
7f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C4:DC:04:D5:AD:F6:62:B2:40:29:23:89:08:E4:F3:B2:24:76:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/21b527bb-1915-3e52-a580-189ca74790aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
207.23.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:99:3b:c3:ca:2a:f4:8d:47:bd:01:a8:98:7a:22:e0:e7:ba:
d6:5a:68:8f:4d:cb:bb:bb:68:1a:d9:d7:16:37:92:97:0d:48:
d9:5b:6a:2f:05:18:0b:e3:1d:42:fc:88:fc:3f:3f:28:f1:4e:
6a:c5:88:24:34:2f:99:93:ee:ad:6c:d9:e8:e1:30:bb:71:68:
fd:9a:74:8c:fa:6c:c9:1a:cc:74:61:9e:97:22:4f:b4:0a:ea:
ae:60:91:78:42:7e:bd:20:e4:ae:72:dc:12:12:22:a8:b3:48:
a5:6c:6f:8c:0c:1e:50:96:50:00:bf:4d:42:f9:6e:70:8f:dc:
6a:04:e4:f1:ad:63:e3:6e:b4:48:af:86:46:aa:30:10:83:74:
e9:ad:21:47:ec:ca:4f:1d:47:13:b1:b4:6f:f9:93:cd:6d:f3:
f3:d1:70:02:2d:3a:7c:2a:4d:77:f1:09:80:f4:ad:34:b0:d6:
30:d2:7c:bb:99:73:f8:ac:47:75:f7:7f:d4:31:58:48:43:d6:
65:e8:c1:b5:01:15:d6:d8:d1:cc:35:db:c4:4e:28:12:05:71:
50:14:9d:b1:82:82:5a:eb:7e:a5:67:2a:d9:3a:c7:4e:f6:43:
49:43:ff:66:46:a4:87:c7:9f:ea:8e:2b:3b:40:e1:89:5d:a0:
ad:07:a8:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh86zvLbYrLGcOQZZAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
MjkxODFiNWQtNzFkMC00YjcwLTlhNWUtNTNkZGM0NDk3MDk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc66Y3PtbNjWxvmPQOWTdlP1YzOzO2W3nAoD
bHiHqzfRmiRtrsGWbSie+BSq9+rzGpWZaGKy5kbieNBZLcwWgVn8nSfdAbmbTCi/
spOx1zMP94jxbSUHLO5uxUQ3EPUtYwYBFrc/aekJ6ssWZ+djY8qYouSAgq63J9xD
zT88Ym4+GsG8Nb67ggqGDLuywWqi9+oSWJY4BZ8vJHfYGKvG/aIn7atV5iClN8Y4
J9Zltdvdc667ZMpd5J+Cix3LKL4CJpq7VlRJl97pt6yHfp4m7vVe+JEfi7zrKJkC
m6PrADYrezjWyZvpxQSjX7idKJpXfDfgYS6JltaoI6OxN2Z/pwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB/E3ATVrfZiskApI4kI5POyJHasMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvMjFiNTI3YmItMTkxNS0z
ZTUyLWE1ODAtMTg5Y2E3NDc5MGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzxf5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACOZO8PKKvSNR70BqJh6IuDnutZaaI9Ny7u7aBrZ1xY3kpcNSNlbai8F
GAvjHUL8iPw/PyjxTmrFiCQ0L5mT7q1s2ejhMLtxaP2adIz6bMkazHRhnpciT7QK
6q5gkXhCfr0g5K5y3BISIqizSKVsb4wMHlCWUAC/TUL5bnCP3GoE5PGtY+NutEiv
hkaqMBCDdOmtIUfsyk8dRxOxtG/5k81t8/PRcAItOnwqTXfxCYD0rTSw1jDSfLuZ
c/isR3X3f9QxWEhD1mXowbUBFdbY0cw128ROKBIFcVAUnbGCglrrfqVnKtk6x072
Q0lD/2ZGpIfHn+qOKztA4YldoK0HqKY=
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:04:51 2025 by rpki-client