Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46f7318f-0e24-3f3c-bace-f61ad1204231.roa
File: 46f7318f-0e24-3f3c-bace-f61ad1204231.roa (raw, json)
Hash identifier: gMqsWJBBEcEis/OdC5o8cQtAPQjXDpEBfXpPsYA7t0A=
Subject key identifier: DE:94:98:0B:20:40:19:1F:4B:95:92:75:7F:8B:EB:AC:84:9F:95:62
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858488F1085C9F6D31CAC53E5FF80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46f7318f-0e24-3f3c-bace-f61ad1204231.roa
Signing time: Thu 16 Jan 2025 02:00:39 +0000
ROA not before: Thu 16 Jan 2025 02:00:39 +0000
ROA not after: Wed 16 Apr 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.62.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8f:10:85:c9:f6:d3:1c:ac:53:e5:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 16 02:00:39 2025 GMT
Not After : Apr 16 01:00:39 2025 GMT
Subject: CN=aa456b12-81f1-44d4-b244-5aba543c710f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:70:90:aa:9c:f0:7f:53:e4:b8:dc:80:5d:b5:
58:52:11:19:91:1e:e0:b0:27:e3:00:bf:70:89:40:
ca:1f:00:d6:92:9d:52:a9:24:02:f8:69:d4:65:ca:
bc:35:c4:ee:73:0f:8b:cd:25:8f:df:37:9c:d5:1a:
96:49:94:2e:ae:18:f3:b7:67:94:88:84:c4:ee:a2:
3f:c0:e7:8e:33:c3:43:2b:23:99:c2:ee:16:10:22:
f5:75:2b:02:be:32:80:ee:0c:37:4f:be:66:06:90:
7e:04:a5:07:f9:29:55:73:60:22:37:3d:0c:e9:8e:
32:27:6e:9f:57:03:4d:04:17:8f:0f:1f:4a:ff:6d:
88:1a:6d:a5:85:6b:7c:75:af:ac:09:02:3a:cc:ce:
20:56:6e:9f:a5:f6:e8:0c:48:e0:f2:a1:8f:bf:d9:
4d:17:97:36:20:95:9b:4f:3c:5b:37:03:0e:bb:9c:
c9:f2:5f:b9:f2:cd:46:c5:82:21:ec:df:1b:72:42:
cf:a8:3a:11:0a:e7:d0:4c:c1:77:e5:a3:6f:22:4d:
74:f6:7e:d3:2a:f9:7d:40:a5:5d:3b:5c:29:e0:6f:
aa:75:43:df:48:88:ca:9b:5d:b7:2c:89:5f:03:37:
ad:b2:63:5f:de:fd:1c:44:c8:55:fb:35:63:14:19:
99:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:94:98:0B:20:40:19:1F:4B:95:92:75:7F:8B:EB:AC:84:9F:95:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46f7318f-0e24-3f3c-bace-f61ad1204231.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.62.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:d1:4b:ed:06:5d:2f:cf:de:5d:df:1c:43:73:44:42:62:d4:
47:22:04:63:38:60:4e:ba:62:40:9d:e9:51:8a:7b:2b:38:6d:
09:c0:88:50:f9:88:4f:8c:ef:d7:33:7f:a0:10:cd:3e:55:e1:
84:65:1f:3f:c5:a5:bf:94:dc:aa:33:2a:df:89:81:dc:1b:0d:
3a:6d:47:3e:16:f7:04:90:80:8c:ef:51:f4:c2:88:05:e8:0f:
a0:0f:cb:6a:1b:e5:c3:96:9d:3d:4a:56:28:97:a1:d6:00:cc:
6d:76:3b:88:cd:4d:52:72:05:6f:18:80:39:a6:9c:69:eb:9c:
ce:9c:1f:02:e6:6d:40:27:d5:8f:6c:d2:62:65:84:50:ec:42:
29:67:b6:5e:8b:68:b8:11:23:1e:4a:69:64:9a:ab:cc:7d:a6:
ef:d2:d5:79:67:89:2d:11:a9:8f:24:07:dd:d0:4f:2e:c9:c2:
09:03:2c:21:6a:92:b3:65:00:62:40:9b:86:59:9f:bc:20:68:
87:b5:be:50:7d:c2:9e:55:09:a2:6b:88:9a:25:8e:fb:05:4a:
2a:61:59:ed:7e:d7:c0:9a:ab:b9:3a:f9:2a:dd:60:94:95:0b:
59:eb:9e:5c:f5:f7:03:04:5c:0d:7e:67:fe:e9:70:c3:54:5f:
46:3b:81:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiPEIXJ9tMcrFPl/4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDExNjAyMDAzOVoXDTI1MDQxNjAxMDAzOVowLzEtMCsGA1UEAxMk
YWE0NTZiMTItODFmMS00NGQ0LWIyNDQtNWFiYTU0M2M3MTBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXCQqpzwf1PkuNyAXbVYUhEZkR7gsCfjAL9w
iUDKHwDWkp1SqSQC+GnUZcq8NcTucw+LzSWP3zec1RqWSZQurhjzt2eUiITE7qI/
wOeOM8NDKyOZwu4WECL1dSsCvjKA7gw3T75mBpB+BKUH+SlVc2AiNz0M6Y4yJ26f
VwNNBBePDx9K/22IGm2lhWt8da+sCQI6zM4gVm6fpfboDEjg8qGPv9lNF5c2IJWb
TzxbNwMOu5zJ8l+58s1GxYIh7N8bckLPqDoRCufQTMF35aNvIk109n7TKvl9QKVd
O1wp4G+qdUPfSIjKm123LIlfAzetsmNf3v0cRMhV+zVjFBmZywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN6UmAsgQBkfS5WSdX+L66yEn5ViMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDZmNzMxOGYtMGUyNC0z
ZjNjLWJhY2UtZjYxYWQxMjA0MjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFz4mMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIXRS+0GXS/P3l3fHENzREJi1EciBGM4YE66YkCd6VGKeys4bQnAiFD5
iE+M79czf6AQzT5V4YRlHz/Fpb+U3KozKt+JgdwbDTptRz4W9wSQgIzvUfTCiAXo
D6APy2ob5cOWnT1KViiXodYAzG12O4jNTVJyBW8YgDmmnGnrnM6cHwLmbUAn1Y9s
0mJlhFDsQilntl6LaLgRIx5KaWSaq8x9pu/S1XlniS0RqY8kB93QTy7JwgkDLCFq
krNlAGJAm4ZZn7wgaIe1vlB9wp5VCaJriJoljvsFSiphWe1+18Caq7k6+SrdYJSV
C1nrnlz19wMEXA1+Z/7pcMNUX0Y7gX0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:53 2025 by rpki-client