Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c70b3736-0ec7-323d-8d70-de6e10ae9b16.roa
File: c70b3736-0ec7-323d-8d70-de6e10ae9b16.roa (raw, json)
Hash identifier: urOLh0F5c5c0hPFdnealPTFWz7Iy0drvf4AZOkK9TX4=
Subject key identifier: E0:86:17:85:16:1D:39:84:58:19:99:B4:27:9F:67:FC:60:89:BF:1E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D1847D357FA47134C4620
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c70b3736-0ec7-323d-8d70-de6e10ae9b16.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33661
IP address blocks: 24.104.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:18:47:d3:57:fa:47:13:4c:46:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=23e7af25-6a51-4133-99d7-7145cda4d4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:eb:91:df:1c:c2:44:df:1e:a9:30:c3:be:
23:e2:29:e2:f7:45:8e:c8:2f:de:86:89:d1:a3:f9:
d0:7e:b3:12:6f:33:be:c3:42:5b:ba:00:73:09:82:
16:d3:6a:24:8d:b8:f2:58:5f:75:56:be:18:41:2a:
8b:72:c2:2b:24:11:32:d3:2b:21:a4:fc:80:89:79:
f9:4e:e2:d9:a2:e8:d8:90:29:1c:2a:b7:a4:00:aa:
56:80:ec:e0:00:6c:22:d3:b8:53:1a:51:02:91:a7:
3a:d9:5b:c7:d4:37:c0:a0:48:33:ee:a0:8c:2b:68:
23:9c:8f:19:7a:70:39:07:c8:f1:6b:ab:58:d2:9d:
48:a3:5f:15:7f:87:5d:99:d3:12:54:be:5b:f5:e7:
5d:10:8f:02:c6:4a:07:59:9d:68:db:13:70:b1:92:
86:2c:5c:ba:db:aa:44:e4:a2:ee:da:27:07:77:02:
76:e9:31:66:6a:f4:ed:c0:aa:9e:48:b7:b3:c2:67:
b3:a0:96:19:d2:25:de:ca:a2:42:5a:da:59:98:5b:
49:57:85:f9:06:ee:6d:56:a1:0f:02:0e:1a:ee:a0:
56:7d:b7:1b:18:53:e1:01:f0:17:27:58:bf:67:8b:
ec:11:3a:24:92:26:db:ec:ac:f9:35:36:4b:c0:d3:
1e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:86:17:85:16:1D:39:84:58:19:99:B4:27:9F:67:FC:60:89:BF:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c70b3736-0ec7-323d-8d70-de6e10ae9b16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.104.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:4d:5c:33:5c:ea:63:7f:d6:92:6b:db:86:89:c3:32:25:1e:
02:e1:63:06:15:fb:19:02:0a:28:9f:ff:47:26:27:bb:18:19:
a1:63:71:51:62:7d:f1:1e:12:98:87:17:1d:ae:0e:57:70:c6:
0c:f5:74:ac:d4:bc:51:12:9c:be:9b:db:f8:94:9d:d4:5e:33:
23:55:84:e2:b3:2f:bf:bf:97:48:d5:ac:b5:0e:9a:e3:cf:d1:
1d:ee:49:9b:e7:67:81:fe:05:96:23:a3:28:30:ef:bb:85:a9:
74:70:ac:d2:3e:b6:22:6c:da:3d:60:46:94:a0:13:84:55:8c:
19:67:90:fb:d8:ed:1c:7b:34:2c:e5:c7:76:09:69:fd:b5:3e:
62:c8:36:89:2c:16:b0:a0:d8:35:76:84:3d:51:f7:d2:92:1f:
8f:e4:05:06:8b:6b:df:32:0b:c8:ab:1e:e8:7b:24:11:57:bd:
06:3f:35:33:2c:9b:f6:5f:f5:07:19:87:42:fb:fc:22:2b:14:
ee:c3:ac:63:ca:17:c2:ff:9b:ee:0b:c4:08:f9:49:19:50:17:
9a:6f:34:38:89:8b:7c:07:c9:1d:60:d0:aa:12:7f:d2:86:f3:
ef:4a:e1:0b:63:35:51:b9:05:f4:8a:60:f4:01:39:c9:52:83:
59:57:cb:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebRhH01f6RxNMRiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
MjNlN2FmMjUtNmE1MS00MTMzLTk5ZDctNzE0NWNkYTRkNGI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoDrkd8cwkTfHqkww74j4ini90WOyC/ehonR
o/nQfrMSbzO+w0JbugBzCYIW02okjbjyWF91Vr4YQSqLcsIrJBEy0yshpPyAiXn5
TuLZoujYkCkcKrekAKpWgOzgAGwi07hTGlECkac62VvH1DfAoEgz7qCMK2gjnI8Z
enA5B8jxa6tY0p1Io18Vf4ddmdMSVL5b9eddEI8CxkoHWZ1o2xNwsZKGLFy626pE
5KLu2icHdwJ26TFmavTtwKqeSLezwmezoJYZ0iXeyqJCWtpZmFtJV4X5Bu5tVqEP
Ag4a7qBWfbcbGFPhAfAXJ1i/Z4vsETokkibb7Kz5NTZLwNMekwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOCGF4UWHTmEWBmZtCefZ/xgib8eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzcwYjM3MzYtMGVjNy0z
MjNkLThkNzAtZGU2ZTEwYWU5YjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGGgHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAhNXDNc6mN/1pJr24aJwzIlHgLhYwYV+xkCCiif/0cmJ7sYGaFjcVFi
ffEeEpiHFx2uDldwxgz1dKzUvFESnL6b2/iUndReMyNVhOKzL7+/l0jVrLUOmuPP
0R3uSZvnZ4H+BZYjoygw77uFqXRwrNI+tiJs2j1gRpSgE4RVjBlnkPvY7Rx7NCzl
x3YJaf21PmLINoksFrCg2DV2hD1R99KSH4/kBQaLa98yC8irHuh7JBFXvQY/NTMs
m/Zf9QcZh0L7/CIrFO7DrGPKF8L/m+4LxAj5SRlQF5pvNDiJi3wHyR1g0KoSf9KG
8+9K4QtjNVG5BfSKYPQBOclSg1lXy0Q=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:10:18 2025 by rpki-client