Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7ef1c711-d50a-3f1d-a03d-c0984424b13a.roa
File: 7ef1c711-d50a-3f1d-a03d-c0984424b13a.roa (raw, json)
Hash identifier: clmncm421AfiPjXbTzjGR9NghLeNdhl0uGmvjapNRVA=
Subject key identifier: 49:A4:46:25:1A:A5:C3:02:50:BE:26:16:10:AF:E3:87:11:A3:1F:49
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858491ED6F55E8BD5C7B6BC323400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7ef1c711-d50a-3f1d-a03d-c0984424b13a.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 9498
IP address blocks: 23.76.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:f5:5e:8b:d5:c7:b6:bc:32:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=f614d7a2-ba1f-411a-93e2-cf6f22e439eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f5:ae:cb:f5:c6:7e:1d:6e:1f:8b:f2:6f:96:
b0:1b:09:ee:ad:e3:82:85:7b:ca:5e:40:aa:93:01:
28:95:8c:ec:42:cb:0e:4a:c3:d8:b3:c3:d7:b8:9f:
74:a9:27:f4:ff:57:a0:8c:8d:09:96:ee:14:9f:e4:
dc:82:20:f5:44:ee:e5:20:ef:17:04:5d:06:60:dc:
dc:6d:b1:fe:75:dc:8d:10:0a:ad:9e:8a:22:8d:34:
8a:de:d1:80:8f:d4:2e:eb:c8:f5:0b:2b:d7:2f:33:
c3:21:7b:c0:90:68:94:81:86:66:98:66:de:c2:74:
90:b2:aa:ca:9c:99:e7:98:27:f5:11:67:a9:b9:a9:
78:94:3b:2f:a6:40:b4:14:01:c9:70:e8:41:3f:de:
70:d4:d8:d1:8a:70:d7:c6:a9:c1:4e:4a:86:2b:1b:
8b:a6:93:06:b1:55:cb:1a:b7:97:a5:99:d8:9e:c6:
d1:a2:e2:fc:23:0f:a5:20:ce:50:e1:12:5d:06:71:
f7:5e:5d:b3:2f:e7:0a:de:38:26:7c:bd:3e:a2:77:
87:c0:87:1b:ac:95:a4:43:c8:14:42:93:af:f5:1f:
dc:38:c0:df:a8:a9:13:50:4f:ae:ad:df:2a:9b:e4:
b3:52:60:c8:0f:ee:b5:80:ba:33:a2:51:7a:ad:95:
a6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A4:46:25:1A:A5:C3:02:50:BE:26:16:10:AF:E3:87:11:A3:1F:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7ef1c711-d50a-3f1d-a03d-c0984424b13a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.76.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:18:9f:be:01:0a:3e:bf:c2:95:d4:51:32:05:b2:b6:14:54:
b2:ca:17:d8:d3:4a:ca:2f:f7:ee:87:c2:16:3b:a1:1b:b7:a2:
ff:81:d0:27:46:60:a0:af:5a:cd:6a:29:9d:4f:c3:d1:58:d2:
a2:25:5a:0d:68:aa:92:71:8f:1c:bb:d3:b8:80:96:d4:78:82:
e7:75:66:79:93:af:35:32:bf:0f:fb:0f:10:2b:46:a5:8f:fb:
e2:15:9e:20:55:45:9a:9f:2a:43:8c:65:ed:52:60:64:9f:43:
7c:5d:f3:7d:1e:3c:7e:7e:21:9a:d7:18:52:c7:64:8a:5c:79:
26:de:99:04:5a:1c:21:e1:44:b9:66:ef:c0:b4:2c:a8:58:45:
89:31:dd:9d:8f:8f:d0:57:93:b9:a8:70:9a:e1:b2:7b:81:63:
7f:f2:2f:87:b4:f0:d0:5a:08:9f:c6:f1:94:cf:f2:b8:1a:99:
bd:0d:77:76:02:a2:af:e4:97:82:bb:96:82:7c:37:d0:fc:73:
e4:1a:b4:5b:a4:83:44:df:9b:81:19:f5:af:93:2d:d9:ad:66:
a5:84:94:61:e7:ef:07:86:08:ce:d0:e1:64:78:27:e7:be:7d:
ff:18:8b:e3:23:30:03:55:36:d2:b3:54:7e:f3:13:90:60:ba:
00:34:b8:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1vVei9XHtrwyNAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk
ZjYxNGQ3YTItYmExZi00MTFhLTkzZTItY2Y2ZjIyZTQzOWViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPWuy/XGfh1uH4vyb5awGwnureOChXvKXkCq
kwEolYzsQssOSsPYs8PXuJ90qSf0/1egjI0Jlu4Un+TcgiD1RO7lIO8XBF0GYNzc
bbH+ddyNEAqtnooijTSK3tGAj9Qu68j1CyvXLzPDIXvAkGiUgYZmmGbewnSQsqrK
nJnnmCf1EWepual4lDsvpkC0FAHJcOhBP95w1NjRinDXxqnBTkqGKxuLppMGsVXL
GreXpZnYnsbRouL8Iw+lIM5Q4RJdBnH3Xl2zL+cK3jgmfL0+oneHwIcbrJWkQ8gU
QpOv9R/cOMDfqKkTUE+urd8qm+SzUmDID+61gLozolF6rZWmrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEmkRiUapcMCUL4mFhCv44cRox9JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2VmMWM3MTEtZDUwYS0z
ZjFkLWEwM2QtYzA5ODQ0MjRiMTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0ycMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABsYn74BCj6/wpXUUTIFsrYUVLLKF9jTSsov9+6HwhY7oRu3ov+B0CdG
YKCvWs1qKZ1Pw9FY0qIlWg1oqpJxjxy707iAltR4gud1ZnmTrzUyvw/7DxArRqWP
++IVniBVRZqfKkOMZe1SYGSfQ3xd830ePH5+IZrXGFLHZIpceSbemQRaHCHhRLlm
78C0LKhYRYkx3Z2Pj9BXk7mocJrhsnuBY3/yL4e08NBaCJ/G8ZTP8rgamb0Nd3YC
oq/kl4K7loJ8N9D8c+QatFukg0Tfm4EZ9a+TLdmtZqWElGHn7weGCM7Q4WR4J+e+
ff8Yi+MjMANVNtKzVH7zE5BgugA0uKg=
-----END CERTIFICATE-----
Generated at Tue Apr 8 22:00:42 2025 by rpki-client