Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/1f91f8f6-9f47-3789-8964-a821f5a7d49f.roa
File: 1f91f8f6-9f47-3789-8964-a821f5a7d49f.roa (raw, json)
Hash identifier: Xr4InjYETxqyc9GV7ZVEFvMguRj+QFAmu1PN5Nn6DMg=
Subject key identifier: 3F:04:98:4A:F9:87:2D:D0:E2:5F:FE:D4:D1:2C:9A:3F:FE:29:3B:D2
Certificate issuer: /CN=258880f7-56fa-4c7c-a7e7-6d113eda383d
Certificate serial: 010D0C9F43285848C6E63888330CE30C6251D500
Authority key identifier: E0:77:99:0D:E0:ED:30:9C:45:71:0C:2E:B0:73:14:DD:FC:55:BE:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/1f91f8f6-9f47-3789-8964-a821f5a7d49f.roa
Signing time: Wed 05 Feb 2025 02:00:39 +0000
ROA not before: Wed 05 Feb 2025 02:00:39 +0000
ROA not after: Tue 06 May 2025 01:00:39 +0000
asID: 151338
IP address blocks: 23.142.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:e6:38:88:33:0c:e3:0c:62:51:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258880f7-56fa-4c7c-a7e7-6d113eda383d
Validity
Not Before: Feb 5 02:00:39 2025 GMT
Not After : May 6 01:00:39 2025 GMT
Subject: CN=d4c8f5f4-13c5-4f15-946a-cee5f1ece589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:18:a1:c9:a3:8c:87:20:a4:32:b3:44:b7:e0:
7e:5d:7b:a8:3c:60:f3:7c:7e:96:14:87:b1:9c:92:
77:0f:34:d5:5a:0f:1a:d0:8d:83:50:37:64:78:e0:
11:b5:76:e8:84:b2:45:ac:1e:e1:a5:dc:4d:1b:c8:
ad:b4:8b:6a:55:27:50:1d:13:19:d1:60:51:4a:6d:
ee:1d:5d:d7:92:75:95:9b:51:2e:19:fa:d7:be:78:
df:74:3c:0f:4a:8a:b1:98:96:a8:22:1c:18:d2:7c:
0c:0c:fb:6d:51:f2:5a:bb:0e:1e:f3:b4:35:a4:84:
d7:87:bf:9c:69:5f:3f:3e:72:14:96:02:44:83:da:
ff:0d:61:08:57:97:9c:38:8b:a3:01:13:f0:56:f0:
49:9a:0b:1b:a7:0d:d8:69:b5:97:29:35:e6:58:25:
b3:37:7d:48:4e:e2:37:aa:bb:ae:75:c5:ef:37:83:
d8:57:a4:37:fb:31:85:05:21:84:de:84:f7:37:8d:
4e:aa:d1:79:4a:3a:72:3b:b2:98:52:ab:79:a4:9b:
b9:3f:f5:7e:fa:92:b8:21:eb:81:01:6f:cb:68:ce:
47:81:46:36:c8:1e:45:cb:e7:e5:cf:ac:81:3d:16:
93:ca:94:fd:6c:14:ed:fd:e6:4d:28:b0:ee:51:75:
48:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:04:98:4A:F9:87:2D:D0:E2:5F:FE:D4:D1:2C:9A:3F:FE:29:3B:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/1f91f8f6-9f47-3789-8964-a821f5a7d49f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/258880f7-56fa-4c7c-a7e7-6d113eda383d.crl
X509v3 Authority Key Identifier:
keyid:E0:77:99:0D:E0:ED:30:9C:45:71:0C:2E:B0:73:14:DD:FC:55:BE:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.142.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:e5:9f:49:96:db:5d:d6:15:9b:99:2c:30:26:7f:bd:10:42:
