Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3692b8b2-92fe-39a7-8c02-963a9d5ae527.roa
File: 3692b8b2-92fe-39a7-8c02-963a9d5ae527.roa (raw, json)
Hash identifier: 0BxEcSLG7qVDNTDr7ICVVzoRrsWlhMakqYZv1+pMKtc=
Subject key identifier: 40:24:BF:C9:D2:FA:1C:73:DE:27:E8:9C:90:E1:4F:35:0A:21:31:39
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A400DADB101E23E53CBA3036
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3692b8b2-92fe-39a7-8c02-963a9d5ae527.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.193.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:da:db:10:1e:23:e5:3c:ba:30:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=12c060b0-73cf-4f66-9979-fb9b288d17e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:32:b7:45:57:8c:9c:8b:23:df:a1:19:bb:df:
e2:04:76:b6:a2:d6:4f:69:ad:d9:79:1a:c6:4c:69:
b9:d0:38:cd:15:6a:8a:2b:d5:68:9f:f8:0a:34:fb:
8b:03:fe:c1:46:ce:80:56:50:9a:de:50:98:a8:e9:
e0:4a:71:40:9b:ca:2d:06:0f:4e:2e:ff:7c:1d:ef:
ae:10:f0:5c:2d:2a:96:e6:35:92:cc:95:24:88:a3:
b1:cb:e6:2d:88:0a:74:27:fa:6e:bf:bd:bf:22:f4:
51:ce:46:d5:34:3c:a4:8b:b2:c2:ad:b6:06:6b:d6:
46:85:73:d2:b5:27:1e:2b:0f:f8:79:6f:35:1f:a7:
d7:86:10:4c:d8:fc:6c:7c:e3:53:2b:a3:bd:da:d5:
01:32:93:fe:e5:19:98:ed:a3:3d:90:2c:c4:28:59:
a5:6f:f1:cc:6c:fa:3c:97:c9:e5:39:1b:34:fe:6e:
0d:b6:16:e7:0f:53:ff:73:4c:f8:92:70:03:23:46:
ab:03:31:b0:5c:10:68:bb:7a:18:f2:b4:ca:4a:75:
96:ca:e4:ce:02:30:76:b3:2e:38:2e:a6:59:10:44:
51:2b:91:fe:47:6f:a7:a1:da:e0:2d:cc:96:44:5a:
7d:d2:56:95:64:15:14:fa:a1:cb:ba:0b:0a:09:ab:
a5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:24:BF:C9:D2:FA:1C:73:DE:27:E8:9C:90:E1:4F:35:0A:21:31:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3692b8b2-92fe-39a7-8c02-963a9d5ae527.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.193.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:3f:8a:b2:54:ef:97:d7:fd:48:c3:97:84:f6:46:cf:c6:17:
11:12:69:b4:74:ed:fc:db:15:06:1c:de:bc:34:39:99:d0:1f:
ba:31:85:34:9b:15:c2:b3:1e:c3:04:d8:29:ce:db:5c:2c:64:
88:76:47:5c:28:86:df:24:bd:e1:61:29:bb:74:fb:f0:7a:0e:
bd:a8:3f:e1:3a:8b:e0:5c:a7:60:08:51:d2:d1:2a:be:b9:3d:
d9:d9:ba:e8:20:3d:70:e4:c6:01:9a:b0:9b:89:23:36:8d:4b:
9d:4f:75:90:ee:95:33:b4:2c:f8:a8:b4:9a:bc:4a:9e:b9:b9:
14:b9:e3:8b:e6:1f:7d:57:1a:a6:b8:f5:7a:2a:aa:cb:2a:a3:
c0:0f:6e:6d:54:37:82:a2:70:c8:4c:91:35:b9:72:3d:e8:0d:
66:69:b4:94:60:b9:39:e6:ce:81:67:9c:c5:45:af:a2:35:6c:
88:f0:8f:2a:2c:74:e7:4f:f7:f4:27:1a:99:ae:83:f3:41:aa:
1e:e6:b4:04:da:d6:34:f1:14:c1:44:ec:d4:55:b9:f2:a6:93:
d5:1e:c6:8c:ed:df:e5:cf:33:5f:78:9b:cf:dd:50:54:fa:1d:
36:09:98:cb:94:7b:af:a0:9e:80:ea:48:75:33:1a:c3:03:8e:
d1:23:d9:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikANrbEB4j5Ty6MDYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk
MTJjMDYwYjAtNzNjZi00ZjY2LTk5NzktZmI5YjI4OGQxN2UxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDK3RVeMnIsj36EZu9/iBHa2otZPaa3ZeRrG
TGm50DjNFWqKK9Von/gKNPuLA/7BRs6AVlCa3lCYqOngSnFAm8otBg9OLv98He+u
EPBcLSqW5jWSzJUkiKOxy+YtiAp0J/puv72/IvRRzkbVNDyki7LCrbYGa9ZGhXPS
tSceKw/4eW81H6fXhhBM2PxsfONTK6O92tUBMpP+5RmY7aM9kCzEKFmlb/HMbPo8
l8nlORs0/m4NthbnD1P/c0z4knADI0arAzGwXBBou3oY8rTKSnWWyuTOAjB2sy44
LqZZEERRK5H+R2+nodrgLcyWRFp90laVZBUU+qHLugsKCaulowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEAkv8nS+hxz3ifonJDhTzUKITE5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzY5MmI4YjItOTJmZS0z
OWE3LThjMDItOTYzYTlkNWFlNTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8FyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGk/irJU75fX/UjDl4T2Rs/GFxESabR07fzbFQYc3rw0OZnQH7oxhTSb
FcKzHsME2CnO21wsZIh2R1woht8kveFhKbt0+/B6Dr2oP+E6i+Bcp2AIUdLRKr65
PdnZuuggPXDkxgGasJuJIzaNS51PdZDulTO0LPiotJq8Sp65uRS544vmH31XGqa4
9Xoqqssqo8APbm1UN4KicMhMkTW5cj3oDWZptJRguTnmzoFnnMVFr6I1bIjwjyos
dOdP9/QnGpmug/NBqh7mtATa1jTxFMFE7NRVufKmk9Uexozt3+XPM194m8/dUFT6
HTYJmMuUe6+gnoDqSHUzGsMDjtEj2Yc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:00:14 2025 by rpki-client