Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba4e9cd3-45ff-3017-8082-70a3b715cfa1.roa
File: ba4e9cd3-45ff-3017-8082-70a3b715cfa1.roa (raw, json)
Hash identifier: 3YJAAqrKbNIvw+qON1zhtVtYEmio2IFR/X3HReMoxTY=
Subject key identifier: 3C:55:1D:A9:62:CE:44:55:EB:EF:1E:A5:D6:F7:5C:72:3F:5F:A9:FE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1179D78FA7E211B0EAD3C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba4e9cd3-45ff-3017-8082-70a3b715cfa1.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 24.5.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:79:d7:8f:a7:e2:11:b0:ea:d3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=5c0f9a40-d524-4f97-a205-0a823cb6df13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:32:10:1e:23:9b:fe:67:96:9d:a5:5c:5e:58:
28:61:d4:77:7f:d1:a5:31:e3:e3:a5:81:60:e0:7d:
86:5f:7d:c0:fd:57:29:da:2d:48:79:da:49:d2:fe:
d2:c1:88:bb:68:5b:fc:e9:ba:1a:14:c7:7d:23:ef:
85:1e:b1:bd:cc:74:2d:c6:9d:8b:60:15:7a:b6:5f:
ed:ce:73:31:92:8c:ab:88:fd:8c:b0:96:1d:a5:1e:
c0:c7:8c:3d:0d:a1:ca:87:5d:1f:75:a0:79:71:71:
75:81:24:e5:09:bd:24:2e:52:dd:1e:df:cd:15:22:
98:3f:5f:21:7b:54:82:12:2e:f4:e6:d4:75:ca:1d:
dc:7d:64:11:11:17:c0:44:94:14:34:e0:bd:e1:d6:
71:f4:eb:76:d3:35:29:51:a6:f3:5d:a0:a9:5f:84:
ab:95:b5:b7:be:dc:7f:d3:3d:cf:2d:b2:82:77:21:
31:3b:66:42:1e:7b:35:9c:ed:5f:d4:7c:30:b8:3d:
ec:a0:61:6a:bf:c0:41:21:4d:35:48:54:23:0a:bd:
a6:52:ca:c5:49:ad:52:98:a1:b5:bb:d0:7c:21:2b:
90:2b:2b:ed:b5:9b:1a:ad:96:b7:ef:b1:4e:52:4e:
24:5a:f9:c8:b9:40:36:5b:21:36:be:4a:f4:51:eb:
6c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:55:1D:A9:62:CE:44:55:EB:EF:1E:A5:D6:F7:5C:72:3F:5F:A9:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba4e9cd3-45ff-3017-8082-70a3b715cfa1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.5.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:33:53:29:88:0d:4a:8a:54:70:fb:ec:f8:b4:31:ec:36:d6:
e8:81:ff:34:81:0e:01:d8:8b:05:c9:bd:00:a8:b6:6a:27:b8:
09:c3:4a:24:29:ff:7d:c7:11:8b:84:98:57:41:65:93:86:4d:
2a:6f:58:bb:17:e2:09:78:52:12:64:0b:c0:a2:6b:f4:a9:c2:
bd:37:93:c6:b9:5f:9c:b9:a1:be:bc:78:2d:41:a0:fa:8c:45:
59:54:9b:31:0f:e0:08:8e:9b:05:23:14:18:4d:bf:bb:00:27:
6a:ce:ab:1e:29:e3:f9:b4:37:6d:49:8a:40:82:cd:60:31:5d:
64:ce:8b:6b:a2:39:fc:34:86:b9:35:93:80:99:81:b6:30:73:
8e:41:85:7c:05:8d:ec:0d:04:4b:5a:c6:c8:44:84:84:3e:de:
f9:21:b5:63:46:c6:d8:24:e8:cd:88:1a:67:56:f9:75:07:27:
2a:23:d5:fc:ff:dc:3f:68:56:09:73:73:20:89:e5:2f:16:8a:
0c:af:04:b5:ea:21:b2:e1:4d:1a:60:22:3a:97:fb:94:fe:44:
ed:44:c4:d3:ce:dd:c1:de:db:0a:8b:c9:53:40:4c:5d:d4:ec:
77:6d:2b:5e:6a:5c:f3:1b:14:61:d4:0c:ec:96:4d:91:20:fa:
45:85:ce:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEXnXj6fiEbDq08AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
NWMwZjlhNDAtZDUyNC00Zjk3LWEyMDUtMGE4MjNjYjZkZjEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTIQHiOb/meWnaVcXlgoYdR3f9GlMePjpYFg
4H2GX33A/Vcp2i1IedpJ0v7SwYi7aFv86boaFMd9I++FHrG9zHQtxp2LYBV6tl/t
znMxkoyriP2MsJYdpR7Ax4w9DaHKh10fdaB5cXF1gSTlCb0kLlLdHt/NFSKYP18h
e1SCEi705tR1yh3cfWQRERfARJQUNOC94dZx9Ot20zUpUabzXaCpX4SrlbW3vtx/
0z3PLbKCdyExO2ZCHns1nO1f1HwwuD3soGFqv8BBIU01SFQjCr2mUsrFSa1SmKG1
u9B8ISuQKyvttZsarZa377FOUk4kWvnIuUA2WyE2vkr0UetseQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDxVHalizkRV6+8epdb3XHI/X6n+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmE0ZTljZDMtNDVmZi0z
MDE3LTgwODItNzBhM2I3MTVjZmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGAVgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKwzUymIDUqKVHD77Pi0Mew21uiB/zSBDgHYiwXJvQCotmonuAnDSiQp
/33HEYuEmFdBZZOGTSpvWLsX4gl4UhJkC8Cia/Spwr03k8a5X5y5ob68eC1BoPqM
RVlUmzEP4AiOmwUjFBhNv7sAJ2rOqx4p4/m0N21JikCCzWAxXWTOi2uiOfw0hrk1
k4CZgbYwc45BhXwFjewNBEtaxshEhIQ+3vkhtWNGxtgk6M2IGmdW+XUHJyoj1fz/
3D9oVglzcyCJ5S8WigyvBLXqIbLhTRpgIjqX+5T+RO1ExNPO3cHe2wqLyVNATF3U
7HdtK15qXPMbFGHUDOyWTZEg+kWFzkM=
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:52:10 2025 by rpki-client