82:25:70:19:31:51:a4:57:b7:c2:11:97:48:3d:d3:5a:0a:15:
94:a9:84:ac:8e:e0:a6:11:ce:ed:d9:b6:4e:dd:2f:29:cd:b6:
25:ec:84:4f:04:49:c8:e5:02:f6:a9:47:ad:cc:5c:d3:ef:13:
be:f4:18:47:b2:2c:0c:45:c2:0a:a6:3e:f2:8e:94:05:c8:cc:
8d:31:73:ce:f8:01:a5:69:22:df:3f:fc:80:0f:4f:d8:d1:e8:
1f:20:c1:bd:d8:49:ff:ff:8f:18:c3:e7:e5:b2:85:ac:5d:86:
27:2d:da:62:15:0f:26:8f:7b:52:e9:51:0d:31:21:b9:0c:4a:
eb:2f:0b:e6:f6:53:dc:dd:35:f9:2b:95:72:39:a8:31:a2:9d:
5f:c3:cd:e6:e0:dc:b2:d1:0e:c7:c5:35:0f:b6:6a:74:0b:5c:
d5:fc:39:78:82:f2:22:e2:14:db:9f:69:e7:78:f7:5a:2f:35:
98:d6:37:29:c5:95:34:80:6c:55:0f:0f:9a:0b:19:9f:96:26:
ce:ee:2e:84:53:ab:4d:ba:33:f7:27:b0:0a:17:31:06:eb:6a:
6c:2c:01:c5:6c:22:38:b1:a6:ec:ba:0d:08:69:3e:20:e5:45:
fb:04:5b:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjG5jiIMwzjDGJR1QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjU4ODgwZjctNTZmYS00YzdjLWE3ZTctNmQxMTNlZGEz
ODNkMB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk
ZDRjOGY1ZjQtMTNjNS00ZjE1LTk0NmEtY2VlNWYxZWNlNTg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxihyaOMhyCkMrNEt+B+XXuoPGDzfH6WFIex
nJJ3DzTVWg8a0I2DUDdkeOARtXbohLJFrB7hpdxNG8ittItqVSdQHRMZ0WBRSm3u
HV3XknWVm1EuGfrXvnjfdDwPSoqxmJaoIhwY0nwMDPttUfJauw4e87Q1pITXh7+c
aV8/PnIUlgJEg9r/DWEIV5ecOIujARPwVvBJmgsbpw3YabWXKTXmWCWzN31ITuI3
qruudcXvN4PYV6Q3+zGFBSGE3oT3N41OqtF5SjpyO7KYUqt5pJu5P/V++pK4IeuB
AW/LaM5HgUY2yB5Fy+flz6yBPRaTypT9bBTt/eZNKLDuUXVIGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD8EmEr5hy3Q4l/+1NEsmj/+KTvSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yNTg4
ODBmNy01NmZhLTRjN2MtYTdlNy02ZDExM2VkYTM4M2QvMWY5MWY4ZjYtOWY0Ny0z
Nzg5LTg5NjQtYTgyMWY1YTdkNDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjU4ODgwZjctNTZmYS00YzdjLWE3
ZTctNmQxMTNlZGEzODNkLzI1ODg4MGY3LTU2ZmEtNGM3Yy1hN2U3LTZkMTEzZWRh
MzgzZC5jcmwwHwYDVR0jBBgwFoAU4HeZDeDtMJxFcQwusHMU3fxVvoowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8yNTg4ODBmNy01NmZhLTRjN2MtYTdlNy02ZDEx
M2VkYTM4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF47IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKDln0mW213WFZuZLDAmf70QQoIlcBkxUaRXt8IRl0g901oKFZSphKyO
4KYRzu3Ztk7dLynNtiXshE8EScjlAvapR63MXNPvE770GEeyLAxFwgqmPvKOlAXI
zI0xc874AaVpIt8//IAPT9jR6B8gwb3YSf//jxjD5+Wyhaxdhict2mIVDyaPe1Lp
UQ0xIbkMSusvC+b2U9zdNfkrlXI5qDGinV/Dzebg3LLRDsfFNQ+2anQLXNX8OXiC
8iLiFNufaed491ovNZjWNynFlTSAbFUPD5oLGZ+WJs7uLoRTq026M/cnsAoXMQbr
amwsAcVsIjixpuy6DQhpPiDlRfsEW98=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:01:48 2025 by rpki-client