Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/023d5b8c-2a28-3dfd-98bd-41340df816eb.roa
File: 023d5b8c-2a28-3dfd-98bd-41340df816eb.roa (raw, json)
Hash identifier: Q5MjWRMCzMnu+SOVD+e1S4+1rRdAtvfpgd1ycXts8HA=
Subject key identifier: D7:B3:BC:AF:13:78:3D:24:95:EA:3E:13:CA:0F:40:3B:B4:F3:B6:8B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143CEDB0D05ED4F311114E40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/023d5b8c-2a28-3dfd-98bd-41340df816eb.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 24.20.68.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3c:ed:b0:d0:5e:d4:f3:11:11:4e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=4d9ca505-85e3-4a75-b095-a92cf4245690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:de:cb:6a:b2:71:9f:ae:7a:94:e8:0e:a7:6e:
62:d6:35:4e:6d:3e:ad:3f:f4:9f:9d:5a:1e:4e:5c:
1a:0d:db:79:1e:ff:dc:45:77:fb:bb:cc:8a:35:20:
cd:d7:5f:1a:97:f8:20:47:9b:28:23:fb:9b:ac:1e:
61:ee:41:0a:e8:9d:54:d6:9b:6e:0f:de:2a:77:dc:
b0:83:8d:3e:a4:a8:65:f8:e1:f7:1c:bf:02:1c:4b:
de:89:21:ab:53:ca:14:d9:5e:ca:bf:73:00:11:ef:
9a:14:19:04:0a:3b:f3:ec:2a:99:1b:ab:ad:4e:65:
e7:10:fa:d3:87:11:0b:0d:cb:59:27:f0:50:15:70:
da:ad:67:8b:2b:fc:e2:34:a5:ec:06:d1:05:4f:0d:
16:8b:17:31:ff:1d:59:02:fc:1b:2b:3d:9a:f1:5a:
43:cd:0e:c8:d1:f0:d0:af:a5:ef:00:b6:a8:28:9c:
75:3a:f9:7f:69:3c:f0:43:51:79:ed:54:4c:95:db:
3a:7c:5f:95:0a:b4:45:05:c1:fa:70:bf:02:61:b1:
c5:00:b5:81:47:5b:f4:7c:6f:da:d8:f2:c7:66:22:
9e:45:d5:6c:8d:9b:be:7a:a7:b1:f4:b3:1c:55:89:
af:58:e0:38:ff:e0:61:0d:21:9e:ac:12:98:01:87:
56:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B3:BC:AF:13:78:3D:24:95:EA:3E:13:CA:0F:40:3B:B4:F3:B6:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/023d5b8c-2a28-3dfd-98bd-41340df816eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.20.68.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:97:40:e4:e7:22:93:31:74:99:2d:49:17:9a:3e:c5:fe:50:
41:03:a2:c8:12:08:12:6e:44:23:82:b7:63:7f:a3:8d:db:99:
ef:8d:13:24:86:0f:c3:de:c4:ce:56:7f:4a:9d:c7:66:5f:05:
75:ad:ad:4f:f5:35:f2:47:de:73:0e:9e:51:5e:cc:09:23:dc:
27:85:91:d9:f6:9e:8a:2e:89:2f:f0:7e:4e:55:d8:3a:c3:1a:
1e:a3:e4:d7:a1:01:d3:a4:4d:c2:79:a8:cc:af:31:1f:f1:f9:
be:cf:7a:fd:ac:6c:c5:e9:45:4c:0c:5b:34:27:f5:b7:68:ed:
1f:79:04:04:8b:fd:5f:56:39:d2:19:59:e4:75:4f:60:74:63:
78:c2:fe:ea:25:d5:67:5d:33:76:f4:b2:0b:20:8e:e1:e7:99:
fb:eb:ac:fb:79:e3:25:6b:9f:75:d1:b3:4e:36:ab:a8:22:34:
8e:c7:2a:cb:d6:25:9e:9c:82:be:48:03:7b:43:7e:22:18:04:
6e:9e:97:57:27:6a:62:da:a5:04:cd:de:6b:76:df:2f:43:12:
89:3b:8f:bf:0c:d2:09:90:f3:b3:24:c5:00:0d:9e:91:26:49:
85:42:25:28:24:fa:de:ad:73:d4:c7:8a:0b:3e:e4:c2:f2:59:
55:fa:7b:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPO2w0F7U8xERTkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
NGQ5Y2E1MDUtODVlMy00YTc1LWIwOTUtYTkyY2Y0MjQ1NjkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr97LarJxn656lOgOp25i1jVObT6tP/SfnVoe
TlwaDdt5Hv/cRXf7u8yKNSDN118al/ggR5soI/ubrB5h7kEK6J1U1ptuD94qd9yw
g40+pKhl+OH3HL8CHEveiSGrU8oU2V7Kv3MAEe+aFBkECjvz7CqZG6utTmXnEPrT
hxELDctZJ/BQFXDarWeLK/ziNKXsBtEFTw0Wixcx/x1ZAvwbKz2a8VpDzQ7I0fDQ
r6XvALaoKJx1Ovl/aTzwQ1F57VRMlds6fF+VCrRFBcH6cL8CYbHFALWBR1v0fG/a
2PLHZiKeRdVsjZu+eqex9LMcVYmvWOA4/+BhDSGerBKYAYdWYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNezvK8TeD0kleo+E8oPQDu087aLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDIzZDViOGMtMmEyOC0z
ZGZkLTk4YmQtNDEzNDBkZjgxNmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGBREMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAECXQOTnIpMxdJktSReaPsX+UEEDosgSCBJuRCOCt2N/o43bme+NEySG
D8PexM5Wf0qdx2ZfBXWtrU/1NfJH3nMOnlFezAkj3CeFkdn2noouiS/wfk5V2DrD
Gh6j5NehAdOkTcJ5qMyvMR/x+b7Pev2sbMXpRUwMWzQn9bdo7R95BASL/V9WOdIZ
WeR1T2B0Y3jC/uol1WddM3b0sgsgjuHnmfvrrPt54yVrn3XRs042q6giNI7HKsvW
JZ6cgr5IA3tDfiIYBG6el1cnamLapQTN3mt23y9DEok7j78M0gmQ87MkxQANnpEm
SYVCJSgk+t6tc9THigs+5MLyWVX6e78=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:17:13 2025 by rpki-client