Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a/8299b204-4012-3a46-baa8-ef161ee859d5.roa
File: 8299b204-4012-3a46-baa8-ef161ee859d5.roa (raw, json)
Hash identifier: xhaQ8pDnOMoO+DbhHCRqLYShK7jh6jq4Q6a6UEBucpY=
Subject key identifier: BC:31:16:1C:4B:D4:19:77:18:BC:15:C2:55:24:38:70:62:8A:B8:7A
Certificate issuer: /CN=8785615b-4ba8-49c9-a63b-755d5560474a
Certificate serial: 010D0C9F4328584964806007046BF6A826ADFD80
Authority key identifier: 9A:0F:7D:C7:4B:73:5D:D6:9A:81:FB:CF:6C:00:C8:D2:C4:28:D9:56
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a/8299b204-4012-3a46-baa8-ef161ee859d5.roa
Signing time: Wed 02 Apr 2025 12:53:19 +0000
ROA not before: Wed 02 Apr 2025 12:53:19 +0000
ROA not after: Tue 01 Jul 2025 12:53:19 +0000
asID: 20473
IP address blocks: 23.136.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:64:80:60:07:04:6b:f6:a8:26:ad:fd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8785615b-4ba8-49c9-a63b-755d5560474a
Validity
Not Before: Apr 2 12:53:19 2025 GMT
Not After : Jul 1 12:53:19 2025 GMT
Subject: CN=8268a5f7-eafd-4fba-8b32-46ac8651807e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6c:f7:d2:88:9f:55:28:c0:97:bc:10:ff:1b:
54:db:89:86:d8:3a:5f:a7:6f:96:dd:92:cf:ad:4c:
ba:39:81:89:26:f0:41:5a:7b:a4:36:1b:bb:24:d0:
8d:97:d1:df:38:5d:bf:52:ba:53:7d:fa:f2:bf:26:
98:de:9e:d7:5f:28:83:9b:03:4a:7b:13:b3:98:87:
fc:cb:ff:15:e0:3e:ae:f6:56:cc:af:60:d0:ae:4e:
f5:59:d2:d0:54:42:49:2f:61:d5:fa:90:ad:9c:d5:
3d:96:22:c2:a9:9e:84:88:5b:4e:cc:73:00:f0:cf:
0d:57:08:4c:8f:53:31:14:7f:e1:51:96:e4:f2:cc:
83:48:6a:13:4d:47:8c:38:96:1e:85:ab:b6:2f:2a:
6b:1e:df:4b:85:de:7e:d1:f2:00:ec:a8:3d:d5:ca:
47:43:44:11:ec:a8:ed:6c:8f:8a:0f:d8:0e:96:36:
02:02:c6:68:1c:50:66:b0:bb:e8:f9:1e:5c:a0:a0:
96:e8:43:01:f5:28:65:13:a7:7e:d5:50:4d:2f:e5:
7b:a7:f5:45:9a:c1:1a:57:78:06:fc:23:f3:34:5f:
97:4a:a0:10:13:4f:77:a4:37:d0:96:c9:99:2e:fb:
42:57:8c:55:25:80:96:0c:da:6a:05:39:6c:43:f2:
cf:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:31:16:1C:4B:D4:19:77:18:BC:15:C2:55:24:38:70:62:8A:B8:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a/8299b204-4012-3a46-baa8-ef161ee859d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a/8785615b-4ba8-49c9-a63b-755d5560474a.crl
X509v3 Authority Key Identifier:
keyid:9A:0F:7D:C7:4B:73:5D:D6:9A:81:FB:CF:6C:00:C8:D2:C4:28:D9:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.136.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:52:f6:01:2f:55:e2:ec:2a:2f:d0:d5:5d:e0:ca:4b:da:34:
