Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/24d02c6c-fbff-3e17-a7ee-bdb7046a2384.roa
File: 24d02c6c-fbff-3e17-a7ee-bdb7046a2384.roa (raw, json)
Hash identifier: aYqW2vG3XQ09kpJ9QMG82YOrLRozqV5U5Ahd4st1Pi0=
Subject key identifier: 7A:91:51:A5:87:80:31:BE:2B:C0:28:9D:A2:FD:05:FF:D7:53:A7:E9
Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial: 010D0C9F43285848159FF95B7181EDA7997B1740
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/24d02c6c-fbff-3e17-a7ee-bdb7046a2384.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 30633
IP address blocks: 23.19.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:f9:5b:71:81:ed:a7:99:7b:17:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=fd747856-d5ab-439f-a763-d48dd062365a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b8:37:35:70:e7:d4:ef:40:26:76:13:c6:aa:
45:28:45:fb:fd:17:1b:73:8a:86:7b:97:65:07:ee:
45:93:a5:6a:96:dd:d7:e3:16:9e:50:70:65:ac:ed:
74:5f:54:99:eb:cd:d4:39:22:48:d2:fd:ad:2c:e0:
5d:51:5a:8e:12:fd:10:23:09:d5:58:5d:59:b4:77:
9c:7e:bd:64:fc:6b:e0:70:6f:b7:e8:b9:f5:3f:be:
34:27:3d:6a:3d:99:25:62:5f:90:a7:bb:f1:a8:5d:
85:68:8a:3d:db:17:50:2b:d7:eb:3d:e8:03:d4:05:
45:45:1d:06:2a:06:52:cf:2d:fc:24:25:02:d1:1b:
4b:50:59:0e:e2:05:f2:cf:93:d2:88:a4:03:70:96:
47:7c:68:a1:fe:6f:53:b4:74:bf:89:f4:e6:86:a3:
fc:a8:ba:d3:f1:dc:01:ec:57:63:71:3e:5e:b0:d3:
4d:ee:c4:33:d8:ee:b5:c4:5e:3c:56:53:c2:c3:b2:
93:e1:1d:1a:98:7d:a5:a9:52:2e:67:85:dc:ed:b3:
9e:65:a5:44:2e:b5:0f:0a:90:85:6a:57:1e:e0:d8:
02:51:8c:e3:fb:47:d1:95:c1:0c:f7:dc:d4:6c:d9:
b9:9a:9d:99:78:8c:00:af:a4:ba:c2:36:bb:5a:90:
a7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:91:51:A5:87:80:31:BE:2B:C0:28:9D:A2:FD:05:FF:D7:53:A7:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/24d02c6c-fbff-3e17-a7ee-bdb7046a2384.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
X509v3 Authority Key Identifier:
keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.19.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:f5:df:fd:fc:bb:20:78:06:ff:b9:70:7c:bb:52:44:93:0d:
ad:dd:23:cd:35:c8:dd:cf:1b:17:10:26:aa:6c:70:3e:95:3a:
8f:1a:af:28:fc:52:bb:44:50:32:ee:ea:9a:85:62:25:6c:7e:
e9:f7:23:bd:d0:69:ff:16:42:7d:3e:96:67:bc:99:a5:26:f4:
7d:d2:7a:a1:95:f0:1f:6b:cc:c9:2a:35:50:fe:9d:c8:a1:15:
47:1f:1f:ef:a1:b6:36:62:00:44:4f:b3:76:b3:11:34:2f:8e:
d7:e3:ed:09:d3:cb:e5:c8:7d:f9:0e:48:d5:57:64:4e:90:b6:
42:dc:95:ba:ae:f1:75:64:2e:0f:fb:90:9b:58:fc:0a:56:16:
46:db:4c:f4:42:6a:12:51:e0:f5:82:42:7a:70:a4:23:9e:3f:
25:88:72:ee:c0:b5:09:fe:d9:6a:1b:07:93:3f:f0:a0:46:b8:
be:fa:15:04:45:c8:ea:aa:75:e8:a2:45:24:9b:2a:ba:c4:29:
14:fb:f2:ca:f1:82:0b:77:34:46:a1:26:30:09:94:2e:f9:ce:
51:35:e7:8d:ee:47:cf:9d:e9:75:90:10:99:da:b8:d1:6c:13:
be:a8:a7:79:b2:1a:be:67:2b:a2:cc:51:ae:13:08:58:fa:02:
46:e9:a4:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgVn/lbcYHtp5l7F0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5
OTdkMB4XDTI0MTIwMzE0MDA1MloXDTI1MDMwMzE0MDA1MlowLzEtMCsGA1UEAxMk
ZmQ3NDc4NTYtZDVhYi00MzlmLWE3NjMtZDQ4ZGQwNjIzNjVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLg3NXDn1O9AJnYTxqpFKEX7/Rcbc4qGe5dl
B+5Fk6Vqlt3X4xaeUHBlrO10X1SZ683UOSJI0v2tLOBdUVqOEv0QIwnVWF1ZtHec
fr1k/GvgcG+36Ln1P740Jz1qPZklYl+Qp7vxqF2FaIo92xdQK9frPegD1AVFRR0G
KgZSzy38JCUC0RtLUFkO4gXyz5PSiKQDcJZHfGih/m9TtHS/ifTmhqP8qLrT8dwB
7FdjcT5esNNN7sQz2O61xF48VlPCw7KT4R0amH2lqVIuZ4Xc7bOeZaVELrUPCpCF
alce4NgCUYzj+0fRlcEM99zUbNm5mp2ZeIwAr6S6wja7WpCndQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHqRUaWHgDG+K8AonaL9Bf/XU6fpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy
ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMjRkMDJjNmMtZmJmZi0z
ZTE3LWE3ZWUtYmRiNzA0NmEyMzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx
YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5
OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy
ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxPEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH/13/38uyB4Bv+5cHy7UkSTDa3dI801yN3PGxcQJqpscD6VOo8aryj8
UrtEUDLu6pqFYiVsfun3I73Qaf8WQn0+lme8maUm9H3SeqGV8B9rzMkqNVD+ncih
FUcfH++htjZiAERPs3azETQvjtfj7QnTy+XIffkOSNVXZE6QtkLclbqu8XVkLg/7
kJtY/ApWFkbbTPRCahJR4PWCQnpwpCOePyWIcu7AtQn+2WobB5M/8KBGuL76FQRF
yOqqdeiiRSSbKrrEKRT78srxggt3NEahJjAJlC75zlE1543uR8+d6XWQEJnauNFs
E76op3myGr5nK6LMUa4TCFj6AkbppPU=
-----END CERTIFICATE-----
Generated at Sun May 4 12:18:24 2025 by rpki-client