Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb23c653-22f7-350d-a7a8-d925bc3d9c77.roa
File: fb23c653-22f7-350d-a7a8-d925bc3d9c77.roa (raw, json)
Hash identifier: kqRNghOjjPZd3G22f05YAK1GmRaD4YnyJVkU1uEw1qk=
Subject key identifier: 94:DE:79:73:F0:1D:01:64:E4:67:58:FF:3D:91:E1:C3:FD:72:6C:45
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848424B11765EA71B23A4371300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb23c653-22f7-350d-a7a8-d925bc3d9c77.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 184.28.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4b:11:76:5e:a7:1b:23:a4:37:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=d3e31c98-b1af-4889-92ab-f62baf01d01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:09:e4:94:57:81:81:1e:d4:c2:75:a4:3a:3f:
bb:26:f6:7b:3d:69:cf:7e:b3:13:60:bd:f4:91:94:
52:40:03:46:af:d6:a8:38:bd:c5:de:ee:9f:12:e3:
fb:58:a1:e1:b5:c0:69:18:6d:6c:61:ff:14:b2:47:
7f:2b:23:36:3b:6d:c3:21:9a:0a:63:55:43:9d:ee:
5e:65:c3:46:25:60:27:08:e1:04:47:b2:ce:5a:64:
e5:80:d3:6b:1a:f8:6c:b2:60:94:2b:1c:b3:3b:2a:
8f:79:55:59:2b:a0:d6:49:c0:7f:50:15:2f:b2:88:
6f:06:2a:65:0e:e6:46:d2:b9:fb:33:8a:00:f8:38:
98:ee:ac:24:92:46:f4:10:2c:5f:32:2c:89:2e:3e:
b1:64:b2:6b:7a:9d:3f:a3:ab:04:62:ec:e8:96:f6:
69:4c:bc:94:b7:f5:cb:66:d8:fa:08:a7:5b:3e:06:
2e:d4:ef:73:9e:27:a2:3e:6c:93:76:a9:46:f9:39:
11:15:92:5c:c3:aa:b1:9b:d6:4a:0d:ec:e6:4d:d6:
96:59:d5:5c:dc:da:0d:cd:48:de:a4:7b:8c:20:d3:
4f:06:2e:e6:5c:b5:be:f0:af:6e:9b:48:a8:b9:6b:
96:54:34:1b:12:e7:da:73:8d:0f:e0:f8:b8:18:58:
be:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DE:79:73:F0:1D:01:64:E4:67:58:FF:3D:91:E1:C3:FD:72:6C:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb23c653-22f7-350d-a7a8-d925bc3d9c77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
184.28.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:69:29:80:29:49:f1:71:6b:7b:6f:a5:99:b1:7d:52:8d:f4:
da:5f:1d:c4:a6:28:b5:d1:1b:74:cc:5d:70:49:20:5c:5c:2a:
22:da:22:0c:56:eb:59:6c:89:f9:d7:8d:e8:25:ac:1b:1d:9c:
72:c1:42:6b:ff:5d:ab:95:f5:ad:46:7c:15:b3:09:1f:70:99:
e1:c2:74:5e:d1:b3:fa:5a:2c:f6:22:d2:7f:85:cb:a5:4d:92:
32:23:22:b2:be:af:d0:ae:a8:5d:af:99:4c:c3:7d:97:15:77:
f3:be:5a:be:7a:38:be:c4:9c:a6:df:31:a7:76:f6:4e:bc:3e:
81:3b:95:6d:b4:32:14:f2:63:86:04:0a:15:f9:18:33:24:8d:
75:e6:b2:eb:74:7f:e4:01:6f:4f:41:ca:42:05:90:7d:81:13:
7b:34:d3:fd:34:c8:b5:33:56:3a:f9:74:02:9b:ba:70:c2:57:
f3:28:f4:cb:17:6e:3f:92:de:f9:a9:10:88:e0:2b:fc:05:62:
fc:f6:0c:16:99:af:15:e0:4d:77:52:0a:dd:c6:4f:46:10:0d:
0c:b6:64:f6:8d:e4:38:81:f4:d0:6b:67:73:b8:1d:4f:17:30:
2f:b4:a4:32:95:13:9d:c5:9b:44:e4:c3:fe:ce:3c:0f:d3:c8:
fb:0e:b0:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhCSxF2XqcbI6Q3EwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIxOTE0MDA1MloXDTI1MDMxOTEzMDA1MlowLzEtMCsGA1UEAxMk
ZDNlMzFjOTgtYjFhZi00ODg5LTkyYWItZjYyYmFmMDFkMDFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QnklFeBgR7UwnWkOj+7JvZ7PWnPfrMTYL30
kZRSQANGr9aoOL3F3u6fEuP7WKHhtcBpGG1sYf8Uskd/KyM2O23DIZoKY1VDne5e
ZcNGJWAnCOEER7LOWmTlgNNrGvhssmCUKxyzOyqPeVVZK6DWScB/UBUvsohvBipl
DuZG0rn7M4oA+DiY7qwkkkb0ECxfMiyJLj6xZLJrep0/o6sEYuzolvZpTLyUt/XL
Ztj6CKdbPgYu1O9znieiPmyTdqlG+TkRFZJcw6qxm9ZKDezmTdaWWdVc3NoNzUje
pHuMINNPBi7mXLW+8K9um0iouWuWVDQbEufac40P4Pi4GFi+QwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJTeeXPwHQFk5GdY/z2R4cP9cmxFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmIyM2M2NTMtMjJmNy0z
NTBkLWE3YTgtZDkyNWJjM2Q5Yzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBxoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGBpKYApSfFxa3tvpZmxfVKN9NpfHcSmKLXRG3TMXXBJIFxcKiLaIgxW
61lsifnXjeglrBsdnHLBQmv/XauV9a1GfBWzCR9wmeHCdF7Rs/paLPYi0n+Fy6VN
kjIjIrK+r9CuqF2vmUzDfZcVd/O+Wr56OL7EnKbfMad29k68PoE7lW20MhTyY4YE
ChX5GDMkjXXmsut0f+QBb09BykIFkH2BE3s00/00yLUzVjr5dAKbunDCV/Mo9MsX
bj+S3vmpEIjgK/wFYvz2DBaZrxXgTXdSCt3GT0YQDQy2ZPaN5DiB9NBrZ3O4HU8X
MC+0pDKVE53Fm0Tkw/7OPA/TyPsOsJ4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:35:32 2025 by rpki-client