Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/24a6d7df-0d79-3f98-9401-87b6c45557dc.roa
File: 24a6d7df-0d79-3f98-9401-87b6c45557dc.roa (raw, json)
Hash identifier: jWYIeUFXrI1WpSLRuMN933jy4txh4VFyjYHYq85i9BA=
Subject key identifier: DB:AA:92:EF:B3:A7:EC:BF:19:C6:B0:D8:81:85:AB:DB:1A:64:8D:07
Certificate issuer: /CN=6d54b36a-c725-4c18-93e1-825afc645e2c
Certificate serial: 010D0C9F43285848239542AB580F1250A0DB8C20
Authority key identifier: 38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/24a6d7df-0d79-3f98-9401-87b6c45557dc.roa
Signing time: Sun 08 Dec 2024 14:00:51 +0000
ROA not before: Sun 08 Dec 2024 14:00:51 +0000
ROA not after: Sat 08 Mar 2025 14:00:51 +0000
asID: 396982
IP address blocks: 23.227.49.0/24 maxlen: 24
23.227.50.0/24 maxlen: 24
23.227.51.0/24 maxlen: 24
23.227.52.0/24 maxlen: 24
23.227.53.0/24 maxlen: 24
23.227.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:95:42:ab:58:0f:12:50:a0:db:8c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d54b36a-c725-4c18-93e1-825afc645e2c
Validity
Not Before: Dec 8 14:00:51 2024 GMT
Not After : Mar 8 14:00:51 2025 GMT
Subject: CN=fc1714ce-c913-4796-8b3e-5df673f093d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:78:3d:03:f9:cc:2a:06:14:40:5c:fc:b6:b0:
e3:83:e7:2d:3b:24:29:ff:17:74:f2:e8:a6:29:2c:
a6:44:6c:ae:f0:6a:e9:a8:6d:7a:6a:0d:67:11:ce:
bf:7d:ed:75:a9:c5:ff:59:8f:0f:a3:81:6e:d9:4b:
1f:15:10:b0:a3:9c:b6:43:15:f5:23:36:64:58:2d:
5b:d6:7b:c6:8c:95:0a:a7:61:14:46:79:63:aa:04:
a1:1d:d6:db:1d:96:1e:5b:6f:82:55:3b:21:4d:5a:
96:1e:44:41:9d:d1:b1:c1:92:38:0d:01:be:6e:6f:
b8:e2:9a:12:50:7a:ef:f6:7e:e8:10:d4:89:24:d6:
cb:24:0d:7f:03:be:ec:d3:b5:93:ca:0e:77:29:6a:
5e:c2:a1:20:a6:32:72:86:da:10:b5:61:dc:e4:c8:
43:f0:9b:f0:d3:2b:8e:e6:3c:32:90:f1:06:c4:fb:
7e:b2:69:93:34:9a:cc:6d:84:5c:8d:83:d8:e2:47:
ae:77:ba:99:54:1d:e0:0b:c8:6c:81:3f:1d:47:ef:
5f:22:4a:1f:eb:ec:33:a6:60:29:f5:29:b4:03:82:
77:f2:f2:d6:8f:61:61:ee:57:e6:8d:b2:a2:78:05:
13:85:a8:cd:de:69:e2:25:7b:25:d1:94:44:82:cc:
5d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AA:92:EF:B3:A7:EC:BF:19:C6:B0:D8:81:85:AB:DB:1A:64:8D:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/24a6d7df-0d79-3f98-9401-87b6c45557dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl
X509v3 Authority Key Identifier:
keyid:38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.227.49.0-23.227.53.255
23.227.55.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:1c:a6:95:51:91:e6:70:65:db:42:2f:15:e3:69:0b:dd:d9:
