Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/d7d4a38a-727e-3485-b505-a9b01ade3929.roa
File: d7d4a38a-727e-3485-b505-a9b01ade3929.roa (raw, json)
Hash identifier: USALrkcp0p7wrQ4XqmwutPnWT7UsezKdnM0b0FDRjEU=
Subject key identifier: 7E:74:EC:B5:CE:5A:45:AD:97:E3:F2:16:D4:B2:DF:79:17:5E:19:66
Certificate issuer: /CN=0059f687-be1d-4396-97d0-dbe0841392ac
Certificate serial: 010D0C9F4328584917DC390E42FB4E83D32D2780
Authority key identifier: 91:5A:27:BD:FD:4F:FA:BA:5C:37:F9:84:46:9D:C8:D9:14:7A:CE:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/d7d4a38a-727e-3485-b505-a9b01ade3929.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 23121
IP address blocks: 23.175.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:39:0e:42:fb:4e:83:d3:2d:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0059f687-be1d-4396-97d0-dbe0841392ac
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=e8e4b245-f2d6-4bfb-ab43-ae4ba7704c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:96:a2:06:68:2e:a5:e9:ed:fd:f4:c9:ca:
52:00:54:2c:3e:2b:96:56:b4:12:1f:f3:27:9d:4b:
ac:e8:b1:09:bd:90:d6:d4:0b:45:d1:27:be:20:6a:
0d:43:71:b0:a0:47:a0:ef:b9:26:85:40:94:d1:27:
d8:8c:14:12:be:1b:cd:e1:63:88:c8:e4:3e:2e:14:
ed:ec:0c:56:0c:c4:92:8a:91:a0:0b:d9:f7:74:42:
65:82:32:27:c7:6d:f2:ec:e9:9e:33:6e:69:10:e6:
ef:46:83:7c:0f:c1:e8:2d:86:eb:8e:43:24:82:88:
5b:56:e0:04:1d:1e:ec:c2:88:a6:31:d5:2b:65:cb:
c7:87:e4:e9:39:b7:0d:44:6e:70:1e:27:29:b3:19:
91:43:bc:ac:dd:2a:fd:5d:8d:a5:bc:9d:a7:ab:75:
3e:ae:c9:d8:90:71:b1:b4:b4:ae:b3:14:7b:d5:76:
65:c2:df:76:7c:3f:05:97:de:f7:f9:51:28:c0:7d:
11:a9:df:09:73:6d:2c:57:00:de:23:e0:5e:85:d4:
15:2f:b3:2d:33:ef:54:b2:12:a5:b6:d4:96:70:11:
63:73:7b:52:7c:f9:3e:45:ee:12:f5:99:b9:04:a5:
c0:fd:1a:32:35:0b:40:0b:9d:f2:5c:fe:e1:dd:da:
ec:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:74:EC:B5:CE:5A:45:AD:97:E3:F2:16:D4:B2:DF:79:17:5E:19:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/d7d4a38a-727e-3485-b505-a9b01ade3929.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/0059f687-be1d-4396-97d0-dbe0841392ac.crl
X509v3 Authority Key Identifier:
keyid:91:5A:27:BD:FD:4F:FA:BA:5C:37:F9:84:46:9D:C8:D9:14:7A:CE:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac.cer
sbgp-ipAddrBlock: critical
IPv4:
23.175.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:e0:43:7e:da:3b:d4:07:a1:14:21:f5:49:a0:93:19:b4:b3:
25:f3:cf:86:c2:ca:73:16:b7:4f:97:a2:e8:e9:50:10:76:67:
