Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c2cae77-a407-3072-b5bd-dca8fa148810.roa
File: 5c2cae77-a407-3072-b5bd-dca8fa148810.roa (raw, json)
Hash identifier: Bu7PZ3011kPAIhLnMeHNDcofxht+gMFUZUAXxRdvl4U=
Subject key identifier: 50:3D:2E:A6:5C:B3:53:63:A0:75:29:B5:94:43:41:B8:6D:4E:23:6B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847EA5A09B0A7283D1737988FE0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c2cae77-a407-3072-b5bd-dca8fa148810.roa
Signing time: Mon 18 Nov 2024 02:00:27 +0000
ROA not before: Mon 18 Nov 2024 02:00:27 +0000
ROA not after: Sun 16 Feb 2025 02:00:27 +0000
asID: 16625
IP address blocks: 23.219.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ea:5a:09:b0:a7:28:3d:17:37:98:8f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 18 02:00:27 2024 GMT
Not After : Feb 16 02:00:27 2025 GMT
Subject: CN=879a5918-35f3-4b08-b0e1-419220bd138b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e4:05:c1:a1:fc:52:03:17:9a:b8:c2:75:b0:
62:28:85:8c:43:a7:86:7c:ce:3a:9e:d0:61:51:88:
cb:58:7b:43:27:f3:25:27:02:fa:d5:e0:b4:d5:5f:
55:e8:ec:2b:66:5b:ea:ff:92:8a:60:26:dc:bf:be:
76:09:95:8f:42:cd:c4:f1:fa:42:a5:24:7d:c7:7c:
fb:ca:bd:36:67:89:f5:3a:06:b6:60:4f:0e:f4:7f:
7c:64:69:59:dd:71:02:22:0b:bf:70:15:d0:41:94:
05:f0:66:95:d3:f3:65:37:13:df:1a:28:ab:bc:04:
3e:c6:2d:aa:68:91:25:3b:b9:38:e8:82:f4:6c:35:
8f:25:b8:f7:46:48:b0:d1:48:ba:98:ff:d9:9e:21:
db:27:5c:38:54:2b:f6:24:30:38:30:82:49:1f:49:
30:d3:26:1d:65:59:1c:94:ba:95:aa:96:17:fd:0e:
e7:10:3e:cc:7d:cc:be:a2:0f:d7:91:c0:3c:8a:bf:
71:1b:28:bc:6f:62:55:74:19:a4:ed:2d:cd:56:f3:
9d:48:a4:8a:7c:5f:99:95:4d:a2:06:a2:9e:7d:b5:
bd:04:d7:40:e3:0a:4b:f7:7e:62:cf:b8:c8:2b:e7:
8f:ab:04:db:5a:c6:f8:b0:d9:92:fa:f3:80:89:10:
cc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3D:2E:A6:5C:B3:53:63:A0:75:29:B5:94:43:41:B8:6D:4E:23:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c2cae77-a407-3072-b5bd-dca8fa148810.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.219.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:c6:67:93:86:04:d8:ba:a7:9d:07:70:c1:f6:65:55:73:52:
44:3d:af:40:eb:5a:b8:cc:f1:96:1d:e4:7f:b4:11:8b:56:db:
cc:5c:36:36:32:46:80:99:e2:66:64:68:d0:27:e7:d2:36:d7:
8f:cf:80:02:49:66:aa:62:0e:68:61:7a:f1:d4:cf:0a:7a:10:
24:4a:d8:ab:9f:cd:4c:ac:07:99:88:72:f6:db:72:f2:65:a6:
3f:a1:10:b4:d2:5a:8e:93:22:d4:55:39:0a:a1:d4:e9:a5:49:
e7:63:83:fd:8f:49:da:53:82:50:e0:70:c4:16:a2:df:10:02:
2f:a8:d6:67:cc:f6:d7:f7:60:71:d7:7c:45:65:4c:92:20:25:
6f:c2:dd:0e:9f:9c:7d:8c:38:ed:64:63:16:b6:95:76:05:f2:
a8:62:b0:a3:92:fc:de:3e:71:4f:e6:df:29:19:67:81:0b:63:
a8:ff:40:cd:2d:e9:2d:d3:c1:6b:b9:56:96:b8:3f:30:37:01:
1d:8f:05:7b:a3:e0:1b:77:a0:5b:0c:2f:49:fe:29:9e:ca:53:
97:9b:60:3c:52:0c:ad:2a:9e:59:80:ea:41:2f:24:a5:91:cb:
a6:60:c7:10:f9:f9:75:0e:03:c6:7d:b7:ed:3a:0d:90:fb:1c:
de:04:4e:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfqWgmwpyg9FzeYj+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTExODAyMDAyN1oXDTI1MDIxNjAyMDAyN1owLzEtMCsGA1UEAxMk
ODc5YTU5MTgtMzVmMy00YjA4LWIwZTEtNDE5MjIwYmQxMzhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOQFwaH8UgMXmrjCdbBiKIWMQ6eGfM46ntBh
UYjLWHtDJ/MlJwL61eC01V9V6OwrZlvq/5KKYCbcv752CZWPQs3E8fpCpSR9x3z7
yr02Z4n1Oga2YE8O9H98ZGlZ3XECIgu/cBXQQZQF8GaV0/NlNxPfGiirvAQ+xi2q
aJElO7k46IL0bDWPJbj3Rkiw0Ui6mP/ZniHbJ1w4VCv2JDA4MIJJH0kw0yYdZVkc
lLqVqpYX/Q7nED7Mfcy+og/XkcA8ir9xGyi8b2JVdBmk7S3NVvOdSKSKfF+ZlU2i
BqKefbW9BNdA4wpL935iz7jIK+ePqwTbWsb4sNmS+vOAiRDMgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFA9LqZcs1NjoHUptZRDQbhtTiNrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWMyY2FlNzctYTQwNy0z
MDcyLWI1YmQtZGNhOGZhMTQ4ODEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9t8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHTGZ5OGBNi6p50HcMH2ZVVzUkQ9r0DrWrjM8ZYd5H+0EYtW28xcNjYy
RoCZ4mZkaNAn59I214/PgAJJZqpiDmhhevHUzwp6ECRK2KufzUysB5mIcvbbcvJl
pj+hELTSWo6TItRVOQqh1OmlSedjg/2PSdpTglDgcMQWot8QAi+o1mfM9tf3YHHX
fEVlTJIgJW/C3Q6fnH2MOO1kYxa2lXYF8qhisKOS/N4+cU/m3ykZZ4ELY6j/QM0t
6S3TwWu5Vpa4PzA3AR2PBXuj4Bt3oFsML0n+KZ7KU5ebYDxSDK0qnlmA6kEvJKWR
y6ZgxxD5+XUOA8Z9t+06DZD7HN4EToU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:46:41 2025 by rpki-client