Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7e2579b9-7f76-34c6-bb4b-2f51a690df2f.roa
File: 7e2579b9-7f76-34c6-bb4b-2f51a690df2f.roa (raw, json)
Hash identifier: CE1htVCQcnsWwSLLSid07K+ad1PQovs28AxoU/cZckc=
Subject key identifier: 12:25:91:7A:1B:33:4C:C0:24:18:A3:85:6E:1B:60:B2:96:6C:06:BC
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F4328584835BA955BB99AEB696AB41078
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7e2579b9-7f76-34c6-bb4b-2f51a690df2f.roa
Signing time: Sun 15 Dec 2024 02:00:39 +0000
ROA not before: Sun 15 Dec 2024 02:00:39 +0000
ROA not after: Sat 15 Mar 2025 01:00:39 +0000
asID: 174
IP address blocks: 23.237.2.0/23 maxlen: 23
23.237.4.0/23 maxlen: 23
2001:49f0:d069::/48 maxlen: 48
2001:49f0:d06a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:35:ba:95:5b:b9:9a:eb:69:6a:b4:10:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Dec 15 02:00:39 2024 GMT
Not After : Mar 15 01:00:39 2025 GMT
Subject: CN=9fcb3725-a38f-4392-9eaa-a8668c2dc235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:af:db:02:df:b9:e1:9a:84:90:db:5d:6f:0f:
29:fe:57:5a:43:48:10:e9:6d:a2:64:0e:b8:93:e9:
a1:1b:ed:39:72:ae:1b:4b:60:5b:c3:29:e1:e8:02:
71:4f:12:a5:2a:cf:1e:3f:bf:f1:42:10:c3:52:d1:
10:a5:65:e7:f7:35:2a:31:d8:5f:50:0d:b1:ab:15:
a8:26:97:07:bd:13:1d:ff:0a:4b:71:a7:92:f3:33:
12:95:34:f0:df:f9:67:5c:cf:f2:81:e2:9c:a5:72:
43:18:bd:1d:22:a6:b1:77:28:ca:6f:ae:ba:83:2c:
9f:70:ad:32:60:bb:85:96:1b:f7:04:ec:86:6b:b5:
21:9b:b5:04:c2:49:65:68:77:7e:1e:1a:19:e6:d3:
28:f3:ff:6a:05:96:de:5b:fb:84:45:52:80:75:15:
26:75:67:48:88:00:4f:9b:8f:ad:3a:b2:51:d2:a0:
dc:af:6d:6d:7f:40:26:fb:a0:5d:80:95:f0:d1:83:
0a:b1:d0:93:ae:06:a2:8c:7f:29:74:ca:dc:b6:f5:
da:b6:cb:81:f3:a3:3c:7c:1d:f9:92:6e:c8:83:6d:
6f:48:c7:8d:cb:e2:66:15:6b:2d:1f:b5:fe:d7:9a:
40:a6:11:cc:b8:73:0b:0f:e9:8b:7e:87:74:18:2f:
68:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:25:91:7A:1B:33:4C:C0:24:18:A3:85:6E:1B:60:B2:96:6C:06:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7e2579b9-7f76-34c6-bb4b-2f51a690df2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
23.237.2.0-23.237.5.255
IPv6:
2001:49f0:d069::-2001:49f0:d06a:ffff:ffff:ffff:ffff:ffff
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
df:dc:55:c5:72:b5:65:3a:8e:ad:4c:30:0a:b1:05:33:90:00:
62:8d:7e:11:02:10:d1:8f:94:00:bc:84:54:c1:9e:45:3a:86:
02:02:6c:ae:c0:a5:9a:f5:4d:7f:24:07:05:f1:e9:4f:44:ee:
28:f5:f2:20:74:01:22:5c:b1:96:02:0e:f3:30:a8:c7:41:64:
f4:c6:32:f8:69:3f:f1:18:d4:f0:2a:4a:25:97:ac:a3:3b:d9:
a3:ed:3e:ef:d0:b5:f9:bd:10:1d:ee:40:12:7f:9a:53:73:da:
21:ff:f3:1a:0c:c8:bd:54:d4:86:7d:66:9c:2c:ff:6a:e8:c1:
aa:68:24:42:2d:fa:e9:76:09:d3:86:92:13:67:2c:2a:c2:1d:
6e:cc:6a:8f:fc:c9:25:5b:9b:14:c4:26:f3:ae:92:d3:76:bb:
79:33:5c:6f:01:02:b6:d6:1f:c7:c4:a0:c6:d7:e7:94:de:3e:
db:90:f4:81:a5:03:f4:80:73:2c:1d:af:c3:09:60:77:1b:a5:
34:75:67:8e:bb:3a:97:e1:e1:6b:e0:20:ee:33:02:bb:6c:1b:
75:a2:56:34:52:d3:23:62:4e:03:a0:f8:2b:21:38:5c:55:18:
28:df:b7:a0:b3:2e:b3:07:d0:5a:85:75:47:10:0e:09:9b:3c:
0a:83:f4:37
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWEg1upVbuZrraWq0EHgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI0MTIxNTAyMDAzOVoXDTI1MDMxNTAxMDAzOVowLzEtMCsGA1UEAxMk
OWZjYjM3MjUtYTM4Zi00MzkyLTllYWEtYTg2NjhjMmRjMjM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgq/bAt+54ZqEkNtdbw8p/ldaQ0gQ6W2iZA64
k+mhG+05cq4bS2Bbwynh6AJxTxKlKs8eP7/xQhDDUtEQpWXn9zUqMdhfUA2xqxWo
JpcHvRMd/wpLcaeS8zMSlTTw3/lnXM/ygeKcpXJDGL0dIqaxdyjKb666gyyfcK0y
YLuFlhv3BOyGa7Uhm7UEwkllaHd+HhoZ5tMo8/9qBZbeW/uERVKAdRUmdWdIiABP
m4+tOrJR0qDcr21tf0Am+6BdgJXw0YMKsdCTrgaijH8pdMrctvXatsuB86M8fB35
km7Ig21vSMeNy+JmFWstH7X+15pAphHMuHMLD+mLfod0GC9o3wIDAQABo4IDeTCC
A3UwHQYDVR0OBBYEFBIlkXobM0zAJBijhW4bYLKWbAa8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvN2UyNTc5YjktN2Y3Ni0z
NGM2LWJiNGItMmY1MWE2OTBkZjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAUBAIAATAOMAwDBAEX7QID
BAEX7QQwGgQCAAIwFDASAwcAIAFJ8NBpAwcAIAFJ8NBqMFQGA1UdIAEB/wRKMEgw
RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv
cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAN/cVcVy
tWU6jq1MMAqxBTOQAGKNfhECENGPlAC8hFTBnkU6hgICbK7ApZr1TX8kBwXx6U9E
7ij18iB0ASJcsZYCDvMwqMdBZPTGMvhpP/EY1PAqSiWXrKM72aPtPu/Qtfm9EB3u
QBJ/mlNz2iH/8xoMyL1U1IZ9Zpws/2rowapoJEIt+ul2CdOGkhNnLCrCHW7Mao/8
ySVbmxTEJvOuktN2u3kzXG8BArbWH8fEoMbX55TePtuQ9IGlA/SAcywdr8MJYHcb
pTR1Z467Opfh4WvgIO4zArtsG3WiVjRS0yNiTgOg+CshOFxVGCjft6CzLrMH0FqF
dUcQDgmbPAqD9Dc=
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:39:58 2025 by rpki-client