2d:5c:e0:89:15:f1:6a:8a:3f:5d:be:11:77:08:85:d3:ee:5f:
c2:9c:2d:9b:1d:6a:a1:ba:6c:a4:d8:9d:ca:ff:67:ca:d1:c7:
e7:d1:fb:f9:5f:bb:a4:b4:f8:99:cb:d1:5e:56:28:3f:bc:1c:
8e:a0:32:8c:98:b6:b0:a6:72:d2:e4:34:be:9f:5c:32:cb:76:
4d:c8:6e:08:e9:ce:90:ac:cf:78:0c:fe:8e:eb:c9:23:5b:5a:
33:da:42:26:f5:18:5d:0d:56:a1:1a:30:d4:23:a0:3f:e6:99:
bf:ff:4b:7c:3d:67:75:3b:2d:bf:83:5a:0a:5a:57:fd:14:a4:
96:31:a5:9e:ed:0c:fb:7a:97:00:96:a1:02:a8:f4:58:33:5f:
f4:e4:25:a2:12:6b:87:b3:d5:67:ad:2c:7a:e3:b5:c1:12:2a:
5b:c1:11:8e:cc:41:ac:9c:e8:c3:42:9c:2e:d9:cf:e2:e2:06:
b3:1a:f5:f0:22:e4:e8:d9:6d:2e:5a:11:5d:6f:99:65:ed:d8:
0d:22:2b:80:1f:23:2e:ae:16:ed:26:3a:d3:0c:15:58:c6:b2:
47:54:51:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3DkOQvtOg9MtJ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA1OWY2ODctYmUxZC00Mzk2LTk3ZDAtZGJlMDg0MTM5
MmFjMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk
ZThlNGIyNDUtZjJkNi00YmZiLWFiNDMtYWU0YmE3NzA0YzNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5yWogZoLqXp7f30ycpSAFQsPiuWVrQSH/Mn
nUus6LEJvZDW1AtF0Se+IGoNQ3GwoEeg77kmhUCU0SfYjBQSvhvN4WOIyOQ+LhTt
7AxWDMSSipGgC9n3dEJlgjInx23y7OmeM25pEObvRoN8D8HoLYbrjkMkgohbVuAE
HR7swoimMdUrZcvHh+TpObcNRG5wHicpsxmRQ7ys3Sr9XY2lvJ2nq3U+rsnYkHGx
tLSusxR71XZlwt92fD8Fl973+VEowH0Rqd8Jc20sVwDeI+BehdQVL7MtM+9UshKl
ttSWcBFjc3tSfPk+Re4S9Zm5BKXA/RoyNQtAC53yXP7h3drsDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH507LXOWkWtl+PyFtSy33kXXhlmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wMDU5
ZjY4Ny1iZTFkLTQzOTYtOTdkMC1kYmUwODQxMzkyYWMvZDdkNGEzOGEtNzI3ZS0z
NDg1LWI1MDUtYTliMDFhZGUzOTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDA1OWY2ODctYmUxZC00Mzk2LTk3
ZDAtZGJlMDg0MTM5MmFjLzAwNTlmNjg3LWJlMWQtNDM5Ni05N2QwLWRiZTA4NDEz
OTJhYy5jcmwwHwYDVR0jBBgwFoAUkVonvf1P+rpcN/mERp3I2RR6zoAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wMDU5ZjY4Ny1iZTFkLTQzOTYtOTdkMC1kYmUw
ODQxMzkyYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6/YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABTgQ37aO9QHoRQh9Umgkxm0syXzz4bCynMWt0+XoujpUBB2Zy1c4IkV
8WqKP12+EXcIhdPuX8KcLZsdaqG6bKTYncr/Z8rRx+fR+/lfu6S0+JnL0V5WKD+8
HI6gMoyYtrCmctLkNL6fXDLLdk3IbgjpzpCsz3gM/o7rySNbWjPaQib1GF0NVqEa
MNQjoD/mmb//S3w9Z3U7Lb+DWgpaV/0UpJYxpZ7tDPt6lwCWoQKo9FgzX/TkJaIS
a4ez1WetLHrjtcESKlvBEY7MQayc6MNCnC7Zz+LiBrMa9fAi5OjZbS5aEV1vmWXt
2A0iK4AfIy6uFu0mOtMMFVjGskdUUXo=
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:00:00 2025 by rpki-client