Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07527543-b7f1-3e0d-b7f2-5bc3babd71e7.roa
File: 07527543-b7f1-3e0d-b7f2-5bc3babd71e7.roa (raw, json)
Hash identifier: 1cByVvIjegPHPFomg3E1Xu39FNpZwb6OhO330ebfHr8=
Subject key identifier: 6C:B8:BA:60:D7:49:58:13:16:BC:95:76:43:30:63:38:30:96:C7:D1
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858486EF5C39B1165AEB11E93B540
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07527543-b7f1-3e0d-b7f2-5bc3babd71e7.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.33.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:c3:9b:11:65:ae:b1:1e:93:b5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=46923d62-bd1d-4bb5-a4b7-0ec595113ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d0:22:2a:7a:47:1e:55:f8:f2:c7:87:ae:a9:
62:ed:e4:04:82:9b:2e:6c:4c:94:6a:af:d3:32:33:
27:c6:67:93:37:f1:55:bc:5a:db:b1:2e:8c:12:f8:
70:85:d0:a4:4b:6c:68:6c:c4:f5:25:16:a6:ea:5c:
c5:b7:6f:17:3f:ff:99:d6:e3:3a:9e:9d:e7:c3:d6:
12:3d:c3:de:a3:51:ad:92:f2:c8:2f:3a:ed:98:79:
36:2f:1f:40:7a:6a:55:9d:a4:ae:af:7d:c6:b9:10:
4a:b6:9e:00:07:19:4e:69:66:5b:a6:ae:b6:9d:bc:
d8:82:68:59:6f:00:17:19:18:a3:b8:b2:d2:cf:d2:
b2:ed:0e:5f:13:0a:7e:36:ea:5d:d5:10:86:ca:07:
d5:14:0f:1c:56:bd:0d:3f:70:ae:e4:8f:4f:17:5d:
75:8d:db:e8:fd:c0:ed:86:80:2d:00:74:5a:08:57:
72:13:d8:c1:b7:6f:96:89:37:07:4e:45:fa:18:62:
1d:bf:06:74:8b:bd:ac:b6:9a:46:7d:b3:84:c3:5a:
22:f5:2c:ef:13:a8:e1:69:18:35:73:9b:27:c6:4e:
37:df:fb:61:20:1a:e0:ef:7c:e3:cc:b1:87:f8:80:
6b:69:11:7a:34:c3:e5:98:d1:53:ca:d5:48:bb:8f:
8a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B8:BA:60:D7:49:58:13:16:BC:95:76:43:30:63:38:30:96:C7:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07527543-b7f1-3e0d-b7f2-5bc3babd71e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.33.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:1c:e2:d4:5a:46:c4:fa:db:44:f0:14:bd:66:ac:db:17:f6:
8f:7d:b6:f7:9a:51:09:45:ff:11:76:20:5c:75:55:9e:6b:4b:
ef:a6:80:92:1c:1e:d6:d3:e1:9e:5b:96:59:5d:d1:d1:27:4c:
6b:92:78:6d:a8:c1:0b:b6:ec:88:e4:e5:fb:73:62:ae:a4:e9:
58:c2:cd:95:83:d9:d1:8f:a4:06:2c:37:b4:69:0d:e4:06:bc:
8f:9d:6b:2e:16:b4:e0:bc:0e:f4:ec:b4:be:b6:90:ca:21:00:
89:d8:cd:2e:a7:64:9f:d9:90:a1:e5:09:7a:7f:03:c8:dc:89:
85:93:8a:7e:c3:34:c1:18:0f:df:5e:52:6d:1e:63:48:70:3f:
da:c9:e1:d9:73:9a:2a:22:0a:7e:95:26:a0:c0:b6:ab:24:b8:
95:95:73:26:c6:31:17:7f:ef:e9:03:93:1d:7b:f9:38:26:fa:
c9:17:cc:25:7a:12:5f:81:4e:cf:0e:2e:35:58:14:03:2c:25:
2b:c2:cf:7b:0b:6f:45:c6:d8:c8:0b:cb:62:af:5e:26:69:b6:
18:0c:33:ee:2f:e1:a7:ef:95:c2:d2:c0:5f:54:56:10:d0:dd:
ee:3a:bf:f3:71:e8:3e:d3:a8:f5:a4:ff:64:30:8a:24:e7:f3:
c0:29:92:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhu9cObEWWusR6TtUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEwNDE0MDA1MVoXDTI1MDQwNDEzMDA1MVowLzEtMCsGA1UEAxMk
NDY5MjNkNjItYmQxZC00YmI1LWE0YjctMGVjNTk1MTEzY2E2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9AiKnpHHlX48seHrqli7eQEgpsubEyUaq/T
MjMnxmeTN/FVvFrbsS6MEvhwhdCkS2xobMT1JRam6lzFt28XP/+Z1uM6np3nw9YS
PcPeo1GtkvLILzrtmHk2Lx9AempVnaSur33GuRBKtp4ABxlOaWZbpq62nbzYgmhZ
bwAXGRijuLLSz9Ky7Q5fEwp+Nupd1RCGygfVFA8cVr0NP3Cu5I9PF111jdvo/cDt
hoAtAHRaCFdyE9jBt2+WiTcHTkX6GGIdvwZ0i72stppGfbOEw1oi9SzvE6jhaRg1
c5snxk433/thIBrg73zjzLGH+IBraRF6NMPlmNFTytVIu4+KkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGy4umDXSVgTFryVdkMwYzgwlsfRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDc1Mjc1NDMtYjdmMS0z
ZTBkLWI3ZjItNWJjM2JhYmQ3MWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyEdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIwc4tRaRsT620TwFL1mrNsX9o99tveaUQlF/xF2IFx1VZ5rS++mgJIc
HtbT4Z5bllld0dEnTGuSeG2owQu27Ijk5ftzYq6k6VjCzZWD2dGPpAYsN7RpDeQG
vI+day4WtOC8DvTstL62kMohAInYzS6nZJ/ZkKHlCXp/A8jciYWTin7DNMEYD99e
Um0eY0hwP9rJ4dlzmioiCn6VJqDAtqskuJWVcybGMRd/7+kDkx17+Tgm+skXzCV6
El+BTs8OLjVYFAMsJSvCz3sLb0XG2MgLy2KvXiZpthgMM+4v4afvlcLSwF9UVhDQ
3e46v/Nx6D7TqPWk/2QwiiTn88ApknU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:53:46 2025 by rpki-client