Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/3bdfebd3-191c-30e9-b20b-67b6f00c0302.roa
File: 3bdfebd3-191c-30e9-b20b-67b6f00c0302.roa (raw, json)
Hash identifier: IxNo2HBBN+4Zj8M6NuztBvtFdyd8G3jVR06Y6LUek7s=
Subject key identifier: EB:43:8A:6A:8C:BE:B8:70:EB:B5:D0:3E:DB:58:28:5C:0E:19:C2:27
Certificate issuer: /CN=dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88
Certificate serial: 010D0C9F43285849244E80E4639CAFDCD822B020
Authority key identifier: 31:1E:93:F2:57:D8:23:9D:B9:97:E8:AD:3C:8E:20:86:63:EA:59:EF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/3bdfebd3-191c-30e9-b20b-67b6f00c0302.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 398328
IP address blocks: 23.160.208.0/24 maxlen: 24
174.136.248.0/24 maxlen: 24
2602:fd46::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:80:e4:63:9c:af:dc:d8:22:b0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=fe0d4a2f-40a7-416d-8a4b-e6a8a8ef53b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:10:ab:e5:19:60:61:f9:ef:ea:18:57:1c:8e:
f8:5d:00:d3:42:21:74:77:b6:3a:29:bb:22:ab:c9:
2a:ad:34:25:d3:ce:4c:8d:c9:48:5b:5b:9e:b1:c7:
3f:8c:d8:aa:19:1a:17:23:52:35:be:44:15:ad:6f:
2f:43:1f:a2:7e:57:81:16:31:6a:1d:64:69:51:d2:
f8:be:5a:e2:a1:c1:6a:0d:5f:80:eb:2a:09:e5:b0:
56:12:3d:7b:77:90:86:5b:05:c1:cb:ca:e5:f3:0a:
87:f9:8c:68:af:94:43:d7:4b:05:c4:60:d8:62:43:
83:e8:ab:83:ec:c1:9e:8a:e1:42:da:bf:97:1e:e4:
c8:34:54:40:1a:d9:f6:b8:22:26:58:e8:d7:bf:c5:
81:86:cb:63:6e:e6:02:fa:b4:27:cc:3c:8a:3a:fe:
7b:f4:05:a7:17:00:4f:99:f1:ed:80:08:2f:90:0e:
5d:88:ee:93:ae:96:10:50:6f:d4:82:1f:95:46:e9:
b9:69:5b:3b:91:1f:2e:75:da:59:1a:f3:e2:eb:e5:
0d:40:64:f0:d5:cc:29:70:e4:5d:a5:5f:06:8e:7a:
2d:18:26:d3:8b:be:0a:2d:48:ce:e6:ae:31:17:c4:
83:4a:65:e1:ed:04:db:d9:b2:6e:7d:fa:1c:55:eb:
27:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:43:8A:6A:8C:BE:B8:70:EB:B5:D0:3E:DB:58:28:5C:0E:19:C2:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/3bdfebd3-191c-30e9-b20b-67b6f00c0302.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.crl
X509v3 Authority Key Identifier:
keyid:31:1E:93:F2:57:D8:23:9D:B9:97:E8:AD:3C:8E:20:86:63:EA:59:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer
sbgp-ipAddrBlock: critical
IPv4:
23.160.208.0/24
174.136.248.0/24
IPv6:
2602:fd46::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:85:c7:d4:b6:37:af:12:72:28:21:1c:b8:c2:82:8d:f5:1c:
ae:c8:92:4b:b5:2a:d5:a5:0f:1e:f1:95:cc:f8:cc:18:79:39:
