
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/f2b2ef5e-e197-3273-9721-b9a575e1ad08.roa
File: f2b2ef5e-e197-3273-9721-b9a575e1ad08.roa (raw, json)
Hash identifier: JQ4GLxnQtXRel/6OZpUrf65XNY1IPIHCafkrL6eZyCs=
Subject key identifier: 05:68:37:46:91:23:1D:BA:CE:F8:03:DB:BB:69:76:08:C2:46:40:72
Certificate issuer: /CN=42eee53c-f373-4efe-aed3-4c501c9dde78
Certificate serial: 010D0C9F43285848F65BF3CA0F0C963858434500
Authority key identifier: A0:35:2C:B8:0B:B4:72:AB:EE:B9:9C:1B:4A:68:ED:08:B8:A1:FD:C7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/f2b2ef5e-e197-3273-9721-b9a575e1ad08.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 401474
IP address blocks: 23.129.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:f3:ca:0f:0c:96:38:58:43:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42eee53c-f373-4efe-aed3-4c501c9dde78
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=099caec8-6928-437a-8462-1a95a52afea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b3:44:00:03:d8:a5:75:c7:14:b4:f7:8a:e7:
38:5d:4e:b3:14:ac:ae:e7:c7:9a:89:93:25:1d:c5:
34:92:d5:66:a5:aa:7a:d6:fd:29:bf:82:5f:96:a5:
a3:11:59:a2:79:33:5c:3f:36:93:34:c0:9a:f5:6b:
b8:5d:7a:f1:a8:8c:6b:65:d0:5b:db:86:2e:dd:9f:
d2:9b:29:db:dd:de:48:c3:d5:4c:d0:ac:a2:7e:38:
0e:a5:23:db:d6:c2:cb:fd:b9:45:bb:ab:66:f7:51:
dd:f2:50:28:f1:76:53:d9:f9:43:ae:89:ea:de:45:
f2:b0:bb:29:44:6c:e0:f2:f8:82:e9:ec:9c:a5:bd:
68:fb:ca:f4:37:1c:6e:4a:68:2d:2e:4d:c1:dc:b7:
4b:12:0a:d4:58:3f:6c:4b:d8:eb:da:d9:88:4c:5f:
af:23:4c:00:aa:bb:d9:48:f4:eb:5f:15:d5:01:ff:
28:79:2f:72:c3:e2:95:08:8d:64:22:ae:08:9d:d6:
fb:0b:78:03:7a:1c:c1:b1:77:a0:68:ca:8f:bb:47:
e5:02:55:cf:ef:31:10:8b:fc:4f:f0:5b:10:c1:61:
7c:b5:40:7d:d9:2f:2a:88:23:39:c5:db:55:63:45:
6b:36:eb:3f:d7:5a:9d:f6:42:2b:70:f6:2c:ef:ed:
f4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:68:37:46:91:23:1D:BA:CE:F8:03:DB:BB:69:76:08:C2:46:40:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/f2b2ef5e-e197-3273-9721-b9a575e1ad08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/42eee53c-f373-4efe-aed3-4c501c9dde78.crl
X509v3 Authority Key Identifier:
keyid:A0:35:2C:B8:0B:B4:72:AB:EE:B9:9C:1B:4A:68:ED:08:B8:A1:FD:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78.cer
sbgp-ipAddrBlock: critical
IPv4:
23.129.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:2d:b8:ee:3c:7a:e9:1a:5c:d4:36:2b:cc:9b:75:34:70:c1:
f6:20:a5:4c:60:08:2f:19:a0:d7:1e:1c:c2:07:68:2a:ac:1b:
