Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/9305f653-4589-3b05-9b07-a986191aeaaa.roa
File: 9305f653-4589-3b05-9b07-a986191aeaaa.roa (raw, json)
Hash identifier: 9JBrqP+TPAsFKAUyiMEjc+2HdOWtSwa/T+SzB3/eakA=
Subject key identifier: 29:5E:2C:DF:DE:2F:EC:FD:97:3C:A2:94:21:AE:21:74:79:38:69:4C
Certificate issuer: /CN=cc664683-d58e-4d26-8cf1-e5f5c5dc24c2
Certificate serial: 010D0C9F432858491C977A0B6F293D7480848E20
Authority key identifier: D0:65:B9:1A:8B:5E:DD:F3:FA:1A:9C:17:3D:BA:C6:E1:DB:E4:69:BF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/9305f653-4589-3b05-9b07-a986191aeaaa.roa
Signing time: Fri 07 Mar 2025 18:41:40 +0000
ROA not before: Fri 07 Mar 2025 18:41:40 +0000
ROA not after: Thu 05 Jun 2025 17:41:40 +0000
asID: 216360
IP address blocks: 23.185.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1c:97:7a:0b:6f:29:3d:74:80:84:8e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc664683-d58e-4d26-8cf1-e5f5c5dc24c2
Validity
Not Before: Mar 7 18:41:40 2025 GMT
Not After : Jun 5 17:41:40 2025 GMT
Subject: CN=31932146-df68-43fd-b5ba-e3260b070323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:54:0c:0e:d8:ee:b9:96:2c:7f:7e:38:02:f4:
f1:ce:2b:d7:e1:b0:ed:85:68:97:6f:3f:7b:ae:59:
d1:92:62:d1:75:06:79:03:19:ce:f7:44:c5:aa:db:
36:20:33:98:a2:0d:39:44:27:46:70:46:35:ad:d6:
07:c8:e6:02:eb:2f:3b:e8:07:fd:4e:05:e2:d3:f3:
b8:cc:b8:7d:62:e5:0c:58:75:4b:93:e2:35:bf:8b:
50:df:de:0c:bd:60:1c:93:81:1d:89:5a:28:ae:e8:
3a:d5:b0:9a:fb:27:68:d5:92:7c:13:b6:13:0b:02:
7e:9d:43:bf:9e:fb:67:56:cd:e6:c2:96:a3:6f:0d:
a4:52:f4:9a:d0:17:9d:d7:7b:e2:6f:94:80:ff:13:
50:bb:9e:e7:8b:0c:7f:00:63:58:87:42:d1:25:8c:
a1:e7:8f:7f:da:e7:6c:07:fe:a9:2d:98:be:f4:c4:
15:4f:03:6e:6a:b9:f7:e0:a8:4d:26:57:2e:3a:8e:
bb:2f:36:a1:e4:93:c0:b8:38:56:09:12:f5:17:35:
9c:d1:55:f6:93:42:7b:cc:a6:82:ac:f9:14:3a:58:
2c:bc:98:a6:dd:c9:e4:1c:d4:ab:a2:5a:64:6e:da:
63:43:d1:fa:6c:83:0a:08:17:12:95:b9:99:8d:35:
c0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5E:2C:DF:DE:2F:EC:FD:97:3C:A2:94:21:AE:21:74:79:38:69:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/9305f653-4589-3b05-9b07-a986191aeaaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.crl
X509v3 Authority Key Identifier:
keyid:D0:65:B9:1A:8B:5E:DD:F3:FA:1A:9C:17:3D:BA:C6:E1:DB:E4:69:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.185.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:cf:54:22:bd:3d:16:bc:ba:e5:14:6f:b2:f8:51:3e:95:0a:
