Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/cf57be58-bf9f-36ed-8c8d-829a5f932254.roa
File: cf57be58-bf9f-36ed-8c8d-829a5f932254.roa (raw, json)
Hash identifier: Y0a8twsaCNIT0Nm41h8JC+JNOaJszvc5F79gQbQLL0A=
Subject key identifier: 89:C4:72:AC:56:69:3B:80:87:C1:BA:66:5D:7D:62:56:A9:71:95:07
Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
Certificate serial: 010D0C9F4328584886B0772A193441CE12C6C580
Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/cf57be58-bf9f-36ed-8c8d-829a5f932254.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 23428
IP address blocks: 23.136.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:77:2a:19:34:41:ce:12:c6:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=a2ae5443-2d62-4a2c-9538-e5d481e4443a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:44:0d:a8:fc:e3:a7:17:9d:fd:55:ea:0a:16:
c4:84:ce:e9:9f:b1:a2:51:64:5c:25:de:9b:0f:55:
cb:f8:f0:7d:55:95:26:5f:79:fe:4a:b6:e9:af:5b:
9e:09:62:cf:ad:9c:76:75:83:ac:44:af:0f:19:f2:
8a:e9:f2:19:fd:bd:d3:39:8b:91:ce:c5:9b:1d:1c:
30:91:4a:59:d7:d7:11:1d:13:fc:27:36:2a:09:22:
71:6a:89:5f:b2:4f:b9:98:e8:99:93:18:e4:82:7f:
c4:5f:62:f0:8e:8c:c5:18:71:df:2a:db:eb:fa:9b:
53:65:63:bd:27:ee:e5:39:9d:59:b3:0c:e3:8d:e7:
a9:e8:0b:c4:6e:1c:14:e5:74:b3:69:3a:ea:b7:96:
8a:4d:a8:23:f9:23:4a:b2:56:5a:f4:85:90:e2:01:
20:65:26:bb:d4:08:4a:fa:0b:65:33:2d:f5:8b:b6:
ee:dd:bd:b7:39:8b:2a:11:8a:bd:31:59:24:bd:c4:
e7:94:c7:31:35:36:8b:df:d6:8e:1a:bb:41:77:42:
ac:5a:52:97:6b:6b:3c:db:d0:9d:06:3c:95:30:48:
5b:22:41:d2:03:0f:ca:46:0f:28:65:47:39:e0:35:
27:eb:15:99:6e:a5:64:23:3b:97:0c:23:f3:f9:f6:
87:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C4:72:AC:56:69:3B:80:87:C1:BA:66:5D:7D:62:56:A9:71:95:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/cf57be58-bf9f-36ed-8c8d-829a5f932254.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl
X509v3 Authority Key Identifier:
keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.136.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:a8:04:b6:b2:6e:89:4d:b5:7b:fc:0d:56:ac:e2:f0:89:46:
66:3e:86:aa:a4:fe:ce:dc:83:8d:a2:73:fa:dd:d3:5c:a9:2c:
b1:5a:f9:a2:0d:13:7b:0b:bf:63:b0:ee:eb:e0:ec:d2:44:2c:
b9:fa:7c:7e:86:27:06:99:b7:bf:e6:a8:6b:bb:3e:2c:f6:94:
c2:06:07:8f:cb:16:cc:4e:22:b7:fa:96:ed:f1:06:8e:56:a1:
2d:27:40:9a:4d:cf:bf:e6:4c:7a:79:26:86:82:b9:5d:1d:6c:
bd:a7:e4:c1:7d:ba:74:83:09:8d:b8:ab:b1:52:e4:87:8a:85:
05:da:a9:a1:a5:c0:53:c9:c3:1a:f6:43:85:5b:53:34:1c:fd:
9c:18:4d:44:86:6a:bf:d1:55:b0:70:20:3b:ed:bf:cb:a1:32:
d7:a0:c1:29:33:60:fb:d1:ab:b1:58:ce:f9:03:cb:08:3b:a6:
ed:0e:1a:5e:b7:da:6e:dd:06:51:c2:02:72:33:e2:1c:4a:42:
df:f2:61:d0:b8:fb:2f:e0:e2:32:ed:c9:1d:7d:14:9a:61:cd:
a4:3c:56:a8:8f:0f:bc:dd:7a:e6:e0:94:fa:51:04:d7:61:13:
ca:8f:c5:45:ca:ea:df:2f:04:ef:b4:42:ef:2f:d2:c3:46:c3:
96:68:09:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiGsHcqGTRBzhLGxYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl
NTRkMB4XDTI1MDExMzAyMDA0MFoXDTI1MDQxMzAxMDA0MFowLzEtMCsGA1UEAxMk
YTJhZTU0NDMtMmQ2Mi00YTJjLTk1MzgtZTVkNDgxZTQ0NDNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEQNqPzjpxed/VXqChbEhM7pn7GiUWRcJd6b
D1XL+PB9VZUmX3n+Srbpr1ueCWLPrZx2dYOsRK8PGfKK6fIZ/b3TOYuRzsWbHRww
kUpZ19cRHRP8JzYqCSJxaolfsk+5mOiZkxjkgn/EX2LwjozFGHHfKtvr+ptTZWO9
J+7lOZ1Zswzjjeep6AvEbhwU5XSzaTrqt5aKTagj+SNKslZa9IWQ4gEgZSa71AhK
+gtlMy31i7bu3b23OYsqEYq9MVkkvcTnlMcxNTaL39aOGrtBd0KsWlKXa2s829Cd
BjyVMEhbIkHSAw/KRg8oZUc54DUn6xWZbqVkIzuXDCPz+faHJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFInEcqxWaTuAh8G6Zl19YlapcZUHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw
NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvY2Y1N2JlNTgtYmY5Zi0z
NmVkLThjOGQtODI5YTVmOTMyMjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli
MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj
ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk
MjkxY2U1NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4jpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABqoBLaybolNtXv8DVas4vCJRmY+hqqk/s7cg42ic/rd01ypLLFa+aIN
E3sLv2Ow7uvg7NJELLn6fH6GJwaZt7/mqGu7Piz2lMIGB4/LFsxOIrf6lu3xBo5W
oS0nQJpNz7/mTHp5JoaCuV0dbL2n5MF9unSDCY24q7FS5IeKhQXaqaGlwFPJwxr2
Q4VbUzQc/ZwYTUSGar/RVbBwIDvtv8uhMtegwSkzYPvRq7FYzvkDywg7pu0OGl63
2m7dBlHCAnIz4hxKQt/yYdC4+y/g4jLtyR19FJphzaQ8VqiPD7zdeubglPpRBNdh
E8qPxUXK6t8vBO+0Qu8v0sNGw5ZoCWY=
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:05:14 2025 by rpki-client