Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/289070a8-416e-3675-a127-cec7cd0fd6b2.roa
File: 289070a8-416e-3675-a127-cec7cd0fd6b2.roa (raw, json)
Hash identifier: NOD66XbWvDVPSbSp2Vv2TkMxCsqryMHuTiYZqKT2Ry8=
Subject key identifier: 75:6B:6F:B2:B8:86:BF:5C:46:99:83:95:06:31:73:C7:7A:87:7D:54
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A209E537A271BB9FF442F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/289070a8-416e-3675-a127-cec7cd0fd6b2.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.40.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:9e:53:7a:27:1b:b9:ff:44:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=4d32212f-a384-4bc3-a46e-4e5623c1cd15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:21:1a:e4:94:7d:f1:7d:d7:e0:01:8e:da:f0:
d8:fd:8d:1a:fd:7c:4f:0d:ee:6d:b0:08:10:3f:53:
8d:4a:38:ab:70:8e:4c:fa:eb:f2:97:4b:9e:ab:bf:
2a:9f:20:4e:0b:0e:8d:bc:fb:03:cf:4d:45:2e:ae:
af:32:67:35:ea:00:49:eb:f9:1f:e8:59:1a:f7:9e:
7c:21:63:af:d6:43:31:3e:2c:80:1a:16:2d:9c:69:
e7:fa:be:eb:a7:21:81:e8:6b:67:12:4c:5f:96:ed:
48:5f:53:94:70:1c:1c:67:e3:29:84:59:f6:a5:f6:
af:67:cf:52:e0:59:90:47:ae:6b:64:75:a3:02:74:
37:e8:1e:02:05:dd:98:ff:7c:9e:1b:b9:e6:4e:1b:
76:4b:4a:87:a2:7e:9c:50:26:58:de:e9:63:50:ef:
3c:c2:07:b0:c3:bf:38:18:5c:95:2d:74:8e:0f:d3:
ed:83:0f:c0:8b:eb:29:e1:1d:e2:cf:25:7a:56:bc:
de:1d:72:96:24:f2:e7:d5:45:8e:ba:1a:01:fc:ce:
d0:08:0b:f7:30:f1:07:05:76:3f:d5:2f:d5:c7:79:
64:e6:6a:2f:ba:e8:60:d5:66:85:3f:d8:81:20:cc:
18:42:e9:4e:91:bc:6f:b1:e7:f3:41:24:df:8b:38:
03:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6B:6F:B2:B8:86:BF:5C:46:99:83:95:06:31:73:C7:7A:87:7D:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/289070a8-416e-3675-a127-cec7cd0fd6b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.40.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:6b:cc:1e:c2:7d:75:45:61:d5:f1:a3:40:92:46:ae:76:0d:
b8:c2:94:2c:b1:4b:96:ca:99:45:97:31:1d:f2:d3:d8:a8:ba:
15:07:48:ef:9f:42:62:28:f9:ff:f6:e2:2d:2c:dc:30:82:43:
5e:49:0e:5c:05:50:8d:d4:22:c9:8e:79:43:6e:36:0e:a1:e3:
0f:cb:92:8b:e0:f6:85:76:3b:39:44:a7:39:01:f0:3c:59:28:
2b:99:dd:fe:40:48:02:f7:76:0c:ed:c9:57:36:62:49:18:8c:
c1:8e:92:ca:75:8f:ee:21:1b:2e:6f:90:da:ae:4e:28:83:87:
b1:14:a3:23:4d:cd:b6:79:38:a2:60:19:1b:63:73:a4:55:1a:
86:98:7d:37:47:b7:ce:e7:ec:cc:15:7e:4c:c1:a1:41:10:8e:
41:f0:a8:b5:22:c5:52:01:b7:d8:7b:1e:e1:e5:00:d3:ad:2f:
27:2f:f6:dc:41:f3:59:40:6f:bb:a4:64:56:5f:8a:4f:7c:7d:
fc:06:6f:dd:e7:2d:38:d2:f9:a3:4a:de:57:f9:a0:9b:f1:32:
f6:c3:1e:63:07:9e:4c:62:5f:ee:8f:aa:61:fa:df:91:ef:31:
26:1a:ce:fe:fd:51:16:b8:f5:51:9f:6a:e1:c9:a7:d2:c8:5d:
a9:81:f9:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6IJ5Teicbuf9EL4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk
NGQzMjIxMmYtYTM4NC00YmMzLWE0NmUtNGU1NjIzYzFjZDE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiEa5JR98X3X4AGO2vDY/Y0a/XxPDe5tsAgQ
P1ONSjircI5M+uvyl0ueq78qnyBOCw6NvPsDz01FLq6vMmc16gBJ6/kf6Fka9558
IWOv1kMxPiyAGhYtnGnn+r7rpyGB6GtnEkxflu1IX1OUcBwcZ+MphFn2pfavZ89S
4FmQR65rZHWjAnQ36B4CBd2Y/3yeG7nmTht2S0qHon6cUCZY3uljUO88wgeww784
GFyVLXSOD9Ptgw/Ai+sp4R3izyV6VrzeHXKWJPLn1UWOuhoB/M7QCAv3MPEHBXY/
1S/Vx3lk5movuuhg1WaFP9iBIMwYQulOkbxvsefzQSTfizgDiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHVrb7K4hr9cRpmDlQYxc8d6h31UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjg5MDcwYTgtNDE2ZS0z
Njc1LWExMjctY2VjN2NkMGZkNmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyi8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAExrzB7CfXVFYdXxo0CSRq52DbjClCyxS5bKmUWXMR3y09iouhUHSO+f
QmIo+f/24i0s3DCCQ15JDlwFUI3UIsmOeUNuNg6h4w/Lkovg9oV2OzlEpzkB8DxZ
KCuZ3f5ASAL3dgztyVc2YkkYjMGOksp1j+4hGy5vkNquTiiDh7EUoyNNzbZ5OKJg
GRtjc6RVGoaYfTdHt87n7MwVfkzBoUEQjkHwqLUixVIBt9h7HuHlANOtLycv9txB
81lAb7ukZFZfik98ffwGb93nLTjS+aNK3lf5oJvxMvbDHmMHnkxiX+6PqmH635Hv
MSYazv79URa49VGfauHJp9LIXamB+Vg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:14:16 2025 by rpki-client