Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/34ea7717-0935-34ec-8511-5e5273f1e4d9.roa
File: 34ea7717-0935-34ec-8511-5e5273f1e4d9.roa (raw, json)
Hash identifier: BeKzWXL2k1mjgNV977z3cupX99ca2ZIrGqX+HtNECWA=
Subject key identifier: 11:7D:4F:BC:3F:84:B6:5B:22:AE:F7:B1:DB:E4:74:BD:6D:F3:94:5C
Certificate issuer: /CN=3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b
Certificate serial: 010D0C9F43285848B35B6A5147A50CC51BEDD6C0
Authority key identifier: F0:FC:B9:9D:2D:67:D3:74:6C:74:D4:FD:29:5B:D7:48:1E:6C:A2:A3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/34ea7717-0935-34ec-8511-5e5273f1e4d9.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 211392
IP address blocks: 23.167.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:6a:51:47:a5:0c:c5:1b:ed:d6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=e6edb7ff-208b-4b7c-9e19-c42c3c1f6f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:94:74:54:8f:af:22:76:43:d3:5f:c2:a5:82:
9a:ce:ba:cf:bd:12:ce:60:a1:9e:45:b1:86:4d:c1:
23:ff:13:70:8c:3b:0f:39:68:93:91:5e:a9:d8:a3:
0e:fb:48:06:b2:05:21:a8:42:8a:38:cc:69:e6:7c:
63:42:af:a2:4c:ba:73:19:2a:4a:30:8c:f0:08:eb:
e4:21:eb:fc:ff:f9:9c:9b:4a:90:03:38:ab:a1:3a:
21:04:bc:3f:8b:ea:5c:35:af:5d:83:c8:61:a2:f2:
42:16:00:3c:28:2f:93:71:f6:ad:58:44:e1:a3:75:
f2:b1:51:ae:cb:96:b3:7f:1e:0f:5b:e5:fe:5c:e4:
51:00:e4:bb:c0:57:5b:71:d9:d8:d9:41:f5:05:7b:
ac:15:41:28:bb:43:e5:43:00:a2:9a:22:7f:7a:ac:
8d:f0:96:be:2a:56:b4:7d:c3:ec:35:ad:5f:4e:14:
73:80:12:f9:72:db:d6:f4:a2:5a:78:0d:47:43:ee:
13:75:dd:e3:15:db:02:f6:52:e4:e3:be:cd:b2:48:
3c:4f:03:a6:df:52:7f:73:99:ef:43:8d:d6:ad:84:
6b:7e:c7:b0:0f:27:7e:cb:43:6b:13:b7:5b:f9:8c:
96:e5:36:95:f7:f4:34:8b:e6:4f:cd:27:84:17:45:
a1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7D:4F:BC:3F:84:B6:5B:22:AE:F7:B1:DB:E4:74:BD:6D:F3:94:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/34ea7717-0935-34ec-8511-5e5273f1e4d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.crl
X509v3 Authority Key Identifier:
keyid:F0:FC:B9:9D:2D:67:D3:74:6C:74:D4:FD:29:5B:D7:48:1E:6C:A2:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.167.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:41:30:a3:6c:e7:19:65:33:b3:cf:1f:4c:2a:c0:df:bc:a1:
d2:5a:79:e0:c6:70:29:10:9f:ff:3c:cd:03:4a:72:73:aa:bc:
c6:64:67:77:bb:a3:13:37:02:77:43:c4:ab:15:8c:66:bf:d0:
48:f4:f1:eb:17:88:fa:01:82:d0:22:c9:37:76:aa:73:ff:f7:
aa:22:51:12:c9:f9:18:74:41:d8:0c:44:16:be:7c:27:48:4e:
7e:9e:39:b0:9e:98:c6:33:3a:15:db:6a:d7:9b:14:6a:93:0a:
25:cf:c0:cb:97:39:10:39:f1:00:22:0f:54:2a:30:eb:50:be:
6a:da:c7:86:e3:87:00:7d:71:16:75:e7:c8:8b:b1:8b:0a:26:
c3:c3:8e:75:35:cc:90:7a:30:ad:6f:51:3a:8f:f6:d0:6a:38:
d7:17:78:6e:15:82:f1:67:ea:09:94:a8:35:a8:9d:47:37:7d:
c4:9e:03:b0:71:b9:6d:59:4c:bc:26:65:80:03:0c:1a:7e:66:
5e:2b:1c:bf:91:2e:6a:fe:71:51:64:68:d1:b8:07:18:29:96:
51:1b:66:90:ac:aa:c6:6a:dc:ec:fe:2a:fe:17:73:98:01:1d:
84:93:46:14:3a:47:41:f5:2f:3b:3d:fd:10:48:b6:6d:d4:e4:
d7:44:9d:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW2pRR6UMxRvt1sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzQyMWM3NGMtYWQwYi00M2I5LTllYTMtYmRhYzRiZjZi
YzdiMB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk
ZTZlZGI3ZmYtMjA4Yi00YjdjLTllMTktYzQyYzNjMWY2ZjhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJR0VI+vInZD01/CpYKazrrPvRLOYKGeRbGG
TcEj/xNwjDsPOWiTkV6p2KMO+0gGsgUhqEKKOMxp5nxjQq+iTLpzGSpKMIzwCOvk
Iev8//mcm0qQAziroTohBLw/i+pcNa9dg8hhovJCFgA8KC+TcfatWETho3XysVGu
y5azfx4PW+X+XORRAOS7wFdbcdnY2UH1BXusFUEou0PlQwCimiJ/eqyN8Ja+Kla0
fcPsNa1fThRzgBL5ctvW9KJaeA1HQ+4Tdd3jFdsC9lLk477Nskg8TwOm31J/c5nv
Q43WrYRrfsewDyd+y0NrE7db+YyW5TaV9/Q0i+ZPzSeEF0WhDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBF9T7w/hLZbIq73sdvkdL1t85RcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNDIx
Yzc0Yy1hZDBiLTQzYjktOWVhMy1iZGFjNGJmNmJjN2IvMzRlYTc3MTctMDkzNS0z
NGVjLTg1MTEtNWU1MjczZjFlNGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzQyMWM3NGMtYWQwYi00M2I5LTll
YTMtYmRhYzRiZjZiYzdiLzM0MjFjNzRjLWFkMGItNDNiOS05ZWEzLWJkYWM0YmY2
YmM3Yi5jcmwwHwYDVR0jBBgwFoAU8Py5nS1n03RsdNT9KVvXSB5soqMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zNDIxYzc0Yy1hZDBiLTQzYjktOWVhMy1iZGFj
NGJmNmJjN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6eYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFZBMKNs5xllM7PPH0wqwN+8odJaeeDGcCkQn/88zQNKcnOqvMZkZ3e7
oxM3AndDxKsVjGa/0Ej08esXiPoBgtAiyTd2qnP/96oiURLJ+Rh0QdgMRBa+fCdI
Tn6eObCemMYzOhXbatebFGqTCiXPwMuXORA58QAiD1QqMOtQvmrax4bjhwB9cRZ1
58iLsYsKJsPDjnU1zJB6MK1vUTqP9tBqONcXeG4VgvFn6gmUqDWonUc3fcSeA7Bx
uW1ZTLwmZYADDBp+Zl4rHL+RLmr+cVFkaNG4BxgpllEbZpCsqsZq3Oz+Kv4Xc5gB
HYSTRhQ6R0H1Lzs9/RBItm3U5NdEnfA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:45:17 2025 by rpki-client