Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29d89bdd-91a3-3b50-a2a1-064367986503.roa
File: 29d89bdd-91a3-3b50-a2a1-064367986503.roa (raw, json)
Hash identifier: hHa250LCqmtVFWPae4aD8BXRYbXCUlIKWGiy2efOQiU=
Subject key identifier: BD:12:93:07:4A:0A:10:D5:23:DA:53:07:87:73:FE:4B:FB:6A:04:41
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A2097E2F20E8FED7F91E300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29d89bdd-91a3-3b50-a2a1-064367986503.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.36.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:97:e2:f2:0e:8f:ed:7f:91:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=f8341470-14a6-493c-839e-cd026839e053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ef:8d:98:02:17:91:95:7f:6f:de:43:c4:36:
7d:91:a2:51:48:6c:66:31:72:3d:d0:40:d9:c5:0d:
c3:35:63:e7:ab:98:b5:0d:cf:5e:9f:3a:55:40:96:
e0:7b:e0:4c:41:8a:eb:a7:b0:47:82:3b:e3:85:f0:
b6:c2:eb:18:72:fb:e4:04:a3:f6:4f:0a:b9:62:2e:
90:6e:e9:fc:9b:23:d2:05:ac:3c:ed:4e:92:76:f8:
e7:84:ed:fe:c9:b8:77:5f:30:de:87:52:44:65:15:
fa:13:f3:49:eb:58:fc:62:9b:8b:8c:f3:a6:11:27:
60:36:b8:7f:06:e4:04:4f:16:d6:11:0d:f1:11:e9:
63:cd:2e:31:ec:d2:ad:a5:94:25:8f:fc:34:de:34:
73:ad:d1:60:6c:3e:30:6c:be:a1:56:d6:3c:c9:8b:
13:cd:71:38:2e:8b:8e:ef:c0:d5:f6:01:ac:03:3e:
60:ba:f2:ee:cd:79:25:a7:2a:35:06:4b:14:ef:70:
30:54:cd:2e:08:f6:8c:e1:7b:92:bd:15:b4:e6:cb:
c9:f1:52:77:61:fd:b3:52:40:7f:b9:6c:8f:fc:3f:
f2:a1:31:89:de:d7:47:71:3b:1d:2e:a7:fa:18:63:
9a:70:b9:e3:cf:21:dd:f0:70:bc:3d:51:b7:d2:98:
01:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:12:93:07:4A:0A:10:D5:23:DA:53:07:87:73:FE:4B:FB:6A:04:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29d89bdd-91a3-3b50-a2a1-064367986503.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.36.76.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:a5:a4:73:cc:41:17:34:fa:5b:0e:a2:f4:04:56:96:1a:e7:
6a:1d:1b:4b:6a:ec:9f:dc:ff:51:97:ec:76:87:bb:a2:4d:a8:
a2:6d:a8:d4:6b:c7:09:74:23:ba:fc:db:59:e2:2c:d1:ed:67:
48:8f:98:80:b4:90:1d:2c:d9:65:ea:2e:fb:cf:6d:21:2a:6a:
59:a9:bf:4c:90:90:a2:b8:68:82:80:1d:f4:a1:d6:6d:2c:54:
8d:0a:34:96:3b:d3:d5:af:d1:83:99:3e:47:58:57:21:59:1d:
43:48:2f:8e:18:d9:4e:0b:b5:c5:3e:fb:8a:a8:c2:40:f9:16:
d8:a5:d2:8b:22:26:e5:61:bc:8b:e9:b4:81:c0:8a:84:a3:c1:
56:ed:47:e3:ab:92:1c:af:f8:b3:80:50:12:75:96:d3:e9:b0:
a7:fb:14:3d:56:fb:a0:e5:81:90:d4:88:6c:22:6b:81:26:f4:
98:37:93:53:73:01:b2:16:57:ba:be:c6:78:65:76:23:15:4d:
a2:c5:81:3a:04:36:f7:19:11:1c:bd:b7:92:12:0e:78:b3:4f:
70:e3:74:c5:2d:54:bc:8a:c8:0c:78:4c:90:d8:05:f2:ec:63:
29:02:fa:5b:84:da:75:6e:6a:f8:ff:1f:c7:f7:28:93:85:18:
f9:82:eb:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6IJfi8g6P7X+R4wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk
ZjgzNDE0NzAtMTRhNi00OTNjLTgzOWUtY2QwMjY4MzllMDUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie+NmAIXkZV/b95DxDZ9kaJRSGxmMXI90EDZ
xQ3DNWPnq5i1Dc9enzpVQJbge+BMQYrrp7BHgjvjhfC2wusYcvvkBKP2Twq5Yi6Q
bun8myPSBaw87U6SdvjnhO3+ybh3XzDeh1JEZRX6E/NJ61j8YpuLjPOmESdgNrh/
BuQETxbWEQ3xEeljzS4x7NKtpZQlj/w03jRzrdFgbD4wbL6hVtY8yYsTzXE4LouO
78DV9gGsAz5guvLuzXklpyo1BksU73AwVM0uCPaM4XuSvRW05svJ8VJ3Yf2zUkB/
uWyP/D/yoTGJ3tdHcTsdLqf6GGOacLnjzyHd8HC8PVG30pgBMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL0SkwdKChDVI9pTB4dz/kv7agRBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjlkODliZGQtOTFhMy0z
YjUwLWEyYTEtMDY0MzY3OTg2NTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyRMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABOlpHPMQRc0+lsOovQEVpYa52odG0tq7J/c/1GX7HaHu6JNqKJtqNRr
xwl0I7r821niLNHtZ0iPmIC0kB0s2WXqLvvPbSEqalmpv0yQkKK4aIKAHfSh1m0s
VI0KNJY709Wv0YOZPkdYVyFZHUNIL44Y2U4LtcU++4qowkD5Ftil0osiJuVhvIvp
tIHAioSjwVbtR+Orkhyv+LOAUBJ1ltPpsKf7FD1W+6DlgZDUiGwia4Em9Jg3k1Nz
AbIWV7q+xnhldiMVTaLFgToENvcZERy9t5ISDnizT3DjdMUtVLyKyAx4TJDYBfLs
YykC+luE2nVuavj/H8f3KJOFGPmC6w4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:59:46 2025 by rpki-client