Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/b6734533-e711-33ae-911c-56d7a3139610.roa
File: b6734533-e711-33ae-911c-56d7a3139610.roa (raw, json)
Hash identifier: ACJA7TafBCnhrC5H+MM8DpjAFS+NI/90kxEiqNx2KTs=
Subject key identifier: 1E:E0:FC:64:DF:AA:18:1E:8C:4C:D0:BA:7D:1B:DE:B6:EC:6C:96:71
Certificate issuer: /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial: 010D0C9F432858496FAF0DCC15F24A5316B5DF00
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/b6734533-e711-33ae-911c-56d7a3139610.roa
Signing time: Sun 06 Apr 2025 13:01:01 +0000
ROA not before: Sun 06 Apr 2025 13:01:01 +0000
ROA not after: Sat 05 Jul 2025 13:01:01 +0000
asID: 393336
IP address blocks: 23.163.208.0/22 maxlen: 24
23.163.212.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6f:af:0d:cc:15:f2:4a:53:16:b5:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Validity
Not Before: Apr 6 13:01:01 2025 GMT
Not After : Jul 5 13:01:01 2025 GMT
Subject: CN=3c77f263-b297-48ef-9deb-e79e77f1f8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:95:d2:62:81:13:0d:90:8d:5f:25:b7:58:0c:
6b:e8:0a:99:6b:84:3b:52:7a:6d:38:f0:9b:a7:42:
2b:a2:78:c9:a2:0a:93:15:d8:72:58:71:a2:f8:0e:
9c:bf:1a:31:d4:b8:76:fe:64:da:e6:f9:bf:21:fc:
95:1d:62:5e:ce:82:17:e3:45:8f:74:f9:dc:0c:8f:
34:69:62:be:3d:b0:52:89:2e:6d:dd:66:03:9d:5d:
2a:c8:a3:49:e5:09:1e:e4:5f:b7:ff:d7:dc:91:4e:
ec:41:be:82:a7:1c:95:93:01:6d:47:de:cb:73:10:
5e:e7:3a:2c:79:1c:50:9e:b1:5b:0f:c4:f7:8f:bd:
28:6d:ba:e4:6b:48:a2:de:85:22:37:76:6d:e9:d3:
b4:c1:3d:07:44:26:ef:15:81:77:3c:ad:da:f5:bc:
71:39:36:5b:7a:f5:e3:14:d3:73:5f:df:30:01:d5:
39:63:18:47:52:48:ff:28:ea:e0:42:70:2b:6d:ae:
60:12:7d:87:7d:e6:b3:fd:90:33:e1:d5:f8:8e:10:
04:e4:26:ba:c5:c7:5a:4c:a0:fa:4a:ed:7b:f7:6d:
75:2a:db:85:63:37:f6:eb:87:0b:ab:5b:43:41:d4:
61:0b:74:a5:25:b0:0f:1c:02:d7:9d:40:25:30:a3:
9e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E0:FC:64:DF:AA:18:1E:8C:4C:D0:BA:7D:1B:DE:B6:EC:6C:96:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/b6734533-e711-33ae-911c-56d7a3139610.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl
X509v3 Authority Key Identifier:
keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.163.208.0-23.163.213.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:f8:4d:b2:15:a1:cb:92:3f:66:88:94:7f:64:2c:74:01:f7:
6a:15:dc:30:93:7a:02:14:cb:62:d0:e4:9a:14:b8:b1:34:99:
b9:35:52:cf:9c:ca:0e:93:e8:6d:4e:48:04:60:08:1e:a9:81:
99:ac:f4:95:c1:50:80:33:1e:9e:72:d2:0c:78:64:81:6f:bf:
09:54:80:72:21:e1:08:68:b1:9c:4e:47:23:9e:f8:86:cf:1a:
ad:08:0b:df:d1:f5:6d:98:3f:1c:b8:73:12:46:a9:4b:57:61:
1f:2c:eb:1e:3b:f0:be:5a:47:c9:6a:e0:f8:1c:6c:bd:a3:f5:
35:e6:46:6b:aa:c0:0d:fd:4f:e2:b8:13:21:0a:22:57:33:53:
7d:90:b5:6d:01:d2:a5:7d:a1:d8:86:0e:3a:4c:da:e1:ad:75:
d1:62:0a:46:e2:cc:91:ae:2c:b7:bd:98:fc:be:81:79:eb:cd:
e5:0d:27:29:fe:bf:1d:98:d0:0f:31:b9:ed:85:50:24:0c:4a:
78:0e:1e:a5:6e:49:e7:d0:ef:d7:c1:54:45:3b:15:5a:54:e3:
00:6f:ba:25:34:5a:8b:77:e7:e1:bd:16:6d:d5:cf:1b:c5:48:
db:cf:b7:cf:43:31:fa:5f:c0:25:aa:55:79:7b:df:e4:59:4d:
51:d7:eb:cc
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWElvrw3MFfJKUxa13wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk0YjJlZDgtMWEyYS00YmQxLWI3MDktNzQ3OWRiN2M0
ZWE5MB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk
M2M3N2YyNjMtYjI5Ny00OGVmLTlkZWItZTc5ZTc3ZjFmOGQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJXSYoETDZCNXyW3WAxr6AqZa4Q7UnptOPCb
p0IronjJogqTFdhyWHGi+A6cvxox1Lh2/mTa5vm/IfyVHWJezoIX40WPdPncDI80
aWK+PbBSiS5t3WYDnV0qyKNJ5Qke5F+3/9fckU7sQb6CpxyVkwFtR97LcxBe5zos
eRxQnrFbD8T3j70obbrka0ii3oUiN3Zt6dO0wT0HRCbvFYF3PK3a9bxxOTZbevXj
FNNzX98wAdU5YxhHUkj/KOrgQnArba5gEn2Hfeaz/ZAz4dX4jhAE5Ca6xcdaTKD6
Su179211KtuFYzf264cLq1tDQdRhC3SlJbAPHALXnUAlMKOe9QIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFB7g/GTfqhgejEzQun0b3rbsbJZxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OTRi
MmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5ZGI3YzRlYTkvYjY3MzQ1MzMtZTcxMS0z
M2FlLTkxMWMtNTZkN2EzMTM5NjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTk0YjJlZDgtMWEyYS00YmQxLWI3
MDktNzQ3OWRiN2M0ZWE5Lzk5NGIyZWQ4LTFhMmEtNGJkMS1iNzA5LTc0NzlkYjdj
NGVhOS5jcmwwHwYDVR0jBBgwFoAUkH1OvQyn9d0T/0KVHpr0mzPpeXwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85OTRiMmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5
ZGI3YzRlYTkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAQXo9AD
BAEXo9QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAqfhNshWhy5I/ZoiUf2QsdAH3ahXcMJN6AhTLYtDkmhS4
sTSZuTVSz5zKDpPobU5IBGAIHqmBmaz0lcFQgDMennLSDHhkgW+/CVSAciHhCGix
nE5HI574hs8arQgL39H1bZg/HLhzEkapS1dhHyzrHjvwvlpHyWrg+BxsvaP1NeZG
a6rADf1P4rgTIQoiVzNTfZC1bQHSpX2h2IYOOkza4a110WIKRuLMka4st72Y/L6B
eevN5Q0nKf6/HZjQDzG57YVQJAxKeA4epW5J59Dv18FURTsVWlTjAG+6JTRai3fn
4b0WbdXPG8VI28+3z0Mx+l/AJapVeXvf5FlNUdfrzA==
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:12 2025 by rpki-client on console.sobornost.net