Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/c3cb8684-f47f-3303-a3bd-521051961d0c.roa
File: c3cb8684-f47f-3303-a3bd-521051961d0c.roa (raw, json)
Hash identifier: QT+3hk546BcWj/+Gxkllrsu0jNu5zb/PgguV3p/rCHY=
Subject key identifier: 09:D6:E5:2E:1E:A6:1D:BF:62:F6:BE:79:7C:EB:45:31:BD:26:0A:2E
Certificate issuer: /CN=abaad708-212e-4627-8dbe-416a8512677d
Certificate serial: 010D0C9F432858492CB20B73733B32E8C501C3C0
Authority key identifier: D5:0A:0A:CC:79:7E:27:4F:46:6A:4D:0E:C3:83:5E:68:E3:D8:1F:39
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/c3cb8684-f47f-3303-a3bd-521051961d0c.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 399747
IP address blocks: 23.181.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b2:0b:73:73:3b:32:e8:c5:01:c3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abaad708-212e-4627-8dbe-416a8512677d
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=ff03cbd9-31ad-4175-a7fe-1a2f793b4794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7a:31:74:fa:dd:76:a8:4a:9e:50:66:88:de:
e7:49:86:8d:4a:4e:cc:05:e8:16:3f:db:c0:3c:24:
94:27:61:f0:da:d6:5b:69:df:35:fb:06:b8:9b:2e:
d7:08:93:37:ed:29:11:88:9c:c7:64:0c:e1:70:ee:
ed:9e:f7:22:25:29:48:33:e0:8d:2d:74:a9:a2:32:
c2:4d:91:a0:33:0a:03:a4:d5:18:24:d1:71:75:fe:
25:54:95:0d:e1:6c:90:82:4b:4f:a0:4f:50:57:90:
4e:19:f9:d2:de:7c:cd:ed:c3:c1:73:ab:f1:f1:a0:
0f:12:80:cd:50:44:45:3c:d4:f3:83:0e:f7:6c:b7:
a9:89:63:a3:fb:50:ab:73:1e:de:18:c7:43:ac:67:
4c:f7:ff:73:9d:8b:37:98:08:59:56:28:69:a7:b9:
48:30:d7:44:05:27:53:85:37:e0:ae:1b:8b:14:ac:
18:3b:5b:fc:f2:c3:07:29:6d:88:2d:4c:cb:dc:91:
a7:13:cc:f1:b1:a0:a5:b1:08:9d:05:9c:84:b1:7f:
45:75:48:23:22:da:d9:ea:a2:50:d9:87:66:de:78:
89:5b:0c:9d:d3:c1:a5:1b:a2:d4:b1:fc:f6:9f:7e:
24:6f:2a:3f:48:73:92:b2:36:56:9f:f6:be:80:50:
20:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D6:E5:2E:1E:A6:1D:BF:62:F6:BE:79:7C:EB:45:31:BD:26:0A:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/c3cb8684-f47f-3303-a3bd-521051961d0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/abaad708-212e-4627-8dbe-416a8512677d.crl
X509v3 Authority Key Identifier:
keyid:D5:0A:0A:CC:79:7E:27:4F:46:6A:4D:0E:C3:83:5E:68:E3:D8:1F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.181.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:e6:c7:48:f5:9d:68:0e:88:ba:bd:8e:c1:ef:13:87:55:ad:
a3:c1:8c:c4:10:e4:7e:28:75:1a:84:d6:ea:0a:cf:83:3c:2c:
8c:e5:98:d9:99:05:21:64:89:13:11:bb:79:b6:74:91:63:41:
94:8b:6a:d8:22:0f:8c:ff:59:34:46:36:9c:f5:e5:a1:cf:42:
60:48:54:5f:08:da:da:c6:e4:8d:56:c8:a6:0a:49:93:2f:59:
1a:92:af:56:6f:49:8a:e1:07:1d:aa:03:b8:b1:85:73:d8:20:
e4:2f:78:9b:9d:22:36:a6:35:66:bc:00:c0:4d:d8:d4:7a:69:
6d:3f:56:d3:c9:c3:69:29:0a:91:32:07:26:c5:98:d9:71:b5:
4f:71:3b:6d:6a:a2:c2:e5:98:59:d0:4e:ae:31:56:21:20:b4:
0f:50:ac:d6:8b:ca:dc:cd:ff:ca:5f:61:a9:43:4f:85:2f:65:
53:a5:95:34:a8:91:bd:96:7d:8c:96:ca:8d:0d:3a:ac:2d:9a:
79:b6:92:d3:90:b4:06:16:9a:5f:53:16:36:52:e3:fe:cc:4f:
94:33:3e:7a:35:69:b8:fe:07:dc:f7:fb:06:f7:54:10:4e:c4:
9b:66:a8:44:9e:cd:5f:d2:74:7c:fe:b5:ad:05:90:06:2f:a1:
ce:7e:be:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssgtzczsy6MUBw8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJhYWQ3MDgtMjEyZS00NjI3LThkYmUtNDE2YTg1MTI2
NzdkMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZmYwM2NiZDktMzFhZC00MTc1LWE3ZmUtMWEyZjc5M2I0Nzk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03oxdPrddqhKnlBmiN7nSYaNSk7MBegWP9vA
PCSUJ2Hw2tZbad81+wa4my7XCJM37SkRiJzHZAzhcO7tnvciJSlIM+CNLXSpojLC
TZGgMwoDpNUYJNFxdf4lVJUN4WyQgktPoE9QV5BOGfnS3nzN7cPBc6vx8aAPEoDN
UERFPNTzgw73bLepiWOj+1Crcx7eGMdDrGdM9/9znYs3mAhZVihpp7lIMNdEBSdT
hTfgrhuLFKwYO1v88sMHKW2ILUzL3JGnE8zxsaClsQidBZyEsX9FdUgjItrZ6qJQ
2Ydm3niJWwyd08GlG6LUsfz2n34kbyo/SHOSsjZWn/a+gFAgeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAnW5S4eph2/Yva+eXzrRTG9JgouMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYmFh
ZDcwOC0yMTJlLTQ2MjctOGRiZS00MTZhODUxMjY3N2QvYzNjYjg2ODQtZjQ3Zi0z
MzAzLWEzYmQtNTIxMDUxOTYxZDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWJhYWQ3MDgtMjEyZS00NjI3LThk
YmUtNDE2YTg1MTI2NzdkL2FiYWFkNzA4LTIxMmUtNDYyNy04ZGJlLTQxNmE4NTEy
Njc3ZC5jcmwwHwYDVR0jBBgwFoAU1QoKzHl+J09Gak0Ow4NeaOPYHzkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9hYmFhZDcwOC0yMTJlLTQ2MjctOGRiZS00MTZh
ODUxMjY3N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7WQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAATmx0j1nWgOiLq9jsHvE4dVraPBjMQQ5H4odRqE1uoKz4M8LIzlmNmZ
BSFkiRMRu3m2dJFjQZSLatgiD4z/WTRGNpz15aHPQmBIVF8I2trG5I1WyKYKSZMv
WRqSr1ZvSYrhBx2qA7ixhXPYIOQveJudIjamNWa8AMBN2NR6aW0/VtPJw2kpCpEy
BybFmNlxtU9xO21qosLlmFnQTq4xViEgtA9QrNaLytzN/8pfYalDT4UvZVOllTSo
kb2WfYyWyo0NOqwtmnm2ktOQtAYWml9TFjZS4/7MT5QzPno1abj+B9z3+wb3VBBO
xJtmqESezV/SdHz+ta0FkAYvoc5+vuw=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:29 2025 by rpki-client