Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/796457a9-5a46-3973-a18c-008402e30cc8.roa
File: 796457a9-5a46-3973-a18c-008402e30cc8.roa (raw, json)
Hash identifier: Cn2Vb5m/QrqfAmpIN28E1kuMEvS4n3uZJTnw4GKX8q0=
Subject key identifier: CB:0F:DA:20:41:24:86:17:02:F9:16:9F:78:E9:3A:69:AC:8B:5F:CB
Certificate issuer: /CN=10c8bda0-3c91-4c6f-b928-28b77211b8d1
Certificate serial: 010D0C9F43285848DA70FC9501492B3057135400
Authority key identifier: 64:93:ED:72:BC:87:D7:E9:1D:75:2B:E2:1D:D8:D8:60:85:4F:AC:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/796457a9-5a46-3973-a18c-008402e30cc8.roa
Signing time: Wed 12 Feb 2025 02:00:39 +0000
ROA not before: Wed 12 Feb 2025 02:00:39 +0000
ROA not after: Tue 13 May 2025 01:00:39 +0000
asID: 59117
IP address blocks: 23.179.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:da:70:fc:95:01:49:2b:30:57:13:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10c8bda0-3c91-4c6f-b928-28b77211b8d1
Validity
Not Before: Feb 12 02:00:39 2025 GMT
Not After : May 13 01:00:39 2025 GMT
Subject: CN=875f489f-1830-4397-9435-9668acdd0ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ac:d8:db:e3:07:af:e3:21:8b:49:41:97:60:
b2:28:57:c7:a6:47:ba:0c:92:74:e1:08:da:2e:f4:
db:76:83:88:87:ee:ce:af:57:94:86:a9:3b:2a:67:
d0:3d:7f:31:0a:3c:9f:a0:3e:4b:d0:53:a9:d8:c6:
71:c2:59:09:39:e6:31:61:d4:03:37:8b:43:d1:3e:
ec:d6:ec:9a:e3:84:8e:83:8d:79:5d:04:2e:71:cf:
84:4c:88:58:00:d3:6b:8e:91:c2:1e:5b:10:0f:c1:
e9:f6:ef:24:17:70:d8:0e:33:20:f1:ee:91:4e:9f:
f9:19:21:f9:42:b5:9b:3c:f3:4b:2d:05:69:3e:69:
72:43:eb:a5:53:97:f3:b8:e1:b9:57:51:8e:c7:19:
77:fa:a7:c5:ea:3a:0e:0b:4e:91:68:61:80:eb:2f:
2c:de:5a:10:f9:68:5f:d6:2d:bf:f8:62:11:89:61:
e6:6e:3b:dd:32:0f:47:3e:fe:0d:0a:d9:e8:c9:96:
dd:df:c5:51:74:6f:d5:11:fd:44:4e:cc:b3:c6:40:
c9:e8:b7:64:36:b0:de:70:76:97:65:d3:6b:40:68:
82:2a:33:fc:aa:61:30:79:86:39:b8:8f:0f:4e:1c:
49:46:a2:9d:3f:08:72:0c:7a:78:1c:c2:e9:9e:48:
6f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0F:DA:20:41:24:86:17:02:F9:16:9F:78:E9:3A:69:AC:8B:5F:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/796457a9-5a46-3973-a18c-008402e30cc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/10c8bda0-3c91-4c6f-b928-28b77211b8d1.crl
X509v3 Authority Key Identifier:
keyid:64:93:ED:72:BC:87:D7:E9:1D:75:2B:E2:1D:D8:D8:60:85:4F:AC:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1.cer
sbgp-ipAddrBlock: critical
IPv4:
23.179.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:9b:a6:81:ef:1d:f8:d6:42:08:7d:db:c4:dd:68:2d:19:46:
