Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0865c91a-fc99-3a13-9cf3-7354bf092ae1.roa
File: 0865c91a-fc99-3a13-9cf3-7354bf092ae1.roa (raw, json)
Hash identifier: 0zh0S48DzGhhPE92+30CASGhzSyPD0xfmTDVZUDuLSA=
Subject key identifier: BE:FA:C2:2E:17:DC:46:2C:08:4B:F6:3F:D5:41:05:65:94:0F:53:EC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848BBBB8F7FA71F3101B3BE6680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0865c91a-fc99-3a13-9cf3-7354bf092ae1.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.213.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:8f:7f:a7:1f:31:01:b3:be:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=843ed614-7927-4b86-ad44-332614e0f49a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:86:9e:17:49:0d:49:15:e8:57:d4:0b:93:ef:
18:0a:00:e9:b0:40:32:ad:cf:e3:af:e4:db:ac:25:
0c:d0:85:3c:c0:21:c6:e1:72:50:6a:cf:fa:f9:ed:
b4:9e:95:cd:42:5c:0d:54:e6:72:35:a0:77:13:86:
35:4e:a1:0d:df:eb:53:ac:23:2a:c3:4c:96:67:4c:
51:c1:1c:70:40:8a:76:a8:99:f0:58:48:16:9b:e5:
ff:02:27:24:77:1b:6d:27:79:ad:26:3c:93:a1:8d:
c1:80:05:75:7a:20:fc:b1:7e:5e:24:82:30:be:7d:
e1:ef:c3:1e:df:07:95:2c:93:e2:86:59:52:37:9e:
84:96:48:92:c3:16:b2:bf:11:10:66:4e:0d:34:a6:
07:7f:11:4b:35:e1:07:29:e0:b7:eb:d5:5b:89:f7:
94:c9:99:b5:ad:f9:de:3d:54:29:a0:27:62:d2:6f:
18:10:5e:d1:ff:92:17:61:49:48:29:3e:82:25:6b:
21:ac:e5:75:9e:0e:92:54:29:34:d0:a9:37:cc:7a:
af:c2:03:0c:02:7a:7d:33:48:2b:f2:5d:48:3e:61:
8f:e8:b3:4c:f9:8b:d0:44:40:27:bd:33:39:28:95:
06:8e:1c:4b:2e:eb:68:36:8a:61:42:63:f7:50:32:
da:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FA:C2:2E:17:DC:46:2C:08:4B:F6:3F:D5:41:05:65:94:0F:53:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0865c91a-fc99-3a13-9cf3-7354bf092ae1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.213.18.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:b1:44:1d:64:13:b5:24:e2:12:b0:9d:45:fa:28:d1:c5:f7:
1e:30:60:93:b3:b9:78:e9:63:47:85:01:03:52:c5:dd:14:9f:
5d:f4:cb:8b:ff:b1:d5:fc:0b:d2:f7:bd:2e:51:f0:52:74:6c:
39:93:5b:68:d3:b9:c2:88:d9:98:f9:a0:e7:6f:03:51:e0:26:
f2:18:82:00:66:3a:58:6c:56:8e:19:58:6e:2f:4b:1a:d8:cd:
51:07:1f:b6:fb:48:ac:19:40:1d:0c:ee:f0:d8:da:6b:7a:3b:
75:88:fc:a2:83:6b:e5:6b:ec:91:e0:69:d3:dc:da:00:d5:0b:
1e:c5:6b:28:46:b0:7f:07:0d:16:31:52:08:1d:9a:5d:bc:8a:
1e:f4:5e:91:5a:cc:33:c5:ea:90:aa:21:55:90:87:61:42:09:
85:1d:6f:24:aa:e7:b1:93:ef:9d:dc:ca:a2:1c:cd:f5:96:07:
ce:a2:87:a6:0d:74:f5:18:6d:1c:b1:3c:2f:69:80:51:5e:87:
4d:6a:da:4e:24:fc:77:e8:b3:39:56:08:82:bb:45:35:be:d7:
31:83:16:21:88:6e:56:ac:ca:cc:09:20:58:97:a5:93:6c:14:
d4:98:29:d8:f3:36:28:24:60:28:b7:24:fe:59:27:71:d0:41:
1c:c6:73:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u49/px8xAbO+ZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk
ODQzZWQ2MTQtNzkyNy00Yjg2LWFkNDQtMzMyNjE0ZTBmNDlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoaeF0kNSRXoV9QLk+8YCgDpsEAyrc/jr+Tb
rCUM0IU8wCHG4XJQas/6+e20npXNQlwNVOZyNaB3E4Y1TqEN3+tTrCMqw0yWZ0xR
wRxwQIp2qJnwWEgWm+X/AickdxttJ3mtJjyToY3BgAV1eiD8sX5eJIIwvn3h78Me
3weVLJPihllSN56ElkiSwxayvxEQZk4NNKYHfxFLNeEHKeC369VbifeUyZm1rfne
PVQpoCdi0m8YEF7R/5IXYUlIKT6CJWshrOV1ng6SVCk00Kk3zHqvwgMMAnp9M0gr
8l1IPmGP6LNM+YvQREAnvTM5KJUGjhxLLutoNophQmP3UDLahQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL76wi4X3EYsCEv2P9VBBWWUD1PsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDg2NWM5MWEtZmM5OS0z
YTEzLTljZjMtNzM1NGJmMDkyYWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9USMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFmxRB1kE7Uk4hKwnUX6KNHF9x4wYJOzuXjpY0eFAQNSxd0Un130y4v/
sdX8C9L3vS5R8FJ0bDmTW2jTucKI2Zj5oOdvA1HgJvIYggBmOlhsVo4ZWG4vSxrY
zVEHH7b7SKwZQB0M7vDY2mt6O3WI/KKDa+Vr7JHgadPc2gDVCx7FayhGsH8HDRYx
Uggdml28ih70XpFazDPF6pCqIVWQh2FCCYUdbySq57GT753cyqIczfWWB86ih6YN
dPUYbRyxPC9pgFFeh01q2k4k/HfoszlWCIK7RTW+1zGDFiGIblasyswJIFiXpZNs
FNSYKdjzNigkYCi3JP5ZJ3HQQRzGc0A=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:41 2025 by rpki-client