Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/27c6c150-4348-3c20-90f5-4786f24b2bff.roa
File: 27c6c150-4348-3c20-90f5-4786f24b2bff.roa (raw, json)
Hash identifier: ytmtXAe24k7Sj3gf2QJBl8P36XB/XCo36AjFQnIhdHw=
Subject key identifier: 20:EF:E7:C3:C8:D0:60:2A:40:39:04:8F:BF:33:9F:D4:3E:5E:49:07
Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial: 010D0C9F43285848159FF9D8B5EEB353D057E500
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/27c6c150-4348-3c20-90f5-4786f24b2bff.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 28753
IP address blocks: 23.19.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:f9:d8:b5:ee:b3:53:d0:57:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=905baf96-e400-4bbe-a488-e7bcc016b601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3d:5e:3e:c3:f1:d0:a0:25:0b:a6:ec:b8:2c:
97:e9:21:3c:fd:03:65:21:2a:1d:b7:8b:45:d7:64:
7a:54:5f:92:8a:21:3a:0f:ca:eb:52:a9:2e:1b:6e:
89:48:f5:83:2c:d1:68:39:6a:cb:3f:f5:50:61:d8:
c2:98:03:79:d0:05:00:ad:97:26:74:c9:42:9d:bc:
d8:a5:86:9e:e7:a6:9d:1d:99:37:56:e1:a0:04:33:
e7:f2:8f:e9:40:8f:61:2d:93:21:a1:cc:0e:2f:53:
ce:8b:1e:5f:aa:a0:44:04:9d:76:15:15:02:5a:30:
eb:5b:5d:d8:d9:ac:6e:54:ce:11:c0:59:c9:18:0f:
0d:69:d9:91:de:cc:9a:a6:ca:ce:e4:d7:d8:ef:25:
bb:26:61:71:26:07:a9:eb:d5:13:6b:25:9c:94:8c:
c9:bb:35:43:8e:b8:c6:a5:27:1b:40:73:60:16:72:
2b:10:5b:14:81:96:8a:30:8c:f4:1c:1e:63:75:56:
69:20:da:9d:4a:a4:98:8c:36:42:18:a6:42:6b:4d:
ea:14:9a:2f:c0:f8:33:00:31:a4:2b:3b:c7:40:3c:
b2:24:8c:cd:18:29:97:49:05:d1:db:a8:93:86:ed:
37:85:81:7c:b7:89:36:cd:97:3d:53:f4:50:b3:26:
31:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EF:E7:C3:C8:D0:60:2A:40:39:04:8F:BF:33:9F:D4:3E:5E:49:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/27c6c150-4348-3c20-90f5-4786f24b2bff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
X509v3 Authority Key Identifier:
keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.19.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:9a:4e:0c:6d:43:9d:8c:6a:78:21:1d:dd:08:36:2d:27:15:
40:67:33:e9:05:ab:6e:71:08:b9:09:25:eb:4f:98:48:91:1e:
d8:c0:f4:ce:b6:31:df:08:a8:0f:ff:86:f9:54:64:57:6f:3e:
c7:8f:88:82:fd:f2:1c:a5:25:31:01:79:22:f8:36:10:77:d0:
76:1b:5b:89:61:8d:c4:9b:d8:5f:f7:af:58:4f:29:58:19:84:
6d:78:e5:1b:f9:e5:36:8c:d6:a5:e6:49:b1:0a:38:f0:fb:50:
20:d8:3d:04:49:63:18:59:e5:49:5d:03:f8:99:62:0a:3c:21:
98:24:d7:2e:42:94:6b:9c:c0:6d:76:0e:41:32:fc:03:83:db:
a1:ee:64:9a:b5:d9:5f:06:a0:30:e6:3a:13:7b:3c:50:10:c8:
6b:f5:63:d3:94:2f:66:48:5f:34:a4:c2:07:ae:a8:06:bc:cc:
2a:f1:84:92:72:f9:48:dd:69:78:96:70:2c:9b:9d:02:82:69:
42:cd:2a:3a:95:cb:4a:9e:4b:17:5f:1d:e8:8b:e3:08:f6:e7:
af:73:32:6f:54:dd:b5:ca:39:8f:df:83:39:37:d9:f7:71:80:
8f:63:b1:f5:b2:8d:e1:a4:ae:0b:95:0a:19:f9:f8:31:4a:5e:
f7:54:1e:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgVn/nYte6zU9BX5QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5
OTdkMB4XDTI0MTIwMzE0MDA1MloXDTI1MDMwMzE0MDA1MlowLzEtMCsGA1UEAxMk
OTA1YmFmOTYtZTQwMC00YmJlLWE0ODgtZTdiY2MwMTZiNjAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiD1ePsPx0KAlC6bsuCyX6SE8/QNlISodt4tF
12R6VF+SiiE6D8rrUqkuG26JSPWDLNFoOWrLP/VQYdjCmAN50AUArZcmdMlCnbzY
pYae56adHZk3VuGgBDPn8o/pQI9hLZMhocwOL1POix5fqqBEBJ12FRUCWjDrW13Y
2axuVM4RwFnJGA8NadmR3syapsrO5NfY7yW7JmFxJgep69UTayWclIzJuzVDjrjG
pScbQHNgFnIrEFsUgZaKMIz0HB5jdVZpINqdSqSYjDZCGKZCa03qFJovwPgzADGk
KzvHQDyyJIzNGCmXSQXR26iThu03hYF8t4k2zZc9U/RQsyYxswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCDv58PI0GAqQDkEj78zn9Q+XkkHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy
ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMjdjNmMxNTAtNDM0OC0z
YzIwLTkwZjUtNDc4NmYyNGIyYmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx
YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5
OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy
ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxM0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJOaTgxtQ52ManghHd0INi0nFUBnM+kFq25xCLkJJetPmEiRHtjA9M62
Md8IqA//hvlUZFdvPsePiIL98hylJTEBeSL4NhB30HYbW4lhjcSb2F/3r1hPKVgZ
hG145Rv55TaM1qXmSbEKOPD7UCDYPQRJYxhZ5UldA/iZYgo8IZgk1y5ClGucwG12
DkEy/AOD26HuZJq12V8GoDDmOhN7PFAQyGv1Y9OUL2ZIXzSkwgeuqAa8zCrxhJJy
+UjdaXiWcCybnQKCaULNKjqVy0qeSxdfHeiL4wj2569zMm9U3bXKOY/fgzk32fdx
gI9jsfWyjeGkrguVChn5+DFKXvdUHh0=
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:18:20 2025 by rpki-client