Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11dcdaf9-7187-3002-8386-95a578e3335e.roa
File: 11dcdaf9-7187-3002-8386-95a578e3335e.roa (raw, json)
Hash identifier: 8+Nk5kn/KlMsnJ/xRgjwThwwIA7Q9ClUrV4AjilqTkA=
Subject key identifier: 53:AB:61:98:7D:60:DA:2B:B0:95:B2:DC:1B:04:AF:82:BD:F5:A8:E4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAF319F3CD308C4C81F7500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11dcdaf9-7187-3002-8386-95a578e3335e.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 24.14.64.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:31:9f:3c:d3:08:c4:c8:1f:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=84f5f6dc-d483-4240-9151-d0c9c9dac3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e1:09:e6:65:cb:a8:f8:03:57:21:d1:7a:e9:
1f:f2:3a:8b:70:4c:c8:23:09:d4:f7:39:6c:5e:39:
25:cc:ff:68:b2:47:47:34:7c:ed:a9:fd:e5:6b:d3:
1e:fc:c2:1c:20:ee:6b:42:6d:a6:73:d6:1a:06:dd:
a8:df:a1:ef:dc:a3:54:8a:37:3d:c9:ad:66:f6:2b:
db:e0:9e:de:e1:f1:f7:75:ce:c6:d1:78:5a:88:8a:
3f:da:fc:ed:4f:00:18:60:b6:f9:0f:b3:21:9c:c1:
b3:92:bd:90:3c:68:b4:ea:f7:4e:22:c4:90:b6:08:
e0:7b:36:52:c1:5a:39:20:f8:ea:59:03:98:dc:49:
4f:11:76:58:c9:db:d9:63:f7:ee:4f:96:8f:95:51:
68:07:e6:87:23:b7:9f:ee:95:f9:f0:75:b2:19:63:
b2:98:bc:dc:24:df:67:d8:1c:4b:60:08:01:5f:83:
89:1d:76:1c:bc:f8:c6:dd:53:c2:bc:9a:22:69:4b:
0c:c5:a4:e2:86:dc:8a:90:71:a0:f4:62:5e:dd:56:
39:c0:06:83:cb:9e:eb:2a:67:68:86:a5:aa:24:ad:
03:88:88:d2:7a:ca:04:46:73:e2:fd:93:4a:90:78:
6a:76:68:ec:f8:da:f7:fe:82:21:5c:fe:99:1a:ed:
2b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AB:61:98:7D:60:DA:2B:B0:95:B2:DC:1B:04:AF:82:BD:F5:A8:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11dcdaf9-7187-3002-8386-95a578e3335e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.14.64.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:0a:a2:bc:a7:1d:e0:48:34:4b:62:e5:d8:ba:fe:e2:e0:18:
db:3e:f2:1d:35:0b:cd:96:f5:b6:3e:a4:e1:5a:a7:5a:fb:fc:
03:3a:28:9d:13:59:e7:44:6b:eb:e9:c1:95:37:6c:23:fc:50:
e4:37:4b:24:45:fa:a2:cf:18:00:73:c6:8e:31:21:34:9d:7d:
99:95:a7:f3:5e:c0:7c:8d:5a:49:30:6f:cb:c4:5d:cd:1a:e2:
7f:62:25:18:5c:13:7f:d6:fe:de:22:3f:b0:05:97:9b:01:23:
18:07:14:b6:f2:00:9c:19:a8:98:db:ed:4f:04:49:15:cf:7a:
5c:b9:b6:39:96:b9:4f:30:23:37:44:f7:bd:7a:5a:2e:36:5f:
d3:98:46:3a:8f:c5:d3:89:d2:27:8e:54:82:d7:f5:f2:db:63:
be:ea:a9:d0:f1:88:0b:60:38:0f:2f:77:58:d9:b4:f4:a5:d8:
45:7d:fb:8c:7b:52:1d:55:f5:f5:97:6f:8f:90:b4:14:e4:c2:
1c:0d:97:d7:c4:b4:25:6d:bf:5e:d9:88:ad:11:8b:a0:de:3e:
4d:92:2f:99:1d:b5:b3:dd:d2:72:78:7f:4d:72:4f:be:07:a2:
93:f8:d6:da:1f:e8:b0:a2:3d:44:d3:80:6f:ca:28:ad:31:fa:
d8:ee:4c:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrzGfPNMIxMgfdQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ODRmNWY2ZGMtZDQ4My00MjQwLTkxNTEtZDBjOWM5ZGFjM2MwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOEJ5mXLqPgDVyHReukf8jqLcEzIIwnU9zls
XjklzP9oskdHNHztqf3la9Me/MIcIO5rQm2mc9YaBt2o36Hv3KNUijc9ya1m9ivb
4J7e4fH3dc7G0XhaiIo/2vztTwAYYLb5D7MhnMGzkr2QPGi06vdOIsSQtgjgezZS
wVo5IPjqWQOY3ElPEXZYydvZY/fuT5aPlVFoB+aHI7ef7pX58HWyGWOymLzcJN9n
2BxLYAgBX4OJHXYcvPjG3VPCvJoiaUsMxaTihtyKkHGg9GJe3VY5wAaDy57rKmdo
hqWqJK0DiIjSesoERnPi/ZNKkHhqdmjs+Nr3/oIhXP6ZGu0rCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFOrYZh9YNorsJWy3BsEr4K99ajkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTFkY2RhZjktNzE4Ny0z
MDAyLTgzODYtOTVhNTc4ZTMzMzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGA5AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJMKorynHeBINEti5di6/uLgGNs+8h01C82W9bY+pOFap1r7/AM6KJ0T
WedEa+vpwZU3bCP8UOQ3SyRF+qLPGABzxo4xITSdfZmVp/NewHyNWkkwb8vEXc0a
4n9iJRhcE3/W/t4iP7AFl5sBIxgHFLbyAJwZqJjb7U8ESRXPely5tjmWuU8wIzdE
9716Wi42X9OYRjqPxdOJ0ieOVILX9fLbY77qqdDxiAtgOA8vd1jZtPSl2EV9+4x7
Uh1V9fWXb4+QtBTkwhwNl9fEtCVtv17ZiK0Ri6DePk2SL5kdtbPd0nJ4f01yT74H
opP41tof6LCiPUTTgG/KKK0x+tjuTB4=
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:03:40 2025 by rpki-client