Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/df024027-651f-3384-b085-499c67c8e5f5.roa
File: df024027-651f-3384-b085-499c67c8e5f5.roa (raw, json)
Hash identifier: PXvGk7md1GAAjhlLX8Gy3WRGGSVFWN2PxV5twChv6TE=
Subject key identifier: 3D:41:F3:83:2F:08:BC:09:57:FE:BA:54:10:D7:D4:01:BE:18:F5:29
Certificate issuer: /CN=0a846bda-a477-4fe0-8f13-997253568b7e
Certificate serial: 010D0C9F43285848F22C6B457B8C6E28726637A0
Authority key identifier: DC:BA:E7:94:B6:81:A5:92:77:60:DA:DC:93:52:03:8D:85:F0:B8:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/df024027-651f-3384-b085-499c67c8e5f5.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 14570
IP address blocks: 23.139.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:6b:45:7b:8c:6e:28:72:66:37:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a846bda-a477-4fe0-8f13-997253568b7e
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=fd3726c1-86fc-4247-8616-2c92c656bca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:74:4a:e7:a0:f9:69:49:54:46:53:69:17:8e:
09:da:cc:1e:29:e4:e6:1b:f3:80:47:80:06:06:9e:
88:6b:0e:31:e7:28:b0:9f:12:42:96:fb:63:83:0d:
64:12:cb:66:42:bc:89:66:b6:5b:2b:10:7c:6f:5a:
09:62:53:f3:70:56:6c:88:7a:5c:45:63:57:08:84:
3b:60:fc:a0:b3:1e:44:5a:2f:de:97:62:68:26:e5:
67:01:a8:26:42:4e:0c:ef:4a:ed:e9:29:2c:81:d3:
31:bc:86:c4:df:e3:ed:d4:58:ad:b8:ee:a7:03:2d:
7c:28:75:ef:7c:9c:1d:6f:5f:62:00:71:3f:9a:87:
29:5d:49:01:77:b4:13:fa:c8:0d:67:3e:81:1e:92:
13:7d:bf:e1:8c:2b:03:fd:5e:6c:ef:e7:6d:64:b2:
ef:69:f7:bc:c1:ac:ef:09:7e:6a:80:28:2a:61:0f:
10:48:d8:c8:4d:7f:07:ee:87:d7:25:0c:6a:ac:d9:
fa:a3:18:ed:2e:a9:7f:2f:59:07:03:91:1b:28:1f:
5c:26:02:df:fa:a6:ca:cb:20:62:da:f4:e1:25:69:
c2:1f:a3:5a:e1:67:a3:28:da:21:c9:4a:dd:d5:cc:
a1:b7:17:ed:2b:24:d8:d8:0f:93:be:e8:64:90:ad:
7a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:41:F3:83:2F:08:BC:09:57:FE:BA:54:10:D7:D4:01:BE:18:F5:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/df024027-651f-3384-b085-499c67c8e5f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.crl
X509v3 Authority Key Identifier:
keyid:DC:BA:E7:94:B6:81:A5:92:77:60:DA:DC:93:52:03:8D:85:F0:B8:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer
sbgp-ipAddrBlock: critical
IPv4:
23.139.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:2e:7c:d7:94:d3:e3:5b:5a:cf:e7:b9:7c:66:8d:22:2c:49:
8f:c7:85:dd:06:58:7c:53:45:70:11:b9:b0:8e:5b:65:61:f8:
ea:40:7d:eb:ad:67:71:16:20:7b:1f:c0:72:9c:ed:83:18:b8:
41:cf:0c:15:23:9b:96:e3:57:db:b1:bc:4e:81:8d:29:86:17:
d8:68:89:66:6a:03:66:1f:82:dc:0f:0f:83:b2:51:d0:3d:d1:
7f:e7:ba:86:3f:d0:fb:64:ba:60:06:85:82:98:a7:6a:1f:29:
95:ee:e4:41:78:67:39:d1:e1:f3:fa:98:b8:6e:8f:4e:18:25:
43:e9:92:4b:f3:9d:c6:3a:79:89:11:a2:5f:02:cd:ae:07:53:
a7:35:74:5d:fa:7a:42:77:1b:04:05:19:cb:4e:ca:c7:c6:06:
b0:04:ce:6f:82:0b:fa:22:29:b7:74:31:d1:4a:84:d8:22:95:
84:60:70:ba:a2:1a:ae:32:5e:8e:a6:eb:57:af:9a:67:07:45:
a7:b9:db:d3:de:54:5d:17:cb:64:ea:cd:08:55:bf:20:d8:17:
39:ba:1a:1e:ce:8b:f8:4b:b9:47:d4:85:e8:ff:3b:b2:50:93:
ce:94:3f:72:df:a8:f9:64:78:38:96:92:6f:85:8f:4d:2f:e0:
74:6e:36:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLGtFe4xuKHJmN6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE4NDZiZGEtYTQ3Ny00ZmUwLThmMTMtOTk3MjUzNTY4
YjdlMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZmQzNzI2YzEtODZmYy00MjQ3LTg2MTYtMmM5MmM2NTZiY2E0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3RK56D5aUlURlNpF44J2sweKeTmG/OAR4AG
Bp6Iaw4x5yiwnxJClvtjgw1kEstmQryJZrZbKxB8b1oJYlPzcFZsiHpcRWNXCIQ7
YPygsx5EWi/el2JoJuVnAagmQk4M70rt6SksgdMxvIbE3+Pt1FituO6nAy18KHXv
fJwdb19iAHE/mocpXUkBd7QT+sgNZz6BHpITfb/hjCsD/V5s7+dtZLLvafe8wazv
CX5qgCgqYQ8QSNjITX8H7ofXJQxqrNn6oxjtLql/L1kHA5EbKB9cJgLf+qbKyyBi
2vThJWnCH6Na4WejKNohyUrd1cyhtxftKyTY2A+TvuhkkK16bwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD1B84MvCLwJV/66VBDX1AG+GPUpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYTg0
NmJkYS1hNDc3LTRmZTAtOGYxMy05OTcyNTM1NjhiN2UvZGYwMjQwMjctNjUxZi0z
Mzg0LWIwODUtNDk5YzY3YzhlNWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGE4NDZiZGEtYTQ3Ny00ZmUwLThm
MTMtOTk3MjUzNTY4YjdlLzBhODQ2YmRhLWE0NzctNGZlMC04ZjEzLTk5NzI1MzU2
OGI3ZS5jcmwwHwYDVR0jBBgwFoAU3LrnlLaBpZJ3YNrck1IDjYXwuGkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYTg0NmJkYS1hNDc3LTRmZTAtOGYxMy05OTcy
NTM1NjhiN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4t4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABEufNeU0+NbWs/nuXxmjSIsSY/Hhd0GWHxTRXARubCOW2Vh+OpAfeut
Z3EWIHsfwHKc7YMYuEHPDBUjm5bjV9uxvE6BjSmGF9hoiWZqA2YfgtwPD4OyUdA9
0X/nuoY/0PtkumAGhYKYp2ofKZXu5EF4ZznR4fP6mLhuj04YJUPpkkvzncY6eYkR
ol8Cza4HU6c1dF36ekJ3GwQFGctOysfGBrAEzm+CC/oiKbd0MdFKhNgilYRgcLqi
Gq4yXo6m61evmmcHRae529PeVF0Xy2TqzQhVvyDYFzm6Gh7Oi/hLuUfUhej/O7JQ
k86UP3LfqPlkeDiWkm+Fj00v4HRuNv0=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:35 2025 by rpki-client