Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e8a4b66b-a071-328d-b971-9d35e22111a8.roa
File: e8a4b66b-a071-328d-b971-9d35e22111a8.roa (raw, json)
Hash identifier: sDAWRRfy08BUV8v4pyMdoXkBxHLYUpmatEWoi0/9ljQ=
Subject key identifier: D7:56:D5:B3:8D:B3:88:9D:83:F0:B5:C9:54:DE:BF:18:20:03:C1:64
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858496CE478AD93BDCF8B7F47C9E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e8a4b66b-a071-328d-b971-9d35e22111a8.roa
Signing time: Sat 05 Apr 2025 13:01:01 +0000
ROA not before: Sat 05 Apr 2025 13:01:01 +0000
ROA not after: Fri 04 Jul 2025 13:01:01 +0000
asID: 20940
IP address blocks: 23.59.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6c:e4:78:ad:93:bd:cf:8b:7f:47:c9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 5 13:01:01 2025 GMT
Not After : Jul 4 13:01:01 2025 GMT
Subject: CN=758e7307-1951-47c7-8a9a-94766343fd25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e7:e9:47:9d:c9:ef:1d:a2:fe:6d:c7:14:6c:
ef:47:57:72:ee:d1:29:fa:51:a9:30:ff:20:51:28:
e9:29:b2:d0:84:50:a2:c3:7e:9c:40:47:12:ee:04:
5a:cc:e3:dd:19:1e:9c:95:db:08:66:20:1f:91:47:
74:a5:5c:fa:ac:24:83:84:f2:07:3d:0c:f3:30:82:
93:89:9e:f0:36:6c:4d:48:4d:f1:23:6c:78:cc:68:
55:0a:58:c3:3f:77:54:6e:cf:9b:88:03:75:1b:ca:
ef:f0:53:eb:e4:a4:16:81:a0:3d:81:6a:e4:31:81:
31:ee:e9:ee:dc:a7:73:07:6b:4d:0c:0c:9f:af:8f:
c3:99:94:6a:b4:7e:26:87:a9:30:12:02:25:76:17:
cc:ce:45:80:4d:6b:29:4f:83:8e:50:67:ec:b7:cf:
db:ce:d0:08:3d:8b:71:ec:78:2c:c7:45:5f:b1:5a:
d8:ba:d9:09:92:be:2b:e1:73:45:94:87:24:78:5e:
8f:32:bd:06:7d:d6:6c:5b:cb:aa:79:21:a7:b5:26:
c9:0c:51:c9:0e:d6:ab:2d:90:de:e5:08:1d:7c:c3:
7a:8b:1f:8c:32:35:15:5c:c0:6b:86:86:13:5a:0e:
96:5b:e9:e3:c8:33:1a:72:9d:5f:86:a7:ac:68:69:
33:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:56:D5:B3:8D:B3:88:9D:83:F0:B5:C9:54:DE:BF:18:20:03:C1:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e8a4b66b-a071-328d-b971-9d35e22111a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.59.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:7f:a4:c0:4d:f3:e2:73:8b:5d:b3:29:83:d2:07:ae:7f:6f:
46:61:84:db:6a:19:7e:9b:f8:f7:9a:ef:14:b1:0a:38:15:4f:
9d:13:33:72:cd:0a:de:6c:35:9b:b8:b4:a7:81:a8:ef:7d:58:
98:9e:7b:78:2f:20:09:1d:d4:15:55:d6:27:ea:d3:26:79:ad:
58:81:58:73:b9:f0:7a:b7:bd:cf:1d:ed:4e:25:28:40:bf:10:
f0:be:a9:4b:48:f0:43:00:bf:eb:f1:17:a4:4a:3e:d0:84:4a:
5f:d5:40:4a:d3:f9:fb:cd:5d:b4:fc:b8:cc:5f:01:85:c6:ba:
b4:32:f7:44:68:e8:3a:80:13:2f:55:d3:b5:bb:f6:63:4b:fb:
b4:8d:93:ae:dc:d1:72:9f:19:a7:05:e0:0f:b8:6e:71:10:66:
3b:31:d0:97:1a:05:54:bc:7d:d6:4b:c4:ec:f8:95:e4:24:2d:
e2:7e:14:c3:c6:cb:c4:cb:45:e8:88:2b:73:20:d7:6c:5e:4e:
6c:d0:80:ce:f7:08:0c:96:21:68:cc:e2:96:cb:0f:28:63:d0:
33:8c:5c:1a:b8:45:62:5d:d2:db:61:76:a4:6e:be:16:c2:79:
9e:b0:28:7f:05:ae:59:7a:d0:b4:d7:8f:28:e4:f0:da:64:5e:
80:30:ef:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5Hitk73Pi39HyeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk
NzU4ZTczMDctMTk1MS00N2M3LThhOWEtOTQ3NjYzNDNmZDI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhefpR53J7x2i/m3HFGzvR1dy7tEp+lGpMP8g
USjpKbLQhFCiw36cQEcS7gRazOPdGR6cldsIZiAfkUd0pVz6rCSDhPIHPQzzMIKT
iZ7wNmxNSE3xI2x4zGhVCljDP3dUbs+biAN1G8rv8FPr5KQWgaA9gWrkMYEx7unu
3KdzB2tNDAyfr4/DmZRqtH4mh6kwEgIldhfMzkWATWspT4OOUGfst8/bztAIPYtx
7Hgsx0VfsVrYutkJkr4r4XNFlIckeF6PMr0GfdZsW8uqeSGntSbJDFHJDtarLZDe
5QgdfMN6ix+MMjUVXMBrhoYTWg6WW+njyDMacp1fhqesaGkzbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNdW1bONs4idg/C1yVTevxggA8FkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZThhNGI2NmItYTA3MS0z
MjhkLWI5NzEtOWQzNWUyMjExMWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzvrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE9/pMBN8+Jzi12zKYPSB65/b0ZhhNtqGX6b+Pea7xSxCjgVT50TM3LN
Ct5sNZu4tKeBqO99WJiee3gvIAkd1BVV1ifq0yZ5rViBWHO58Hq3vc8d7U4lKEC/
EPC+qUtI8EMAv+vxF6RKPtCESl/VQErT+fvNXbT8uMxfAYXGurQy90Ro6DqAEy9V
07W79mNL+7SNk67c0XKfGacF4A+4bnEQZjsx0JcaBVS8fdZLxOz4leQkLeJ+FMPG
y8TLReiIK3Mg12xeTmzQgM73CAyWIWjM4pbLDyhj0DOMXBq4RWJd0tthdqRuvhbC
eZ6wKH8Frll60LTXjyjk8NpkXoAw77M=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:29:54 2025 by rpki-client on console.sobornost.net