Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3fa5330-a958-3724-ac47-a1ace2ea3ef6.roa
File: a3fa5330-a958-3724-ac47-a1ace2ea3ef6.roa (raw, json)
Hash identifier: 3I2JVyKrego9SY4w1bpnFPL/gs06fsY95OTkeIlzEBg=
Subject key identifier: 9D:35:4E:0F:82:33:19:E7:6E:7B:50:37:35:A3:EC:4A:B9:B0:CC:C9
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858489340BE047001CE2DA1EF9260
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3fa5330-a958-3724-ac47-a1ace2ea3ef6.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 20940
IP address blocks: 23.213.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:be:04:70:01:ce:2d:a1:ef:92:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=a1cca4f7-d131-4319-8360-0bdb9a6d8e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6d:74:fa:ce:ef:6b:1e:cb:38:cb:24:5c:53:
89:ea:3c:f6:9d:86:b9:e6:cd:6a:3f:f2:67:b4:52:
80:a3:35:bc:9e:d7:ee:bf:22:99:54:d9:f2:66:6b:
a6:72:46:4b:98:03:a9:68:cb:e9:37:c6:ac:35:3b:
d5:b3:b2:6a:a6:d2:ff:2c:aa:7d:26:bc:8c:cb:23:
d5:a2:23:d4:df:26:47:80:09:ff:ea:d2:86:e6:5a:
fc:81:f7:98:0f:08:83:7f:55:5f:ce:3b:f0:bd:27:
e7:13:3b:f6:d6:4d:a8:99:97:d9:95:17:5d:17:ab:
d8:ce:74:d1:71:21:92:9b:86:03:85:cf:68:ab:56:
b0:97:e3:52:b0:06:ea:97:64:c9:d5:5e:bd:f1:a6:
27:b0:6b:7e:15:7c:a2:70:6f:4c:70:95:21:95:db:
cb:26:e9:c2:3f:c1:ed:7f:28:51:da:94:3a:83:db:
cb:e4:fe:a0:13:9d:44:4e:2a:d4:66:2b:5c:62:e2:
57:69:7d:d7:c7:e2:a7:3e:1d:a5:26:09:0c:00:cd:
37:65:5f:d6:5d:a3:ca:28:e0:36:07:a9:06:d3:7b:
9f:90:3a:4b:64:eb:6e:ab:02:b5:04:a1:cd:e7:6b:
1c:7c:c2:6f:a6:01:ad:a8:9f:45:e4:00:bb:d9:50:
31:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:35:4E:0F:82:33:19:E7:6E:7B:50:37:35:A3:EC:4A:B9:B0:CC:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3fa5330-a958-3724-ac47-a1ace2ea3ef6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.213.179.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:78:b2:ca:18:2c:a6:ec:47:38:d5:22:48:d3:54:c1:f8:58:
14:fd:0a:0e:1e:b2:c1:f0:f0:30:e2:d9:ad:06:7b:2c:d9:6b:
27:49:88:d8:3d:c9:ca:27:ec:3d:9b:03:b1:30:48:0b:30:df:
e7:31:fb:2b:cb:b0:64:35:c5:06:d3:57:d2:b3:dc:fe:5e:17:
fd:14:0b:da:f6:0f:fc:b1:92:c3:81:bb:0d:f6:59:33:71:4d:
77:89:c0:6a:ef:5c:9c:73:e6:7e:d5:6b:85:3a:1e:ed:b4:dc:
6a:78:b3:86:a8:af:10:93:1e:23:39:d4:0d:3d:69:ad:99:cd:
c0:91:29:21:a7:37:b2:46:80:14:59:45:55:ff:e7:8a:3a:f5:
79:b4:f8:cd:38:4e:6a:eb:ab:ce:57:bc:9c:69:6c:39:27:96:
84:08:5c:c6:80:e0:46:7a:35:2f:4a:9e:f9:cf:96:33:07:bf:
1e:ed:69:45:bb:74:2c:de:08:ef:af:e0:c0:8b:a0:4e:dd:be:
fd:92:f4:96:87:5e:f4:4b:55:87:cb:39:09:d1:64:a3:2b:fe:
0e:fe:5a:5f:8c:1e:12:17:7b:d8:68:a6:9e:67:06:be:fb:85:
c5:4d:23:1f:39:58:23:91:da:b4:5a:74:ef:b0:a4:bc:e5:aa:
a5:49:d4:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQL4EcAHOLaHvkmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk
YTFjY2E0ZjctZDEzMS00MzE5LTgzNjAtMGJkYjlhNmQ4ZTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1G10+s7vax7LOMskXFOJ6jz2nYa55s1qP/Jn
tFKAozW8ntfuvyKZVNnyZmumckZLmAOpaMvpN8asNTvVs7JqptL/LKp9JryMyyPV
oiPU3yZHgAn/6tKG5lr8gfeYDwiDf1VfzjvwvSfnEzv21k2omZfZlRddF6vYznTR
cSGSm4YDhc9oq1awl+NSsAbql2TJ1V698aYnsGt+FXyicG9McJUhldvLJunCP8Ht
fyhR2pQ6g9vL5P6gE51ETirUZitcYuJXaX3Xx+KnPh2lJgkMAM03ZV/WXaPKKOA2
B6kG03ufkDpLZOtuqwK1BKHN52scfMJvpgGtqJ9F5AC72VAxBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ01Tg+CMxnnbntQNzWj7Eq5sMzJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTNmYTUzMzAtYTk1OC0z
NzI0LWFjNDctYTFhY2UyZWEzZWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9WzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABR4ssoYLKbsRzjVIkjTVMH4WBT9Cg4essHw8DDi2a0GeyzZaydJiNg9
ycon7D2bA7EwSAsw3+cx+yvLsGQ1xQbTV9Kz3P5eF/0UC9r2D/yxksOBuw32WTNx
TXeJwGrvXJxz5n7Va4U6Hu203Gp4s4aorxCTHiM51A09aa2ZzcCRKSGnN7JGgBRZ
RVX/54o69Xm0+M04Tmrrq85XvJxpbDknloQIXMaA4EZ6NS9KnvnPljMHvx7taUW7
dCzeCO+v4MCLoE7dvv2S9JaHXvRLVYfLOQnRZKMr/g7+Wl+MHhIXe9hopp5nBr77
hcVNIx85WCOR2rRadO+wpLzlqqVJ1Do=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:52 2025 by rpki-client