30:64:02:4c:a7:00:c6:d9:1f:97:0a:3c:04:8a:c3:87:aa:f9:
4e:22:87:1d:71:38:8e:9f:b3:af:91:7b:35:39:d7:86:1f:3d:
43:ba:9e:c8:66:2d:27:6e:32:78:56:b0:d4:2c:77:4f:0a:48:
dc:75:68:94:76:59:de:6f:3e:6a:5c:1d:08:bb:32:f9:7a:29:
be:c7:f5:b5:03:3d:f7:e5:04:b1:5e:33:76:2e:cb:6a:76:3a:
b7:45:f7:9d:56:65:da:e8:5e:5d:62:d8:82:c3:8a:83:f3:0e:
8a:e5:50:00:e2:f5:b0:d6:80:fe:7e:fe:5a:9b:14:37:f6:87:
7f:d6:70:51:04:b7:cf:2b:21:05:1c:bf:38:47:28:55:d8:7c:
9f:4a:18:c9:08:24:07:19:56:e8:2d:0b:5b:f0:a2:34:1b:4f:
14:f2:31:e7:9c:91:b1:e2:53:f8:2b:5b:88:93:bf:97:3e:27:
eb:1d:95:1c:07:8b:61:e1:66:44:73:85:35:1d:25:ce:24:fa:
3f:a1:8d:70:69:2d:11:0b:31:27:8c:d1:50:b9:e9:21:2e:7d:
f8:95:71:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W/PKDwyWOFhDRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDJlZWU1M2MtZjM3My00ZWZlLWFlZDMtNGM1MDFjOWRk
ZTc4MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk
MDk5Y2FlYzgtNjkyOC00MzdhLTg0NjItMWE5NWE1MmFmZWE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7NEAAPYpXXHFLT3iuc4XU6zFKyu58eaiZMl
HcU0ktVmpap61v0pv4JflqWjEVmieTNcPzaTNMCa9Wu4XXrxqIxrZdBb24Yu3Z/S
mynb3d5Iw9VM0KyifjgOpSPb1sLL/blFu6tm91Hd8lAo8XZT2flDronq3kXysLsp
RGzg8viC6eycpb1o+8r0NxxuSmgtLk3B3LdLEgrUWD9sS9jr2tmITF+vI0wAqrvZ
SPTrXxXVAf8oeS9yw+KVCI1kIq4Indb7C3gDehzBsXegaMqPu0flAlXP7zEQi/xP
8FsQwWF8tUB92S8qiCM5xdtVY0VrNus/11qd9kIrcPYs7+30awIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAVoN0aRIx26zvgD27tpdgjCRkByMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80MmVl
ZTUzYy1mMzczLTRlZmUtYWVkMy00YzUwMWM5ZGRlNzgvZjJiMmVmNWUtZTE5Ny0z
MjczLTk3MjEtYjlhNTc1ZTFhZDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDJlZWU1M2MtZjM3My00ZWZlLWFl
ZDMtNGM1MDFjOWRkZTc4LzQyZWVlNTNjLWYzNzMtNGVmZS1hZWQzLTRjNTAxYzlk
ZGU3OC5jcmwwHwYDVR0jBBgwFoAUoDUsuAu0cqvuuZwbSmjtCLih/ccwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi80MmVlZTUzYy1mMzczLTRlZmUtYWVkMy00YzUw
MWM5ZGRlNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4EMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAAtuO48eukaXNQ2K8ybdTRwwfYgpUxgCC8ZoNceHMIHaCqsGzBkAkyn
AMbZH5cKPASKw4eq+U4ihx1xOI6fs6+RezU514YfPUO6nshmLSduMnhWsNQsd08K
SNx1aJR2Wd5vPmpcHQi7Mvl6Kb7H9bUDPfflBLFeM3Yuy2p2OrdF951WZdroXl1i
2ILDioPzDorlUADi9bDWgP5+/lqbFDf2h3/WcFEEt88rIQUcvzhHKFXYfJ9KGMkI
JAcZVugtC1vwojQbTxTyMeeckbHiU/grW4iTv5c+J+sdlRwHi2HhZkRzhTUdJc4k
+j+hjXBpLRELMSeM0VC56SEuffiVcfM=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:56 2025 by rpki-client