29:a2:39:c3:99:35:dd:ee:24:45:ff:32:10:d7:e7:83:36:f3:
59:7b:b3:bc:71:ce:73:83:88:57:b7:77:85:db:dc:6e:18:ac:
82:9c:c5:34:a4:d5:f5:5c:05:a9:88:bb:a2:ac:a7:bd:99:f3:
fb:d9:5c:dc:de:d7:f6:4d:9e:48:9e:0b:b3:f9:79:21:c7:94:
f0:93:9d:d7:c7:6a:44:df:e1:ee:12:dd:82:66:9a:cf:02:94:
63:fe:42:dd:57:6b:70:eb:c8:91:7f:b8:7c:c1:9d:55:c6:b3:
63:aa:c1:d2:07:cb:4a:c0:9a:0e:0d:86:45:68:43:c1:a4:5d:
7d:97:0c:5b:9f:9b:ea:ee:5e:89:36:27:52:67:a4:2e:1e:fd:
66:89:c3:dc:ac:f3:d2:71:c7:4d:24:09:ce:6f:4e:4f:c6:8a:
38:89:9d:a1:47:a6:c8:0a:c9:07:18:66:6e:c1:99:62:80:c6:
19:99:23:ba:1e:c8:76:ed:17:42:8d:60:64:b4:7b:68:7c:f3:
26:a7:2d:90:23:45:16:45:1e:c1:57:24:3d:95:d9:dd:3a:45:
a8:9e:46:28
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEkkToDkY5yv3NgisCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGNmMWEwNWYtZWZhYy00ZWYzLThiMjMtNWZkYmUzY2I0
ZTg4MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk
ZmUwZDRhMmYtNDBhNy00MTZkLThhNGItZTZhOGE4ZWY1M2I3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxCr5RlgYfnv6hhXHI74XQDTQiF0d7Y6Kbsi
q8kqrTQl085MjclIW1uescc/jNiqGRoXI1I1vkQVrW8vQx+ifleBFjFqHWRpUdL4
vlriocFqDV+A6yoJ5bBWEj17d5CGWwXBy8rl8wqH+Yxor5RD10sFxGDYYkOD6KuD
7MGeiuFC2r+XHuTINFRAGtn2uCImWOjXv8WBhstjbuYC+rQnzDyKOv579AWnFwBP
mfHtgAgvkA5diO6TrpYQUG/Ugh+VRum5aVs7kR8uddpZGvPi6+UNQGTw1cwpcORd
pV8GjnotGCbTi74KLUjO5q4xF8SDSmXh7QTb2bJuffocVesnOwIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFOtDimqMvrhw67XQPttYKFwOGcInMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Yx
YTA1Zi1lZmFjLTRlZjMtOGIyMy01ZmRiZTNjYjRlODgvM2JkZmViZDMtMTkxYy0z
MGU5LWIyMGItNjdiNmYwMGMwMzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmMWEwNWYtZWZhYy00ZWYzLThi
MjMtNWZkYmUzY2I0ZTg4L2RjZjFhMDVmLWVmYWMtNGVmMy04YjIzLTVmZGJlM2Ni
NGU4OC5jcmwwHwYDVR0jBBgwFoAUMR6T8lfYI525l+itPI4ghmPqWe8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2YxYTA1Zi1lZmFjLTRlZjMtOGIyMy01ZmRi
ZTNjYjRlODguY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF6DQAwQA
roj4MA4EAgACMAgDBgQmAv1GADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBshcfUtjevEnIoIRy4woKN9Ryu
yJJLtSrVpQ8e8ZXM+MwYeTkpojnDmTXd7iRF/zIQ1+eDNvNZe7O8cc5zg4hXt3eF
29xuGKyCnMU0pNX1XAWpiLuirKe9mfP72Vzc3tf2TZ5Inguz+Xkhx5Twk53Xx2pE
3+HuEt2CZprPApRj/kLdV2tw68iRf7h8wZ1VxrNjqsHSB8tKwJoODYZFaEPBpF19
lwxbn5vq7l6JNidSZ6QuHv1micPcrPPSccdNJAnOb05Pxoo4iZ2hR6bICskHGGZu
wZligMYZmSO6Hsh27RdCjWBktHtofPMmpy2QI0UWRR7BVyQ9ldndOkWonkYo
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:06 2025 by rpki-client