08:29:09:51:68:01:67:eb:67:bc:a6:b8:ed:29:e7:69:bd:7b:
f9:d2:63:04:6a:04:fd:6f:e1:15:20:8c:8c:7f:18:ff:ed:ad:
c5:9b:5e:6d:be:ad:43:af:f5:40:ea:ec:1e:05:60:63:18:de:
f4:a1:0c:c3:50:70:e4:f5:de:a6:44:aa:07:14:92:fa:de:36:
6f:78:c4:dd:fd:fe:76:81:99:74:c8:37:96:b8:29:3b:9d:b0:
8b:26:43:a6:bc:e8:dc:ea:02:fa:71:0a:54:0e:73:f2:c3:d8:
c7:3a:fe:3b:c3:60:d1:90:08:c3:76:62:95:fd:0e:34:b7:79:
ee:0c:68:fc:8b:1b:02:7e:ec:19:7b:6c:ab:24:7e:25:f4:14:
76:f4:ca:44:c7:4d:6a:89:02:a8:e3:69:e2:7b:a5:c8:26:a7:
b2:5e:ca:36:12:a4:64:bb:76:f2:8a:bb:b4:32:c0:80:1f:2c:
66:e4:09:82:95:6f:97:17:0b:12:21:ca:fb:56:bc:5f:ef:f3:
04:cc:0b:2c:e5:38:3f:8f:47:0d:e1:3b:b7:be:09:d8:bd:c6:
fc:12:f9:18:40:b2:ea:26:13:71:58:26:ae:d5:3d:ae:cf:6f:
6e:0a:30:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacPyVAUkrMFcTVAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTBjOGJkYTAtM2M5MS00YzZmLWI5MjgtMjhiNzcyMTFi
OGQxMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk
ODc1ZjQ4OWYtMTgzMC00Mzk3LTk0MzUtOTY2OGFjZGQwZmZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KzY2+MHr+Mhi0lBl2CyKFfHpke6DJJ04Qja
LvTbdoOIh+7Or1eUhqk7KmfQPX8xCjyfoD5L0FOp2MZxwlkJOeYxYdQDN4tD0T7s
1uya44SOg415XQQucc+ETIhYANNrjpHCHlsQD8Hp9u8kF3DYDjMg8e6RTp/5GSH5
QrWbPPNLLQVpPmlyQ+ulU5fzuOG5V1GOxxl3+qfF6joOC06RaGGA6y8s3loQ+Whf
1i2/+GIRiWHmbjvdMg9HPv4NCtnoyZbd38VRdG/VEf1ETsyzxkDJ6LdkNrDecHaX
ZdNrQGiCKjP8qmEweYY5uI8PThxJRqKdPwhyDHp4HMLpnkhv7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMsP2iBBJIYXAvkWn3jpOmmsi1/LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMGM4
YmRhMC0zYzkxLTRjNmYtYjkyOC0yOGI3NzIxMWI4ZDEvNzk2NDU3YTktNWE0Ni0z
OTczLWExOGMtMDA4NDAyZTMwY2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTBjOGJkYTAtM2M5MS00YzZmLWI5
MjgtMjhiNzcyMTFiOGQxLzEwYzhiZGEwLTNjOTEtNGM2Zi1iOTI4LTI4Yjc3MjEx
YjhkMS5jcmwwHwYDVR0jBBgwFoAUZJPtcryH1+kddSviHdjYYIVPrH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xMGM4YmRhMC0zYzkxLTRjNmYtYjkyOC0yOGI3
NzIxMWI4ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7P4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH+bpoHvHfjWQgh928TdaC0ZRggpCVFoAWfrZ7ymuO0p52m9e/nSYwRq
BP1v4RUgjIx/GP/trcWbXm2+rUOv9UDq7B4FYGMY3vShDMNQcOT13qZEqgcUkvre
Nm94xN39/naBmXTIN5a4KTudsIsmQ6a86NzqAvpxClQOc/LD2Mc6/jvDYNGQCMN2
YpX9DjS3ee4MaPyLGwJ+7Bl7bKskfiX0FHb0ykTHTWqJAqjjaeJ7pcgmp7JeyjYS
pGS7dvKKu7QywIAfLGbkCYKVb5cXCxIhyvtWvF/v8wTMCyzlOD+PRw3hO7e+Cdi9
xvwS+RhAsuomE3FYJq7VPa7Pb24KMKI=
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:26 2025 by rpki-client