Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/f07cede1-aba9-36ee-902d-7cd75fbcbc82.roa
File: f07cede1-aba9-36ee-902d-7cd75fbcbc82.roa (raw, json)
Hash identifier: eHHFy1ajy88nmvTXfaUO5Q8uyiiA5xJfly5bpzeECME=
Subject key identifier: DD:63:78:F9:69:E0:56:36:87:4C:56:13:3D:46:3C:8C:F5:34:8C:6A
Certificate issuer: /CN=97e60b77-17e3-4250-9bc8-b5e7664a320a
Certificate serial: 010D0C9F43285848828098DF2BE2AC97D7E90300
Authority key identifier: B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/f07cede1-aba9-36ee-902d-7cd75fbcbc82.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 54552
IP address blocks: 23.138.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:98:df:2b:e2:ac:97:d7:e9:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97e60b77-17e3-4250-9bc8-b5e7664a320a
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=8097df09-e55f-48bf-b282-f226d396963b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a5:86:95:4d:0e:ac:25:b6:78:2c:67:cf:be:
7d:a1:56:66:1a:f5:c6:6e:f0:5d:1a:68:c5:47:fa:
49:c9:de:9b:61:10:9a:5d:37:0e:eb:c7:3f:03:f0:
29:08:96:53:f5:28:30:b5:54:38:79:b4:9e:5f:de:
48:fd:81:ad:8b:82:fb:06:8b:00:d7:4c:dc:09:5c:
37:d6:7e:54:b0:15:fa:be:eb:75:ad:07:7e:63:ca:
9c:c9:a1:c4:ad:1c:48:66:0a:3b:51:4d:aa:09:19:
6e:2a:26:6b:73:99:8b:8d:5a:24:03:08:66:fb:80:
ff:33:81:0a:00:2f:2d:09:a1:9d:cc:88:02:70:7b:
43:c6:6c:c7:fa:23:01:aa:87:53:51:f3:5c:e7:21:
8d:08:48:74:a6:5a:96:ee:de:4b:38:55:a6:58:4d:
b2:6a:88:d9:9f:ed:99:24:e1:dc:ba:ab:c9:53:74:
2d:0a:d2:fb:3a:d6:7a:39:49:a2:64:df:e9:5a:09:
04:7f:e9:aa:f3:3f:12:97:40:02:c2:dc:b9:c4:62:
2a:c4:b5:65:a3:49:42:73:39:ec:2a:ab:da:a4:86:
94:e2:45:03:d9:d6:40:69:93:2c:54:c1:5e:b4:00:
1b:33:c6:68:e1:53:26:33:6d:b4:a0:d0:eb:d6:bc:
bd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:63:78:F9:69:E0:56:36:87:4C:56:13:3D:46:3C:8C:F5:34:8C:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/f07cede1-aba9-36ee-902d-7cd75fbcbc82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.crl
X509v3 Authority Key Identifier:
keyid:B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.138.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:42:d7:77:70:73:7e:2f:a8:cf:8a:1d:b3:24:b3:ca:b0:f3:
64:4a:3c:3b:ea:17:6b:57:3e:39:36:20:07:5a:e8:86:16:95:
d5:38:18:e5:aa:6e:1b:69:26:bd:c3:26:28:c4:a3:14:1e:f8:
91:fb:aa:21:45:2e:e4:77:a5:41:44:66:1b:ac:ef:b5:d5:89:
29:0a:60:b8:57:74:2b:19:b3:a9:7d:aa:cc:4a:37:28:84:58:
93:b2:99:6c:ec:58:76:53:17:38:0e:89:25:25:72:2e:59:46:
e1:84:d2:25:bb:6d:38:08:39:63:17:30:60:e4:c6:c9:6a:69:
9f:1f:93:c4:b6:91:99:65:fc:b5:ad:26:ab:84:64:5f:a1:c5:
2e:4f:03:14:79:b6:0f:39:24:05:b5:28:6d:ee:e2:75:16:2d:
d0:98:75:76:fa:09:1f:c7:ae:d6:a4:78:5e:01:c5:4e:b8:dc:
8c:c9:51:46:af:e2:30:9a:8f:a2:d3:ed:07:b1:37:22:33:ac:
f8:8a:e2:ed:81:33:d5:a7:b5:36:5a:d7:68:96:c8:c5:98:72:
4e:6a:dd:11:16:dd:54:1e:37:43:60:74:5c:78:74:e4:46:1b:
d3:93:23:00:71:e7:d5:05:f0:92:b0:e5:42:9a:d7:16:98:22:
12:64:6f:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiCgJjfK+Ksl9fpAwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTdlNjBiNzctMTdlMy00MjUwLTliYzgtYjVlNzY2NGEz
MjBhMB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ODA5N2RmMDktZTU1Zi00OGJmLWIyODItZjIyNmQzOTY5NjNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6WGlU0OrCW2eCxnz759oVZmGvXGbvBdGmjF
R/pJyd6bYRCaXTcO68c/A/ApCJZT9SgwtVQ4ebSeX95I/YGti4L7BosA10zcCVw3
1n5UsBX6vut1rQd+Y8qcyaHErRxIZgo7UU2qCRluKiZrc5mLjVokAwhm+4D/M4EK
AC8tCaGdzIgCcHtDxmzH+iMBqodTUfNc5yGNCEh0plqW7t5LOFWmWE2yaojZn+2Z
JOHcuqvJU3QtCtL7OtZ6OUmiZN/pWgkEf+mq8z8Sl0ACwty5xGIqxLVlo0lCczns
KqvapIaU4kUD2dZAaZMsVMFetAAbM8Zo4VMmM220oNDr1ry9jQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN1jePlp4FY2h0xWEz1GPIz1NIxqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85N2U2
MGI3Ny0xN2UzLTQyNTAtOWJjOC1iNWU3NjY0YTMyMGEvZjA3Y2VkZTEtYWJhOS0z
NmVlLTkwMmQtN2NkNzVmYmNiYzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTdlNjBiNzctMTdlMy00MjUwLTli
YzgtYjVlNzY2NGEzMjBhLzk3ZTYwYjc3LTE3ZTMtNDI1MC05YmM4LWI1ZTc2NjRh
MzIwYS5jcmwwHwYDVR0jBBgwFoAUuDyKvqqk837fXRUqBDrtbKGEtlMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85N2U2MGI3Ny0xN2UzLTQyNTAtOWJjOC1iNWU3
NjY0YTMyMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4qQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACZC13dwc34vqM+KHbMks8qw82RKPDvqF2tXPjk2IAda6IYWldU4GOWq
bhtpJr3DJijEoxQe+JH7qiFFLuR3pUFEZhus77XViSkKYLhXdCsZs6l9qsxKNyiE
WJOymWzsWHZTFzgOiSUlci5ZRuGE0iW7bTgIOWMXMGDkxslqaZ8fk8S2kZll/LWt
JquEZF+hxS5PAxR5tg85JAW1KG3u4nUWLdCYdXb6CR/HrtakeF4BxU643IzJUUav
4jCaj6LT7QexNyIzrPiK4u2BM9WntTZa12iWyMWYck5q3REW3VQeN0NgdFx4dORG
G9OTIwBx59UF8JKw5UKa1xaYIhJkb/4=
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:41:46 2025 by rpki-client