Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0b303bc2-150d-317d-a5b8-89981f88cbe7.roa
File: 0b303bc2-150d-317d-a5b8-89981f88cbe7.roa (raw, json)
Hash identifier: q9zfH9E5txPaMKyLoMtbEQzZuYKTinvP6ZPvgOdzIQs=
Subject key identifier: C7:00:79:89:8B:6D:7F:A7:66:14:78:AD:22:74:05:4C:32:DA:A2:04
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F43285848F22BE5C5470DDA65E7979740
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0b303bc2-150d-317d-a5b8-89981f88cbe7.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 6461
IP address blocks: 8.44.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2b:e5:c5:47:0d:da:65:e7:97:97:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=eaa8d2d7-aceb-4b2a-8be7-8726ee9d7451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:36:40:10:b7:72:b9:0f:bf:23:e0:d3:e5:ce:
88:1d:b9:7a:aa:d0:91:2a:73:fb:11:cb:64:99:b2:
4e:eb:40:b2:06:5b:c7:f8:e4:12:9b:fc:56:c8:46:
a0:e6:12:12:b3:81:a9:df:19:ed:ae:1c:7c:e7:98:
3d:b9:a4:cb:a7:54:ef:64:72:8e:48:ea:40:10:f5:
ac:d5:78:4d:7c:90:49:28:0f:ea:63:18:58:39:71:
9a:26:90:54:b7:64:30:cc:8a:27:2b:e2:03:07:5f:
66:70:20:0e:db:f3:8a:d0:60:86:36:8b:6d:9d:be:
6a:e2:5e:3c:6a:41:bc:0c:2d:df:89:65:af:45:89:
54:bc:4e:5d:02:59:a8:91:6c:e7:97:9f:47:19:fc:
1a:7f:3f:05:fc:56:1a:97:fe:e2:dc:a1:35:da:a1:
94:67:20:b4:b0:12:23:dd:9b:6a:18:c0:8e:7c:81:
72:59:ee:3f:3d:2c:be:ff:5b:29:90:6b:95:26:e6:
f5:bf:84:d7:02:bc:b2:bb:2b:1e:b9:70:c4:a7:49:
61:cb:f9:6a:12:ba:83:b6:27:f4:16:b7:fe:3b:0c:
95:09:59:5d:50:18:08:59:40:e2:f0:7e:54:b4:db:
c8:69:62:88:c8:5b:40:d8:e3:06:f8:57:35:d0:df:
a8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:00:79:89:8B:6D:7F:A7:66:14:78:AD:22:74:05:4C:32:DA:A2:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0b303bc2-150d-317d-a5b8-89981f88cbe7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.44.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:7e:b9:9e:dc:d1:b5:e6:eb:74:e5:5e:8e:75:25:0e:30:03:
33:e5:36:e5:30:bf:40:93:3f:d1:2b:68:d7:94:91:1f:24:f2:
f5:a8:78:44:ea:c5:7a:2f:5f:76:36:71:0d:cc:0e:48:3b:f4:
07:db:60:50:ed:89:18:4a:6f:b0:02:33:ae:4b:df:06:cf:f7:
c8:bc:82:8f:be:17:be:bf:f4:9f:bb:ad:f1:bd:9f:80:0d:c7:
9f:87:07:13:7a:f8:ca:4a:5d:d2:8b:d5:39:f3:a5:da:58:c1:
8b:fa:cc:cf:fc:a2:38:7d:d0:91:8b:8e:9f:a6:7f:6d:95:ea:
42:fd:8a:bc:8b:9a:b1:00:2a:06:2a:09:74:f1:e4:d3:a0:2c:
cd:c7:3d:c9:e3:1c:1c:04:6d:1b:2a:d8:b7:db:7e:72:09:7f:
bd:3d:b6:a1:2c:61:ee:7d:5e:25:aa:53:3c:6d:b4:1c:61:61:
b6:56:1f:73:18:9c:96:9e:5d:dc:46:5a:2d:87:61:4a:f6:ab:
7a:0c:21:38:a9:15:49:c1:92:f4:9d:a8:e8:6d:37:d2:b1:e7:
53:78:ec:1d:d4:b4:be:b5:e9:ab:82:ea:ca:1f:84:55:99:d1:
16:d4:b7:51:31:10:11:d9:97:0a:56:05:91:db:cf:aa:c2:38:
d7:44:c7:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyK+XFRw3aZeeXl0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZWFhOGQyZDctYWNlYi00YjJhLThiZTctODcyNmVlOWQ3NDUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzZAELdyuQ+/I+DT5c6IHbl6qtCRKnP7Ectk
mbJO60CyBlvH+OQSm/xWyEag5hISs4Gp3xntrhx855g9uaTLp1TvZHKOSOpAEPWs
1XhNfJBJKA/qYxhYOXGaJpBUt2QwzIonK+IDB19mcCAO2/OK0GCGNottnb5q4l48
akG8DC3fiWWvRYlUvE5dAlmokWznl59HGfwafz8F/FYal/7i3KE12qGUZyC0sBIj
3ZtqGMCOfIFyWe4/PSy+/1spkGuVJub1v4TXAryyuyseuXDEp0lhy/lqErqDtif0
Frf+OwyVCVldUBgIWUDi8H5UtNvIaWKIyFtA2OMG+Fc10N+oBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMcAeYmLbX+nZhR4rSJ0BUwy2qIEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMGIzMDNiYzItMTUwZC0z
MTdkLWE1YjgtODk5ODFmODhjYmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACCyLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD1+uZ7c0bXm63TlXo51JQ4wAzPlNuUwv0CTP9EraNeUkR8k8vWoeETq
xXovX3Y2cQ3MDkg79AfbYFDtiRhKb7ACM65L3wbP98i8go++F76/9J+7rfG9n4AN
x5+HBxN6+MpKXdKL1TnzpdpYwYv6zM/8ojh90JGLjp+mf22V6kL9iryLmrEAKgYq
CXTx5NOgLM3HPcnjHBwEbRsq2LfbfnIJf709tqEsYe59XiWqUzxttBxhYbZWH3MY
nJaeXdxGWi2HYUr2q3oMITipFUnBkvSdqOhtN9Kx51N47B3UtL616auC6sofhFWZ
0RbUt1ExEBHZlwpWBZHbz6rCONdEx5A=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:11 2025 by rpki-client