Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5ced156-32e3-3b60-a987-c0612abde054.roa
File: a5ced156-32e3-3b60-a987-c0612abde054.roa (raw, json)
Hash identifier: q4ApX1ZLLU9p2ISS2xM3svj/MaiPs6fPfvNM0HjhWN0=
Subject key identifier: 49:C9:19:3E:EE:10:B7:B9:CE:B0:2F:8A:91:98:88:6F:4E:C9:D2:38
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487E506BE9397DFEC53C604300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5ced156-32e3-3b60-a987-c0612abde054.roa
Signing time: Fri 10 Jan 2025 02:00:40 +0000
ROA not before: Fri 10 Jan 2025 02:00:40 +0000
ROA not after: Thu 10 Apr 2025 01:00:40 +0000
asID: 20940
IP address blocks: 23.46.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7e:50:6b:e9:39:7d:fe:c5:3c:60:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 10 02:00:40 2025 GMT
Not After : Apr 10 01:00:40 2025 GMT
Subject: CN=ca00bb80-2529-4482-a37e-016df5a4380a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:40:f1:0e:dc:53:61:09:27:21:0c:72:59:e2:
67:7c:03:87:e5:e7:e0:ad:07:1c:2b:0f:83:a5:81:
12:8f:19:73:ba:12:24:d0:0e:6d:19:0e:80:24:d2:
2d:60:d9:03:d0:89:5b:6e:f0:5b:be:14:3c:9c:c9:
63:c3:d4:d3:83:84:cf:bd:26:03:01:0c:d2:89:c6:
17:ff:1a:1a:59:2d:3e:29:96:67:df:99:1a:17:9a:
58:02:72:b0:48:4a:08:ba:57:f0:f1:e2:42:d8:10:
b5:59:b7:d6:ae:d4:52:dc:68:e3:a7:49:09:e4:d7:
c9:42:33:d2:93:f1:51:48:bc:15:a2:80:64:d4:ba:
85:5a:39:8a:11:c8:4e:16:96:ac:68:68:3f:54:86:
c1:f7:24:fd:07:69:fa:4c:c0:ec:61:a3:45:f2:e8:
eb:9b:ab:c6:65:0a:c8:15:3f:7e:11:de:96:55:84:
9f:5a:c4:8f:ed:dd:89:79:29:89:dd:72:b7:14:b7:
e1:79:7a:4e:2f:53:43:25:0e:d9:e6:cd:31:6b:c9:
03:60:6a:ed:ca:3a:83:d4:77:d4:1a:f4:52:8a:4e:
93:ff:75:21:f5:05:12:ee:ef:9b:82:c9:48:2b:23:
47:2a:e5:54:72:48:5e:ac:25:34:eb:b7:29:a1:3c:
1d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C9:19:3E:EE:10:B7:B9:CE:B0:2F:8A:91:98:88:6F:4E:C9:D2:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5ced156-32e3-3b60-a987-c0612abde054.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.46.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:73:69:08:7a:0f:b2:2e:4e:51:06:22:9f:97:3d:bd:5d:e0:
41:d8:dd:3d:c3:2b:4e:15:25:1c:22:50:43:96:6c:53:3d:a2:
f9:10:6d:8a:85:e0:07:50:b0:11:59:87:80:1d:65:6c:8e:fc:
3f:94:eb:27:8a:d6:4f:f6:43:49:7e:f0:17:da:0e:0e:fe:65:
64:22:8d:6f:1d:c7:3c:f7:18:03:a8:f6:02:b1:56:c9:34:9d:
99:3c:34:16:a6:2f:62:49:c7:e6:34:f8:48:59:27:8b:7b:2a:
c3:5f:bc:d6:aa:3c:0c:76:96:4a:5b:05:fd:5b:64:2f:d6:58:
1b:25:fc:00:f9:d1:29:1e:61:d9:8c:78:f5:73:e4:9a:60:76:
5d:a7:57:c1:f4:ce:61:c1:49:6d:77:a5:f4:e2:b9:a3:3d:ca:
99:a9:f0:f0:23:88:ea:15:6a:6e:6d:8b:84:13:de:1e:ce:b5:
37:fb:6d:a2:4e:91:37:d2:98:40:7c:da:86:90:17:fd:81:96:
0f:1c:21:48:a1:d6:dc:0d:40:02:2c:58:78:24:f3:ff:89:53:
49:a6:d6:8f:b6:99:62:4b:e8:f7:25:bb:81:2d:5f:86:0c:f6:
46:21:90:3f:92:17:37:52:43:35:0d:3a:05:ea:5d:b5:85:a3:
33:31:01:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh+UGvpOX3+xTxgQwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDExMDAyMDA0MFoXDTI1MDQxMDAxMDA0MFowLzEtMCsGA1UEAxMk
Y2EwMGJiODAtMjUyOS00NDgyLWEzN2UtMDE2ZGY1YTQzODBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0DxDtxTYQknIQxyWeJnfAOH5efgrQccKw+D
pYESjxlzuhIk0A5tGQ6AJNItYNkD0IlbbvBbvhQ8nMljw9TTg4TPvSYDAQzSicYX
/xoaWS0+KZZn35kaF5pYAnKwSEoIulfw8eJC2BC1WbfWrtRS3Gjjp0kJ5NfJQjPS
k/FRSLwVooBk1LqFWjmKEchOFpasaGg/VIbB9yT9B2n6TMDsYaNF8ujrm6vGZQrI
FT9+Ed6WVYSfWsSP7d2JeSmJ3XK3FLfheXpOL1NDJQ7Z5s0xa8kDYGrtyjqD1HfU
GvRSik6T/3Uh9QUS7u+bgslIKyNHKuVUckherCU067cpoTwdYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEnJGT7uELe5zrAvipGYiG9OydI4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTVjZWQxNTYtMzJlMy0z
YjYwLWE5ODctYzA2MTJhYmRlMDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy4cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABhzaQh6D7IuTlEGIp+XPb1d4EHY3T3DK04VJRwiUEOWbFM9ovkQbYqF
4AdQsBFZh4AdZWyO/D+U6yeK1k/2Q0l+8BfaDg7+ZWQijW8dxzz3GAOo9gKxVsk0
nZk8NBamL2JJx+Y0+EhZJ4t7KsNfvNaqPAx2lkpbBf1bZC/WWBsl/AD50SkeYdmM
ePVz5Jpgdl2nV8H0zmHBSW13pfTiuaM9ypmp8PAjiOoVam5ti4QT3h7OtTf7baJO
kTfSmEB82oaQF/2Blg8cIUih1twNQAIsWHgk8/+JU0mm1o+2mWJL6Pclu4EtX4YM
9kYhkD+SFzdSQzUNOgXqXbWFozMxAVc=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:55:25 2025 by rpki-client