Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8dd599f-e8b9-3d10-a2a3-7263aca1dfe9.roa
File: a8dd599f-e8b9-3d10-a2a3-7263aca1dfe9.roa (raw, json)
Hash identifier: Le6BGEDFMooq8kwjXSGfEETrrdmIhNBe47hVx+EPJYs=
Subject key identifier: B7:E5:29:52:FF:EC:28:C8:29:AB:95:63:A0:84:D6:43:B7:81:0C:72
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F041B644B4F3B46072D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8dd599f-e8b9-3d10-a2a3-7263aca1dfe9.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 24.128.248.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:04:1b:64:4b:4f:3b:46:07:2d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=6599f6b3-17ab-4aa3-b9a9-9bf2f38b91ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c8:47:da:6e:39:f5:b9:70:48:dc:21:f7:42:
12:95:09:a1:8f:97:86:e1:a6:d4:4d:c6:bd:c8:c4:
96:9e:3c:3b:35:43:05:5a:c3:48:8f:55:26:b2:b3:
1f:ef:dd:f8:b0:a1:d5:9a:eb:a9:6b:e5:83:32:47:
13:fe:97:aa:d7:50:36:48:5b:6e:9b:94:7c:68:b9:
e2:bb:b8:d8:4f:d3:5a:bf:f2:c2:7f:32:92:f2:06:
5c:8a:16:eb:a0:1f:d9:79:75:66:7b:31:b2:06:66:
44:e0:82:81:e0:42:aa:6b:31:66:b3:a0:fe:1c:26:
00:7a:04:39:8a:43:cb:e1:2e:f1:d8:8b:55:16:86:
1d:77:9d:d2:bb:4d:7b:2e:67:c5:25:0e:a9:b1:ea:
c1:4b:b6:e2:a2:e3:5e:9f:0d:fe:c4:83:f6:59:dc:
05:d9:de:5a:47:98:89:f7:08:02:ee:1f:d4:dd:5e:
e5:87:40:9d:6e:03:1a:f2:22:d9:b4:44:2a:25:9a:
65:b0:79:11:1a:fd:de:4e:60:cc:b5:39:e3:06:8a:
31:5d:3c:0c:c8:52:d4:f8:48:d8:2d:26:d5:01:87:
7c:e2:7a:1b:ea:80:ff:a6:94:6c:a1:bc:e9:9c:ee:
b2:c3:58:38:24:d6:2a:09:1f:dc:1b:50:71:1d:1f:
75:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E5:29:52:FF:EC:28:C8:29:AB:95:63:A0:84:D6:43:B7:81:0C:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8dd599f-e8b9-3d10-a2a3-7263aca1dfe9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.128.248.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:1f:2a:2d:8e:d9:45:97:74:f6:29:34:17:ec:7d:fe:bd:22:
fc:b2:df:3f:1f:15:71:f9:f5:eb:a4:cc:3d:39:c5:16:c5:72:
60:85:ff:b0:7d:a3:63:fa:6d:89:c8:36:42:c0:ce:88:fe:8d:
0f:17:d2:05:51:f1:92:03:e0:16:96:01:b4:e2:31:18:ec:5b:
38:2c:25:63:96:22:0e:22:ce:d1:e7:05:1f:ef:5d:d8:e7:2c:
0e:45:6a:2a:c0:ae:9d:e8:17:61:7a:5b:56:60:9a:90:f0:33:
b2:5b:0b:20:0c:b5:ea:72:5c:02:a5:01:ab:18:61:92:02:7d:
26:38:3b:06:c0:ec:c2:48:0b:b0:b6:8b:98:cd:a0:9e:ba:15:
4c:7a:54:6d:54:8f:e6:ba:8b:b7:6e:44:d4:9e:55:21:c9:b8:
57:a2:34:5a:56:07:60:5e:fe:89:3b:c3:04:f5:8a:99:f1:f5:
bb:ed:4f:4b:42:e5:aa:98:41:87:26:23:06:72:b1:3a:63:e5:
e3:3b:0b:98:00:1a:2e:f0:bd:6e:60:6c:22:2d:34:06:1f:eb:
1c:d7:64:00:25:82:c2:64:b7:05:17:10:cc:f7:1e:36:07:06:
ef:62:91:c1:e4:51:98:d6:c9:bc:b0:1a:60:27:0c:9f:a0:35:
de:8f:c5:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPwQbZEtPO0YHLYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
NjU5OWY2YjMtMTdhYi00YWEzLWI5YTktOWJmMmYzOGI5MWZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsshH2m459blwSNwh90ISlQmhj5eG4abUTca9
yMSWnjw7NUMFWsNIj1UmsrMf7934sKHVmuupa+WDMkcT/peq11A2SFtum5R8aLni
u7jYT9Nav/LCfzKS8gZcihbroB/ZeXVmezGyBmZE4IKB4EKqazFms6D+HCYAegQ5
ikPL4S7x2ItVFoYdd53Su017LmfFJQ6pserBS7biouNenw3+xIP2WdwF2d5aR5iJ
9wgC7h/U3V7lh0CdbgMa8iLZtEQqJZplsHkRGv3eTmDMtTnjBooxXTwMyFLU+EjY
LSbVAYd84nob6oD/ppRsobzpnO6yw1g4JNYqCR/cG1BxHR91xQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLflKVL/7CjIKauVY6CE1kO3gQxyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYThkZDU5OWYtZThiOS0z
ZDEwLWEyYTMtNzI2M2FjYTFkZmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGID4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALwfKi2O2UWXdPYpNBfsff69Ivyy3z8fFXH59eukzD05xRbFcmCF/7B9
o2P6bYnINkLAzoj+jQ8X0gVR8ZID4BaWAbTiMRjsWzgsJWOWIg4iztHnBR/vXdjn
LA5FairArp3oF2F6W1ZgmpDwM7JbCyAMtepyXAKlAasYYZICfSY4OwbA7MJIC7C2
i5jNoJ66FUx6VG1Uj+a6i7duRNSeVSHJuFeiNFpWB2Be/ok7wwT1ipnx9bvtT0tC
5aqYQYcmIwZysTpj5eM7C5gAGi7wvW5gbCItNAYf6xzXZAAlgsJktwUXEMz3HjYH
Bu9ikcHkUZjWybywGmAnDJ+gNd6PxT8=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:33:48 2025 by rpki-client