Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45b2d641-2b0d-339d-a6c8-3bfdd22e4695.roa
File: 45b2d641-2b0d-339d-a6c8-3bfdd22e4695.roa (raw, json)
Hash identifier: krSH2f8fgpN0eTvjaqfB3WOaFRvAoBtrstLAArF1J5c=
Subject key identifier: 03:D5:68:FD:CB:9E:72:6D:E0:65:8E:68:EF:B2:BC:A6:0F:BE:8F:10
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858485CD037B065497F7ACC433140
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45b2d641-2b0d-339d-a6c8-3bfdd22e4695.roa
Signing time: Sun 29 Dec 2024 02:00:39 +0000
ROA not before: Sun 29 Dec 2024 02:00:39 +0000
ROA not after: Sat 29 Mar 2025 01:00:39 +0000
asID: 16625
IP address blocks: 23.47.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5c:d0:37:b0:65:49:7f:7a:cc:43:31:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 29 02:00:39 2024 GMT
Not After : Mar 29 01:00:39 2025 GMT
Subject: CN=83f2621b-8312-4491-baf2-ecb89dc345b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:76:be:3a:56:36:a5:1a:ba:8c:24:69:76:b4:
29:42:51:83:f6:4f:0a:27:d5:50:27:44:03:44:e8:
47:44:db:6d:2b:9a:7a:d6:1b:57:5f:c1:5a:ba:b4:
1a:e8:3f:6e:3f:21:b8:db:ab:4e:c6:0c:ca:5f:94:
2f:b7:5d:cf:4b:26:a0:7c:5c:24:a0:01:fd:a9:e5:
a5:3c:a2:b6:f2:ca:48:44:83:95:92:fe:0c:ad:b8:
56:67:f8:93:bd:cb:58:f1:f4:04:87:7f:68:2d:0e:
75:60:00:ce:f0:c7:fb:4d:b1:27:04:ed:32:bf:ea:
c6:5b:53:ce:0f:f1:38:b9:cd:2c:00:47:f2:49:d7:
80:14:ff:3f:a8:3f:5b:f9:63:af:d9:ad:87:d2:da:
94:65:ff:45:31:23:f1:eb:2e:46:08:de:2c:17:4b:
06:ce:9c:1c:2c:f3:5e:28:2e:56:b8:70:f0:60:35:
20:22:0d:40:45:e5:94:12:1b:06:9a:56:71:a4:0b:
ec:9f:0b:e0:12:07:31:7d:53:f0:97:9e:85:c8:e6:
2e:cd:9a:05:45:64:e6:74:76:4d:2d:50:f8:4a:85:
e3:e2:47:1b:69:11:5a:75:15:a7:2a:4d:84:c2:bc:
57:7d:3f:3f:3b:33:e8:c9:09:e4:a1:12:ef:8b:63:
20:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D5:68:FD:CB:9E:72:6D:E0:65:8E:68:EF:B2:BC:A6:0F:BE:8F:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45b2d641-2b0d-339d-a6c8-3bfdd22e4695.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.47.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:7c:fb:4a:02:34:63:af:5a:7a:48:5b:5d:ce:18:d0:d1:71:
98:bb:da:57:f5:d3:a9:31:40:f3:64:51:c5:8f:2a:1c:f5:c6:
af:3e:b4:c5:55:e2:b0:f2:a7:fe:85:89:cd:d0:8f:7e:5b:39:
50:bc:a3:da:75:07:8f:e0:84:a4:bf:5e:14:f8:a4:3e:b4:e8:
df:2b:22:8c:05:55:4c:56:af:97:01:92:21:3b:88:ac:61:7b:
45:9f:34:35:36:dd:a6:cc:6b:27:df:6d:3f:5f:75:fc:93:54:
0c:9c:6e:12:11:ef:02:ca:a6:90:c8:55:01:f4:b1:db:f0:60:
c1:e9:95:3e:eb:ce:c7:09:ba:20:3d:60:40:df:2b:cf:7c:98:
95:b6:33:94:91:03:90:df:73:92:52:7c:c4:54:ea:3c:85:02:
af:3d:23:12:b4:10:a4:77:9e:97:02:3f:77:ec:6d:da:69:55:
92:02:52:85:55:4a:1b:a0:19:22:e7:3c:17:1b:b0:5c:f9:1b:
73:d6:7b:86:89:1e:f3:e4:4d:dc:0f:6b:a7:34:e6:3f:e7:25:
1b:95:c0:c0:7c:d0:23:7e:2f:5a:8e:7b:ff:93:9e:81:b9:64:
ff:f4:26:c0:ee:22:bc:9d:7a:21:65:d4:c5:6e:20:f9:ff:85:
83:75:67:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhc0DewZUl/esxDMUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIyOTAyMDAzOVoXDTI1MDMyOTAxMDAzOVowLzEtMCsGA1UEAxMk
ODNmMjYyMWItODMxMi00NDkxLWJhZjItZWNiODlkYzM0NWIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgna+OlY2pRq6jCRpdrQpQlGD9k8KJ9VQJ0QD
ROhHRNttK5p61htXX8FaurQa6D9uPyG426tOxgzKX5Qvt13PSyagfFwkoAH9qeWl
PKK28spIRIOVkv4MrbhWZ/iTvctY8fQEh39oLQ51YADO8Mf7TbEnBO0yv+rGW1PO
D/E4uc0sAEfySdeAFP8/qD9b+WOv2a2H0tqUZf9FMSPx6y5GCN4sF0sGzpwcLPNe
KC5WuHDwYDUgIg1AReWUEhsGmlZxpAvsnwvgEgcxfVPwl56FyOYuzZoFRWTmdHZN
LVD4SoXj4kcbaRFadRWnKk2EwrxXfT8/OzPoyQnkoRLvi2MgNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAPVaP3LnnJt4GWOaO+yvKYPvo8QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDViMmQ2NDEtMmIwZC0z
MzlkLWE2YzgtM2JmZGQyMmU0Njk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFy/gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHJ8+0oCNGOvWnpIW13OGNDRcZi72lf106kxQPNkUcWPKhz1xq8+tMVV
4rDyp/6Fic3Qj35bOVC8o9p1B4/ghKS/XhT4pD606N8rIowFVUxWr5cBkiE7iKxh
e0WfNDU23abMayffbT9fdfyTVAycbhIR7wLKppDIVQH0sdvwYMHplT7rzscJuiA9
YEDfK898mJW2M5SRA5Dfc5JSfMRU6jyFAq89IxK0EKR3npcCP3fsbdppVZICUoVV
ShugGSLnPBcbsFz5G3PWe4aJHvPkTdwPa6c05j/nJRuVwMB80CN+L1qOe/+TnoG5
ZP/0JsDuIrydeiFl1MVuIPn/hYN1Z6I=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:46:46 2025 by rpki-client