Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2b26684-0b2d-3609-8fe3-e8c4012f6b1d.roa
File: b2b26684-0b2d-3609-8fe3-e8c4012f6b1d.roa (raw, json)
Hash identifier: +2iIjQiWnkYsAAjSS4GAEFF1ZDqYCphzx9IA5/ysn+Y=
Subject key identifier: 3C:AC:84:AB:21:CA:0B:62:D0:2F:4B:E4:E1:A0:80:D3:D9:D6:74:3D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584840E5BD79F2E5080B04035B40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2b26684-0b2d-3609-8fe3-e8c4012f6b1d.roa
Signing time: Thu 19 Dec 2024 02:00:39 +0000
ROA not before: Thu 19 Dec 2024 02:00:39 +0000
ROA not after: Wed 19 Mar 2025 01:00:39 +0000
asID: 16625
IP address blocks: 184.24.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:e5:bd:79:f2:e5:08:0b:04:03:5b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 19 02:00:39 2024 GMT
Not After : Mar 19 01:00:39 2025 GMT
Subject: CN=65a43dc0-9e7c-4887-a8dd-0193d165e7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:87:95:53:74:d6:d4:57:e7:aa:1f:b6:9e:9c:
6d:70:c3:d3:ba:74:cb:59:a2:ac:e9:8e:b0:70:d9:
58:41:ff:19:ec:0d:5c:6a:40:44:b7:41:62:53:03:
57:dd:f5:a5:1a:66:0c:9c:a7:e8:2b:38:d5:5c:2e:
aa:34:9b:fa:15:4b:1a:21:53:fb:94:d0:8a:f4:d0:
f7:a7:5f:a1:a5:cc:b3:b7:d3:1c:de:8f:2d:47:d4:
bb:6f:ff:1f:63:04:75:80:78:86:96:f4:fd:ea:3e:
13:d5:c4:a7:24:7b:c6:77:d1:62:51:3f:8e:9f:62:
9a:33:f8:9f:4b:49:e2:53:97:a4:f0:19:2e:cd:52:
c2:23:46:7b:d2:52:1d:6c:ad:ec:9a:a9:8b:89:d4:
a0:78:c0:70:4f:bd:5f:76:89:32:d6:dd:3d:c3:c3:
d9:a4:54:cf:4c:d3:75:01:8a:9e:ea:87:cf:78:27:
eb:dd:65:a8:a9:70:2d:36:84:10:fe:3b:a2:5f:3e:
04:6b:ca:d0:d7:78:2d:8d:6d:96:d8:27:8d:97:7d:
62:a0:58:ae:e3:58:1f:70:f7:1c:45:84:b6:18:12:
7b:57:6e:57:94:20:3d:06:08:70:11:7a:44:67:19:
2a:58:f5:4c:df:f2:83:95:ee:93:f9:0e:f1:3b:a2:
53:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AC:84:AB:21:CA:0B:62:D0:2F:4B:E4:E1:A0:80:D3:D9:D6:74:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2b26684-0b2d-3609-8fe3-e8c4012f6b1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
184.24.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:15:8c:92:61:6f:10:18:ca:92:31:df:2a:16:0c:d0:0c:7b:
fd:1c:f1:70:ac:38:45:e6:7a:78:8a:55:a7:7f:0d:ab:72:41:
96:18:ea:89:86:db:45:da:7d:3f:78:29:11:94:1b:ff:6e:db:
f0:8a:af:8b:aa:26:d1:5e:3e:01:72:7a:8b:c0:21:fc:09:26:
79:ed:54:95:e9:e5:e0:84:2f:52:d6:16:0a:f2:20:52:09:a1:
ce:45:3e:dd:2c:3d:e8:e6:78:62:b5:d0:a7:55:20:67:f4:20:
e9:6b:1b:3d:e0:54:6e:24:83:90:09:e9:88:6a:92:71:6d:5d:
2b:26:b9:91:95:18:55:4d:66:b5:48:59:84:57:4b:dd:c9:74:
fb:7a:36:71:73:74:5c:ce:b2:5d:fb:60:ea:a5:97:b0:be:98:
2e:ee:e5:d0:3b:a5:75:a4:c8:2c:6e:ee:33:5c:cc:7b:13:7b:
df:65:74:b0:85:31:4a:d7:02:35:be:3d:be:da:d4:71:cb:33:
f8:c1:c6:37:86:2e:e1:df:b8:11:74:42:26:66:28:b2:0e:32:
a2:45:7f:ba:09:41:fa:5d:30:12:a7:6f:31:af:a2:93:2d:dc:
4a:9b:e8:5c:e8:d9:b7:c8:8f:d4:7c:43:84:11:51:f1:c9:d0:
46:df:ca:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5b158uUICwQDW0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk
NjVhNDNkYzAtOWU3Yy00ODg3LWE4ZGQtMDE5M2QxNjVlN2YxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4eVU3TW1Ffnqh+2npxtcMPTunTLWaKs6Y6w
cNlYQf8Z7A1cakBEt0FiUwNX3fWlGmYMnKfoKzjVXC6qNJv6FUsaIVP7lNCK9ND3
p1+hpcyzt9Mc3o8tR9S7b/8fYwR1gHiGlvT96j4T1cSnJHvGd9FiUT+On2KaM/if
S0niU5ek8BkuzVLCI0Z70lIdbK3smqmLidSgeMBwT71fdoky1t09w8PZpFTPTNN1
AYqe6ofPeCfr3WWoqXAtNoQQ/juiXz4Ea8rQ13gtjW2W2CeNl31ioFiu41gfcPcc
RYS2GBJ7V25XlCA9BghwEXpEZxkqWPVM3/KDle6T+Q7xO6JTVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDyshKshygti0C9L5OGggNPZ1nQ9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjJiMjY2ODQtMGIyZC0z
NjA5LThmZTMtZThjNDAxMmY2YjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEuBjgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIYVjJJhbxAYypIx3yoWDNAMe/0c8XCsOEXmeniKVad/DatyQZYY6omG
20XafT94KRGUG/9u2/CKr4uqJtFePgFyeovAIfwJJnntVJXp5eCEL1LWFgryIFIJ
oc5FPt0sPejmeGK10KdVIGf0IOlrGz3gVG4kg5AJ6YhqknFtXSsmuZGVGFVNZrVI
WYRXS93JdPt6NnFzdFzOsl37YOqll7C+mC7u5dA7pXWkyCxu7jNczHsTe99ldLCF
MUrXAjW+Pb7a1HHLM/jBxjeGLuHfuBF0QiZmKLIOMqJFf7oJQfpdMBKnbzGvopMt
3Eqb6Fzo2bfIj9R8Q4QRUfHJ0Ebfypk=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:35:29 2025 by rpki-client