Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/7956eda3-70c9-3ed7-b458-8c5b621234c3.roa
File: 7956eda3-70c9-3ed7-b458-8c5b621234c3.roa (raw, json)
Hash identifier: o16yApb9Gr4DJ5qKJW4H/iTTAiqcvb0wxTpHOFGTi3U=
Subject key identifier: C8:62:B1:13:45:C5:3C:6B:43:87:CD:DD:72:03:1D:B6:41:A6:69:CF
Certificate issuer: /CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b
Certificate serial: 010D0C9F43285848A13617ECC85EBAADD5B27B40
Authority key identifier: 04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/7956eda3-70c9-3ed7-b458-8c5b621234c3.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 40628
IP address blocks: 205.153.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:17:ec:c8:5e:ba:ad:d5:b2:7b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=8ef71716-b7c1-428f-8331-b4230629c9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:38:ec:dd:03:ee:f3:7c:4c:1f:bd:03:06:4f:
1c:a4:b5:42:d7:5a:05:6c:01:67:24:31:7f:48:c8:
34:56:75:3d:32:b3:d4:5e:96:fc:89:c7:63:1b:b6:
82:b6:06:da:48:0a:cb:51:26:f6:c3:4b:61:47:9b:
49:a2:ba:31:c8:09:00:63:10:bc:22:dd:4a:e4:cf:
c9:0f:b1:cf:fb:d2:d0:5d:48:10:29:87:8c:e9:b9:
7d:16:38:3d:2a:14:ad:f7:0a:a2:93:70:d7:9d:01:
8b:47:c0:b4:ae:24:f9:23:b0:36:e4:07:fb:fc:96:
22:83:82:bc:32:94:04:66:da:68:41:e4:2e:5b:e3:
08:87:8e:04:76:80:60:86:56:49:0c:34:ff:c8:f8:
bd:e0:86:00:46:95:35:a4:ea:8c:ba:85:dc:c4:25:
c0:51:cb:dd:c0:97:97:e9:71:85:21:37:78:89:2c:
c9:18:70:02:23:3d:61:57:12:d8:e9:9d:23:2c:ad:
66:97:20:f2:69:c4:97:c0:a5:9a:33:2f:3c:d3:ad:
43:b6:f6:fb:51:33:64:81:91:8d:d5:17:6c:b3:7d:
50:b8:f3:01:c1:64:b5:77:fc:b1:77:39:1d:b7:d8:
07:b3:ab:09:eb:e9:af:a0:ed:f5:6b:2b:aa:3d:69:
4b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:62:B1:13:45:C5:3C:6B:43:87:CD:DD:72:03:1D:B6:41:A6:69:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/7956eda3-70c9-3ed7-b458-8c5b621234c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl
X509v3 Authority Key Identifier:
keyid:04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer
sbgp-ipAddrBlock: critical
IPv4:
205.153.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:01:a8:8a:46:ff:c0:81:a2:ef:d7:99:d2:45:a5:df:dd:cd:
1c:fd:f3:1a:33:8b:97:6d:86:01:6c:ff:30:3d:68:7f:d8:b9:
d1:75:a6:96:27:41:a8:09:fa:1e:2e:ed:24:2f:86:e6:e5:97:
58:9e:ce:c1:06:2c:f6:0b:9a:c4:8c:06:85:60:35:78:e8:87:
5b:d3:e1:b5:4b:ae:18:96:e6:c0:2f:0e:2a:d9:de:e2:28:6a:
3a:4f:b6:30:89:d5:bf:3f:a7:83:75:a4:ef:5e:e4:de:78:12:
6d:2f:ae:c8:c7:d2:ca:6b:3d:da:14:c9:92:e3:55:c6:c5:e5:
1b:88:a6:34:46:d5:b8:c1:bb:92:c5:a6:e1:42:3e:dd:48:96:
b9:f1:21:d0:d6:4b:d3:8a:f4:77:db:32:ed:e8:f3:3a:2b:bd:
62:af:60:e7:17:e4:f5:d2:d7:7e:d7:9a:b1:e3:6d:45:f4:44:
16:83:fa:16:6d:31:39:81:25:1a:5b:b1:2e:29:d1:9d:ab:9b:
42:5f:5f:ed:42:3a:28:d0:0a:28:84:b2:74:ff:01:e3:74:27:
a2:7c:ed:98:be:f1:08:d3:c9:59:78:e8:56:56:0c:44:88:e7:
64:aa:25:2f:7a:a6:e6:d6:76:1f:e0:cd:03:68:19:59:b5:9e:
47:12:cf:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNhfsyF66rdWye0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjM4ZjViN2EtNmM1Ni00Mjc5LWFhNTAtMzQ5OWIxZmI2
MDZiMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk
OGVmNzE3MTYtYjdjMS00MjhmLTgzMzEtYjQyMzA2MjljOWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDjs3QPu83xMH70DBk8cpLVC11oFbAFnJDF/
SMg0VnU9MrPUXpb8icdjG7aCtgbaSArLUSb2w0thR5tJoroxyAkAYxC8It1K5M/J
D7HP+9LQXUgQKYeM6bl9Fjg9KhSt9wqik3DXnQGLR8C0riT5I7A25Af7/JYig4K8
MpQEZtpoQeQuW+MIh44EdoBghlZJDDT/yPi94IYARpU1pOqMuoXcxCXAUcvdwJeX
6XGFITd4iSzJGHACIz1hVxLY6Z0jLK1mlyDyacSXwKWaMy88061Dtvb7UTNkgZGN
1Rdss31QuPMBwWS1d/yxdzkdt9gHs6sJ6+mvoO31ayuqPWlL6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMhisRNFxTxrQ4fN3XIDHbZBpmnPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhm
NWI3YS02YzU2LTQyNzktYWE1MC0zNDk5YjFmYjYwNmIvNzk1NmVkYTMtNzBjOS0z
ZWQ3LWI0NTgtOGM1YjYyMTIzNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjM4ZjViN2EtNmM1Ni00Mjc5LWFh
NTAtMzQ5OWIxZmI2MDZiL2IzOGY1YjdhLTZjNTYtNDI3OS1hYTUwLTM0OTliMWZi
NjA2Yi5jcmwwHwYDVR0jBBgwFoAUBBPD4tUDrH0iGiFIWtwii6SHstUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhmNWI3YS02YzU2LTQyNzktYWE1MC0zNDk5
YjFmYjYwNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzZncMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKABqIpG/8CBou/XmdJFpd/dzRz98xozi5dthgFs/zA9aH/YudF1ppYn
QagJ+h4u7SQvhubll1iezsEGLPYLmsSMBoVgNXjoh1vT4bVLrhiW5sAvDirZ3uIo
ajpPtjCJ1b8/p4N1pO9e5N54Em0vrsjH0sprPdoUyZLjVcbF5RuIpjRG1bjBu5LF
puFCPt1IlrnxIdDWS9OK9HfbMu3o8zorvWKvYOcX5PXS137XmrHjbUX0RBaD+hZt
MTmBJRpbsS4p0Z2rm0JfX+1COijQCiiEsnT/AeN0J6J87Zi+8QjTyVl46FZWDESI
52SqJS96pubWdh/gzQNoGVm1nkcSz0o=
-----END CERTIFICATE-----
Generated at Mon May 12 19:20:59 2025 by rpki-client