Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/95e32c24-9724-3044-bbbe-40ccb8806632.roa
File: 95e32c24-9724-3044-bbbe-40ccb8806632.roa (raw, json)
Hash identifier: COFcNykOb+3cEYk3YAgY5jd1APCLWAT8mqg1Ew8Ys6Y=
Subject key identifier: 1A:E2:52:EE:28:19:E7:D9:FF:FC:4F:A9:F7:2F:46:A4:00:1F:74:A6
Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial: 010D0C9F4328584950F969C190D4706EC6CC6B00
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/95e32c24-9724-3044-bbbe-40ccb8806632.roa
Signing time: Wed 26 Mar 2025 13:00:53 +0000
ROA not before: Wed 26 Mar 2025 13:00:53 +0000
ROA not after: Tue 24 Jun 2025 13:00:53 +0000
asID: 12083
IP address blocks: 23.28.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:50:f9:69:c1:90:d4:70:6e:c6:cc:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Validity
Not Before: Mar 26 13:00:53 2025 GMT
Not After : Jun 24 13:00:53 2025 GMT
Subject: CN=ca8a7483-9474-403b-9c4b-44babb39274e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f5:3e:95:50:cd:4b:24:ca:38:0d:2d:31:79:
67:a8:ee:48:46:d9:dc:f0:73:e2:32:ca:3e:88:77:
2b:2c:a8:64:fd:d0:36:5a:58:f9:22:4e:f9:8d:33:
7a:3c:84:6d:4c:42:30:48:25:c1:86:cf:4e:14:7a:
cf:9d:4e:99:50:c6:8a:e9:c1:4d:eb:3a:5c:82:3f:
15:31:a8:c2:50:b2:f2:39:f5:a9:7c:31:3c:7d:af:
d2:2f:86:ef:46:0f:c7:64:5e:1c:b5:44:62:44:45:
fe:d2:41:26:b5:8b:d2:73:be:9b:80:46:03:fb:68:
22:0b:26:5f:56:9f:24:11:c0:0d:9b:14:d2:b4:d5:
25:8d:68:4a:cb:23:4f:13:e8:4f:bc:b3:80:89:29:
55:d6:0c:47:01:e8:f0:03:08:ae:a1:1d:c5:c7:ae:
f4:83:74:f5:c0:c7:1f:a2:fc:3f:b0:ca:43:6e:9e:
35:8a:ea:fc:f6:a9:79:74:b6:78:20:64:33:24:97:
e6:e4:d7:a4:53:26:9a:f4:1f:98:10:1e:74:17:d8:
ab:2e:74:3c:07:fe:60:06:f1:b5:0f:4d:08:84:cb:
25:38:c8:2e:a5:9b:0a:d3:1d:52:e5:63:dd:16:5a:
ca:d7:5c:00:87:c8:73:17:bc:68:37:d7:31:fe:cf:
88:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E2:52:EE:28:19:E7:D9:FF:FC:4F:A9:F7:2F:46:A4:00:1F:74:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/95e32c24-9724-3044-bbbe-40ccb8806632.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
X509v3 Authority Key Identifier:
keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
sbgp-ipAddrBlock: critical
IPv4:
23.28.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:08:29:59:5b:a8:02:8a:f3:90:d6:0c:54:50:e0:2c:7a:18:
17:0f:a8:66:5d:36:8d:d4:81:0e:87:10:e3:5f:74:76:7f:23:
50:4f:7d:a7:c7:23:a3:90:c9:0e:8f:82:e5:f1:27:d3:28:0d:
11:1b:bb:48:94:c8:a5:13:c0:a7:a3:9b:ec:e6:e6:ec:80:a4:
f1:08:0b:07:b2:76:fa:43:55:9c:12:f0:db:ef:4c:7f:1c:71:
59:dc:e6:77:c3:87:22:58:cc:17:76:52:56:ee:1d:de:c3:45:
a6:27:ac:f8:df:d1:2c:25:f5:7a:00:b2:e4:36:b5:f9:e8:c7:
e3:62:3c:79:bb:1c:61:35:04:f2:af:80:48:b0:b8:08:b7:d8:
cf:1c:3d:d8:f9:1f:c7:fd:98:58:91:a5:29:c9:3b:7e:f8:7b:
17:bd:db:4b:2d:31:68:38:c1:0d:c8:f6:c5:6d:9b:c6:5b:96:
15:8d:7f:25:26:53:b5:f3:30:63:17:45:f3:f6:fa:89:ed:3f:
f3:5f:e7:52:c1:19:ec:a8:4d:ee:ba:12:9b:32:ee:1c:b4:58:
5d:1e:10:34:2f:f2:44:a1:23:0d:e4:d4:32:4a:9f:7e:1d:f0:
f0:cc:8b:d5:91:4b:52:70:21:7b:ee:c4:da:32:54:99:a8:3d:
8c:e3:d1:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElQ+WnBkNRwbsbMawAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm
NWZlMB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk
Y2E4YTc0ODMtOTQ3NC00MDNiLTljNGItNDRiYWJiMzkyNzRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/U+lVDNSyTKOA0tMXlnqO5IRtnc8HPiMso+
iHcrLKhk/dA2Wlj5Ik75jTN6PIRtTEIwSCXBhs9OFHrPnU6ZUMaK6cFN6zpcgj8V
MajCULLyOfWpfDE8fa/SL4bvRg/HZF4ctURiREX+0kEmtYvSc76bgEYD+2giCyZf
Vp8kEcANmxTStNUljWhKyyNPE+hPvLOAiSlV1gxHAejwAwiuoR3Fx670g3T1wMcf
ovw/sMpDbp41iur89ql5dLZ4IGQzJJfm5NekUyaa9B+YEB50F9irLnQ8B/5gBvG1
D00IhMslOMgupZsK0x1S5WPdFlrK11wAh8hzF7xoN9cx/s+IdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBriUu4oGefZ//xPqfcvRqQAH3SmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl
MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvOTVlMzJjMjQtOTcyNC0z
MDQ0LWJiYmUtNDBjY2I4ODA2NjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2
ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl
ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2
N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHFxyAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGEIKVlbqAKK85DWDFRQ4Cx6GBcPqGZdNo3UgQ6HEONfdHZ/I1BPfafH
I6OQyQ6PguXxJ9MoDREbu0iUyKUTwKejm+zm5uyApPEICweydvpDVZwS8NvvTH8c
cVnc5nfDhyJYzBd2UlbuHd7DRaYnrPjf0Swl9XoAsuQ2tfnox+NiPHm7HGE1BPKv
gEiwuAi32M8cPdj5H8f9mFiRpSnJO374exe920stMWg4wQ3I9sVtm8ZblhWNfyUm
U7XzMGMXRfP2+ontP/Nf51LBGeyoTe66Epsy7hy0WF0eEDQv8kShIw3k1DJKn34d
8PDMi9WRS1JwIXvuxNoyVJmoPYzj0f8=
-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:56 2025 by rpki-client on console.sobornost.net