73:74:e0:40:be:d0:c5:8a:ce:ed:0c:0e:f3:91:bf:04:a5:a5:
b9:4d:6b:fa:22:de:16:7c:1f:46:e6:9c:fa:21:c3:48:16:bb:
9f:8e:bf:91:08:04:7e:d2:c5:4f:88:fa:71:6a:36:19:03:b4:
5d:29:83:bb:76:22:8b:1d:7b:94:04:15:69:44:f7:f3:57:36:
aa:a2:4c:03:3f:83:22:3f:6a:b2:76:b9:18:85:7a:af:87:d9:
3a:60:0f:79:35:3c:86:01:7d:49:f3:c4:9d:1c:c0:7e:ca:3b:
03:3e:c0:7f:01:7b:11:7b:e5:98:57:9b:82:b9:73:f1:26:af:
e0:d3:44:0d:23:11:24:b0:00:8f:ec:ea:92:14:26:1c:b7:23:
65:e9:b6:c0:8c:53:7c:4b:39:9e:55:2f:9f:f5:af:4f:14:c0:
78:f7:4d:e4:4a:14:e4:f7:21:70:2b:5e:3a:f4:7e:f2:ba:32:
d1:b1:0c:79:c2:d0:89:ed:d7:2a:af:57:25:bb:fb:a3:3a:0b:
68:62:28:5b:5b:a2:c8:af:f6:00:3e:0f:6b:9c:91:3f:70:aa:
f4:4a:f1:9b:fb:2d:67:10:9f:cb:bb:fc:1c:2d:b7:16:02:27:
e9:7f:c7:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkcl3oLbyk9dICEjiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2M2NjQ2ODMtZDU4ZS00ZDI2LThjZjEtZTVmNWM1ZGMy
NGMyMB4XDTI1MDMwNzE4NDE0MFoXDTI1MDYwNTE3NDE0MFowLzEtMCsGA1UEAxMk
MzE5MzIxNDYtZGY2OC00M2ZkLWI1YmEtZTMyNjBiMDcwMzIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1QMDtjuuZYsf344AvTxzivX4bDthWiXbz97
rlnRkmLRdQZ5AxnO90TFqts2IDOYog05RCdGcEY1rdYHyOYC6y876Af9TgXi0/O4
zLh9YuUMWHVLk+I1v4tQ394MvWAck4EdiVoorug61bCa+ydo1ZJ8E7YTCwJ+nUO/
nvtnVs3mwpajbw2kUvSa0Bed13vib5SA/xNQu57niwx/AGNYh0LRJYyh549/2uds
B/6pLZi+9MQVTwNuarn34KhNJlcuOo67Lzah5JPAuDhWCRL1FzWc0VX2k0J7zKaC
rPkUOlgsvJim3cnkHNSrolpkbtpjQ9H6bIMKCBcSlbmZjTXAswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCleLN/eL+z9lzyilCGuIXR5OGlMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYzY2
NDY4My1kNThlLTRkMjYtOGNmMS1lNWY1YzVkYzI0YzIvOTMwNWY2NTMtNDU4OS0z
YjA1LTliMDctYTk4NjE5MWFlYWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2M2NjQ2ODMtZDU4ZS00ZDI2LThj
ZjEtZTVmNWM1ZGMyNGMyL2NjNjY0NjgzLWQ1OGUtNGQyNi04Y2YxLWU1ZjVjNWRj
MjRjMi5jcmwwHwYDVR0jBBgwFoAU0GW5Gote3fP6GpwXPbrG4dvkab8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYzY2NDY4My1kNThlLTRkMjYtOGNmMS1lNWY1
YzVkYzI0YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7lYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABHPVCK9PRa8uuUUb7L4UT6VCnN04EC+0MWKzu0MDvORvwSlpblNa/oi
3hZ8H0bmnPohw0gWu5+Ov5EIBH7SxU+I+nFqNhkDtF0pg7t2Iosde5QEFWlE9/NX
NqqiTAM/gyI/arJ2uRiFeq+H2TpgD3k1PIYBfUnzxJ0cwH7KOwM+wH8BexF75ZhX
m4K5c/Emr+DTRA0jESSwAI/s6pIUJhy3I2XptsCMU3xLOZ5VL5/1r08UwHj3TeRK
FOT3IXArXjr0fvK6MtGxDHnC0Int1yqvVyW7+6M6C2hiKFtbosiv9gA+D2uckT9w
qvRK8Zv7LWcQn8u7/BwttxYCJ+l/x4c=
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:47:38 2025 by rpki-client