Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/cb858b9e-023b-313c-891a-00a6d1fa8853.roa
File: cb858b9e-023b-313c-891a-00a6d1fa8853.roa (raw, json)
Hash identifier: 8ahplm43ocAaljP9hWZuM45Z4Q0uoHVKHJHJqh169q8=
Subject key identifier: 2B:69:1F:D5:BC:7C:4F:6A:19:DC:26:73:89:DA:4F:A2:5B:69:FA:66
Certificate issuer: /CN=70a36240-104b-454c-b230-bf415e356e88
Certificate serial: 010D0C9F43285848CA15CBFF70A6E93178B01980
Authority key identifier: 60:31:9D:80:02:90:58:C3:7E:6A:A4:E6:DB:D7:B7:CA:4E:8C:7B:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/cb858b9e-023b-313c-891a-00a6d1fa8853.roa
Signing time: Thu 06 Feb 2025 05:24:05 +0000
ROA not before: Thu 06 Feb 2025 05:24:05 +0000
ROA not after: Wed 07 May 2025 04:24:05 +0000
asID: 31898
IP address blocks: 23.128.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ca:15:cb:ff:70:a6:e9:31:78:b0:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a36240-104b-454c-b230-bf415e356e88
Validity
Not Before: Feb 6 05:24:05 2025 GMT
Not After : May 7 04:24:05 2025 GMT
Subject: CN=e8b248e0-f1b4-4181-b745-fa1908eca897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:77:7f:b2:ec:f5:a4:98:b7:67:6f:01:da:7e:
31:e6:2d:c6:93:72:dc:8b:b9:9b:0b:4d:8c:80:dc:
35:ee:d4:2d:9e:54:7f:ac:79:d8:be:c1:02:8b:e8:
8d:a4:cc:b4:cc:d8:62:c7:3f:85:11:c8:a1:57:29:
a7:ca:a9:25:43:ea:f4:8d:56:9c:16:b2:5a:b5:f3:
80:2a:27:a8:79:2a:9a:fe:95:03:c0:bd:cf:14:fb:
3f:1d:32:ba:c3:6f:18:a5:ff:84:f7:4a:e1:bf:30:
07:ad:7b:44:65:7a:fd:ee:36:05:59:d2:44:0f:d0:
0b:21:9f:2c:64:75:e6:33:30:7c:4b:de:f1:29:0a:
4c:66:81:38:8d:65:68:d0:16:3e:c8:a3:49:20:94:
7e:95:3c:2f:83:0c:f7:17:8b:63:81:d4:43:ca:d2:
bd:4d:83:5e:94:59:24:f8:79:0a:3e:eb:95:f9:fc:
1a:0c:4d:51:c7:54:92:cc:7b:35:50:80:6e:76:82:
0b:3c:ec:25:a5:3a:8f:79:4b:97:e3:93:3c:71:be:
1f:58:46:89:6d:d3:24:3d:95:a6:fa:5e:f0:f5:ed:
b3:36:9b:e5:c0:bb:f3:75:ba:63:47:85:b0:34:ea:
45:cb:6d:6a:e4:e9:63:9e:aa:c2:ed:33:82:5c:e0:
95:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:69:1F:D5:BC:7C:4F:6A:19:DC:26:73:89:DA:4F:A2:5B:69:FA:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/cb858b9e-023b-313c-891a-00a6d1fa8853.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/70a36240-104b-454c-b230-bf415e356e88.crl
X509v3 Authority Key Identifier:
keyid:60:31:9D:80:02:90:58:C3:7E:6A:A4:E6:DB:D7:B7:CA:4E:8C:7B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88.cer
sbgp-ipAddrBlock: critical
IPv4:
23.128.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:d3:9a:19:9d:40:88:f8:75:fb:91:21:79:8b:98:55:81:65:
3d:77:c1:d1:ca:60:c0:55:c6:84:5f:73:9d:ea:ac:3b:4e:2c:
76:6f:24:43:61:fc:b2:87:f2:f9:a0:01:4b:72:2c:03:fc:5a:
41:91:f5:cb:52:ff:d4:fd:e1:26:2c:cf:88:f7:66:05:a3:33:
f1:2e:3b:4e:e6:a9:b8:fc:c4:45:85:e5:84:f2:fa:66:bc:90:
80:9d:38:eb:4e:75:73:5d:89:0d:fe:bf:e1:29:a9:3f:97:07:
5d:cd:75:f6:f2:1a:55:b3:fe:49:18:93:af:bf:50:ad:0a:fe:
45:a2:30:90:15:30:bc:6e:d9:12:e0:0d:5f:de:c2:33:9b:5d:
50:d1:90:22:2f:bb:11:11:39:b3:0b:91:ff:c0:53:36:28:28:
6e:0b:0d:21:f0:49:a9:cb:20:b4:d2:71:25:be:ea:f7:c8:d6:
6e:ce:5a:4a:a7:a9:ac:6b:3e:10:7b:b1:fe:4e:2b:27:e9:4d:
d3:8e:78:39:b7:ad:b6:97:c3:8f:ea:04:f7:a1:38:94:2d:e6:
9e:26:3f:de:e2:7d:be:19:a8:bd:51:55:e0:42:df:98:de:49:
b2:de:3e:1e:53:61:43:5e:78:95:5b:5b:65:da:a7:d9:63:cd:
b7:1a:3d:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjKFcv/cKbpMXiwGYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzBhMzYyNDAtMTA0Yi00NTRjLWIyMzAtYmY0MTVlMzU2
ZTg4MB4XDTI1MDIwNjA1MjQwNVoXDTI1MDUwNzA0MjQwNVowLzEtMCsGA1UEAxMk
ZThiMjQ4ZTAtZjFiNC00MTgxLWI3NDUtZmExOTA4ZWNhODk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHd/suz1pJi3Z28B2n4x5i3Gk3Lci7mbC02M
gNw17tQtnlR/rHnYvsECi+iNpMy0zNhixz+FEcihVymnyqklQ+r0jVacFrJatfOA
KieoeSqa/pUDwL3PFPs/HTK6w28Ypf+E90rhvzAHrXtEZXr97jYFWdJED9ALIZ8s
ZHXmMzB8S97xKQpMZoE4jWVo0BY+yKNJIJR+lTwvgwz3F4tjgdRDytK9TYNelFkk
+HkKPuuV+fwaDE1Rx1SSzHs1UIBudoILPOwlpTqPeUuX45M8cb4fWEaJbdMkPZWm
+l7w9e2zNpvlwLvzdbpjR4WwNOpFy21q5OljnqrC7TOCXOCVfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCtpH9W8fE9qGdwmc4naT6JbafpmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83MGEz
NjI0MC0xMDRiLTQ1NGMtYjIzMC1iZjQxNWUzNTZlODgvY2I4NThiOWUtMDIzYi0z
MTNjLTg5MWEtMDBhNmQxZmE4ODUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzBhMzYyNDAtMTA0Yi00NTRjLWIy
MzAtYmY0MTVlMzU2ZTg4LzcwYTM2MjQwLTEwNGItNDU0Yy1iMjMwLWJmNDE1ZTM1
NmU4OC5jcmwwHwYDVR0jBBgwFoAUYDGdgAKQWMN+aqTm29e3yk6Me+kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi83MGEzNjI0MC0xMDRiLTQ1NGMtYjIzMC1iZjQx
NWUzNTZlODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4CUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADvTmhmdQIj4dfuRIXmLmFWBZT13wdHKYMBVxoRfc53qrDtOLHZvJENh
/LKH8vmgAUtyLAP8WkGR9ctS/9T94SYsz4j3ZgWjM/EuO07mqbj8xEWF5YTy+ma8
kICdOOtOdXNdiQ3+v+EpqT+XB13NdfbyGlWz/kkYk6+/UK0K/kWiMJAVMLxu2RLg
DV/ewjObXVDRkCIvuxERObMLkf/AUzYoKG4LDSHwSanLILTScSW+6vfI1m7OWkqn
qaxrPhB7sf5OKyfpTdOOeDm3rbaXw4/qBPehOJQt5p4mP97ifb4ZqL1RVeBC35je
SbLePh5TYUNeeJVbW2Xap9ljzbcaPTQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:42:36 2025 by rpki-client