36:07:5b:99:6e:32:7b:7c:e7:e6:3c:5e:2b:b0:4c:74:a5:22:
76:52:1c:99:92:23:f0:b0:ae:bd:f4:ad:06:d2:2f:ce:5f:5a:
e4:5d:3d:23:62:19:8a:e0:52:9f:0e:91:58:25:2e:75:df:a5:
8f:4f:53:24:03:cc:38:a8:73:a9:44:80:a3:02:91:a1:09:e4:
33:3a:be:d6:cb:7f:68:ba:70:dc:7d:1a:8d:2c:a7:ef:b8:48:
90:1b:a6:c1:0c:7a:75:75:0f:3d:a6:68:29:d0:23:c9:ec:21:
14:e0:2d:e8:ab:84:1f:11:75:9c:5a:8e:18:e0:cb:8a:5a:1c:
d3:fe:86:c7:42:01:c1:2a:a3:ea:91:56:ee:d7:50:9e:b0:09:
b4:3e:2f:04:cd:18:a8:3c:60:ab:87:3f:38:93:e1:52:51:ba:
47:43:2f:03:11:d3:55:2d:01:2d:17:30:1a:8d:c7:72:d2:a6:
06:f2:6f:af:0f:c2:e0:3d:fb:cb:3b:99:7c:d2:53:3c:71:90:
b4:10:3a:b2:b1:c7:a9:bb:d4:d3:df:34:b8:f3:ec:0b:ff:5d:
ab:ca:74:0e:40:72:42:04:22:c8:b1:32:2f:6c:15:9d:cf:c5:
80:cf:9b:08
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEgjlUKrWA8SUKDbjCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ1NGIzNmEtYzcyNS00YzE4LTkzZTEtODI1YWZjNjQ1
ZTJjMB4XDTI0MTIwODE0MDA1MVoXDTI1MDMwODE0MDA1MVowLzEtMCsGA1UEAxMk
ZmMxNzE0Y2UtYzkxMy00Nzk2LThiM2UtNWRmNjczZjA5M2QzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsng9A/nMKgYUQFz8trDjg+ctOyQp/xd08uim
KSymRGyu8GrpqG16ag1nEc6/fe11qcX/WY8Po4Fu2UsfFRCwo5y2QxX1IzZkWC1b
1nvGjJUKp2EURnljqgShHdbbHZYeW2+CVTshTVqWHkRBndGxwZI4DQG+bm+44poS
UHrv9n7oENSJJNbLJA1/A77s07WTyg53KWpewqEgpjJyhtoQtWHc5MhD8Jvw0yuO
5jwykPEGxPt+smmTNJrMbYRcjYPY4keud7qZVB3gC8hsgT8dR+9fIkof6+wzpmAp
9Sm0A4J38vLWj2Fh7lfmjbKieAUThajN3mniJXsl0ZREgsxdBQIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFNuqku+zp+y/Gcaw2IGFq9saZI0HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82ZDU0
YjM2YS1jNzI1LTRjMTgtOTNlMS04MjVhZmM2NDVlMmMvMjRhNmQ3ZGYtMGQ3OS0z
Zjk4LTk0MDEtODdiNmM0NTU1N2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmQ1NGIzNmEtYzcyNS00YzE4LTkz
ZTEtODI1YWZjNjQ1ZTJjLzZkNTRiMzZhLWM3MjUtNGMxOC05M2UxLTgyNWFmYzY0
NWUyYy5jcmwwHwYDVR0jBBgwFoAUOFjVJZUYEHsaUpZxvbiCe8GGfbIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82ZDU0YjM2YS1jNzI1LTRjMTgtOTNlMS04MjVh
ZmM2NDVlMmMuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAAX4zED
BAEX4zQDBAAX4zcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAfxymlVGR5nBl20IvFeNpC93ZNgdbmW4ye3zn
5jxeK7BMdKUidlIcmZIj8LCuvfStBtIvzl9a5F09I2IZiuBSnw6RWCUudd+lj09T
JAPMOKhzqUSAowKRoQnkMzq+1st/aLpw3H0ajSyn77hIkBumwQx6dXUPPaZoKdAj
yewhFOAt6KuEHxF1nFqOGODLiloc0/6Gx0IBwSqj6pFW7tdQnrAJtD4vBM0YqDxg
q4c/OJPhUlG6R0MvAxHTVS0BLRcwGo3HctKmBvJvrw/C4D37yzuZfNJTPHGQtBA6
srHHqbvU0980uPPsC/9dq8p0DkByQgQiyLEyL2wVnc/FgM+bCA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:21:50 2025 by rpki-client