0c:53:ad:e5:00:a6:e8:83:ba:0a:e7:5a:09:02:58:e0:4d:6b:
3c:fa:e9:58:74:e1:90:0b:1b:da:d4:3b:66:e6:5e:1d:bb:29:
97:e2:e4:dd:1c:57:ef:b4:0b:89:0a:5e:18:10:dc:9c:7d:40:
09:7e:2c:45:a2:55:67:de:41:40:09:6f:4d:d7:a4:5b:a5:12:
92:11:08:c1:85:20:4c:cd:02:cc:29:5d:7b:df:fa:75:8c:10:
b4:2a:7d:ae:0d:a5:6b:b1:90:6e:23:bf:6f:a4:6e:92:30:16:
c3:76:29:e8:53:5a:eb:bb:c4:e1:30:7f:04:26:60:86:f8:46:
4b:53:8e:48:41:77:83:8f:c4:30:a3:55:20:a7:9f:a8:de:9f:
22:93:c3:49:b3:b6:f7:4d:94:41:d9:fd:88:88:82:96:c6:1f:
d0:cf:fa:49:79:d7:4f:08:d6:72:9a:15:a4:0e:50:c5:f4:0e:
9c:42:85:9d:c7:e2:49:96:f6:89:1b:58:f9:97:1d:88:35:e4:
b5:51:3d:35:30:45:86:19:ec:c1:9d:ad:4d:2e:91:a0:fa:fc:
6c:dc:63:11:d6:b1:68:09:d2:7f:12:83:3d:9a:0b:66:e6:0c:
9e:56:e6:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkgGAHBGv2qCat/YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODc4NTYxNWItNGJhOC00OWM5LWE2M2ItNzU1ZDU1NjA0
NzRhMB4XDTI1MDQwMjEyNTMxOVoXDTI1MDcwMTEyNTMxOVowLzEtMCsGA1UEAxMk
ODI2OGE1ZjctZWFmZC00ZmJhLThiMzItNDZhYzg2NTE4MDdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGz30oifVSjAl7wQ/xtU24mG2Dpfp2+W3ZLP
rUy6OYGJJvBBWnukNhu7JNCNl9HfOF2/UrpTffryvyaY3p7XXyiDmwNKexOzmIf8
y/8V4D6u9lbMr2DQrk71WdLQVEJJL2HV+pCtnNU9liLCqZ6EiFtOzHMA8M8NVwhM
j1MxFH/hUZbk8syDSGoTTUeMOJYehau2LyprHt9Lhd5+0fIA7Kg91cpHQ0QR7Kjt
bI+KD9gOljYCAsZoHFBmsLvo+R5coKCW6EMB9ShlE6d+1VBNL+V7p/VFmsEaV3gG
/CPzNF+XSqAQE093pDfQlsmZLvtCV4xVJYCWDNpqBTlsQ/LPNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLwxFhxL1Bl3GLwVwlUkOHBiirh6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84Nzg1
NjE1Yi00YmE4LTQ5YzktYTYzYi03NTVkNTU2MDQ3NGEvODI5OWIyMDQtNDAxMi0z
YTQ2LWJhYTgtZWYxNjFlZTg1OWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODc4NTYxNWItNGJhOC00OWM5LWE2
M2ItNzU1ZDU1NjA0NzRhLzg3ODU2MTViLTRiYTgtNDljOS1hNjNiLTc1NWQ1NTYw
NDc0YS5jcmwwHwYDVR0jBBgwFoAUmg99x0tzXdaagfvPbADI0sQo2VYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy84Nzg1NjE1Yi00YmE4LTQ5YzktYTYzYi03NTVk
NTU2MDQ3NGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4jEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEJS9gEvVeLsKi/Q1V3gykvaNAxTreUApuiDugrnWgkCWOBNazz66Vh0
4ZALG9rUO2bmXh27KZfi5N0cV++0C4kKXhgQ3Jx9QAl+LEWiVWfeQUAJb03XpFul
EpIRCMGFIEzNAswpXXvf+nWMELQqfa4NpWuxkG4jv2+kbpIwFsN2KehTWuu7xOEw
fwQmYIb4RktTjkhBd4OPxDCjVSCnn6jenyKTw0mztvdNlEHZ/YiIgpbGH9DP+kl5
108I1nKaFaQOUMX0DpxChZ3H4kmW9okbWPmXHYg15LVRPTUwRYYZ7MGdrU0ukaD6
/GzcYxHWsWgJ0n8Sgz2aC2bmDJ5W5jA=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:18 2025 by rpki-client on console.sobornost.net