Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2cd00d3-e91d-3a13-bbff-22a67da2189c.roa
File: b2cd00d3-e91d-3a13-bbff-22a67da2189c.roa (raw, json)
Hash identifier: hNrI7UfEfCmqhwfJ67CezFPgdDJKeBwxkbM5CTdSUXk=
Subject key identifier: 09:C2:34:82:36:D7:72:3C:54:C6:7E:DC:90:D5:9E:05:EC:6C:0C:EB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143DC6B8BA2555D58F4B9AC4
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2cd00d3-e91d-3a13-bbff-22a67da2189c.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 67.189.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3d:c6:b8:ba:25:55:d5:8f:4b:9a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=7c835cb4-d2c7-46fd-b2bd-93826bd67072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:96:cd:64:88:d9:bd:9a:79:4d:07:7e:85:63:
aa:6a:cc:70:0b:c8:f3:e5:89:0e:3c:ff:ea:93:38:
4b:87:b6:45:eb:36:01:ff:a7:00:be:26:92:18:de:
4f:f0:4d:70:33:b5:b3:31:33:a9:34:33:c1:8e:ed:
74:33:d7:e5:ae:8b:2a:f1:84:6c:58:c9:f2:b9:83:
6c:2a:45:81:7d:07:72:09:51:12:a4:2c:85:a7:5c:
cf:5d:94:72:5f:e8:bf:ee:53:96:ec:e6:95:eb:8c:
75:38:00:6e:73:a2:b2:97:fc:ec:64:de:5b:7a:9e:
74:3f:70:59:18:e1:7c:b2:81:f8:3e:a6:1c:64:fe:
aa:3b:66:fe:9e:7d:a5:72:95:74:b4:e5:38:f7:ac:
09:91:7f:a2:43:ec:cf:13:e4:e1:94:6c:35:13:6b:
b6:b9:2c:9f:a2:79:d9:c3:b1:0a:88:ef:55:b3:92:
79:3e:3b:c8:58:fd:b8:60:87:84:d6:38:f2:5c:51:
11:30:5a:61:41:b9:aa:48:cc:02:3c:07:f4:33:1d:
ca:3d:ef:69:69:14:59:80:aa:8d:4a:73:06:fd:28:
3d:0a:82:e8:09:db:3c:f1:d2:ac:9b:4b:f4:3a:59:
01:4c:01:1a:2d:2f:52:fe:81:3c:41:9d:a6:d8:1e:
fe:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C2:34:82:36:D7:72:3C:54:C6:7E:DC:90:D5:9E:05:EC:6C:0C:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2cd00d3-e91d-3a13-bbff-22a67da2189c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.189.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:72:3f:df:c2:42:36:ce:f2:e1:f7:55:b8:84:09:fb:10:4f:
1a:7a:f6:ce:5f:6d:ca:be:ee:ff:59:c0:f3:90:ac:b7:10:2f:
7e:a6:c7:d1:fa:9b:8f:01:11:96:9f:e2:6c:2e:57:84:55:55:
1e:29:c7:fc:31:56:44:78:fb:e7:b6:c8:9d:83:95:92:d3:1d:
8f:8b:08:0a:3d:c7:da:95:d9:c0:a4:03:06:4e:47:bf:8a:5c:
51:f1:91:47:82:02:21:ea:30:af:bd:60:4d:de:2a:de:ff:fd:
09:b1:b2:a2:95:7d:ed:aa:9f:a0:d2:53:ce:a4:d0:99:6b:b9:
45:f0:b5:1a:c5:f7:db:ec:c6:4b:93:39:9e:c1:f5:47:cf:ec:
4c:0f:cc:f7:62:62:e2:03:77:fb:cb:04:d5:a5:db:7e:3d:f2:
f2:1d:c3:f5:40:a0:c8:e3:8c:78:ac:20:56:f9:c3:6a:4f:38:
63:06:fa:68:91:ce:36:0e:2a:0d:93:6c:3a:ed:c2:21:a3:9f:
95:e9:c2:2d:67:7d:27:3b:6f:f3:db:23:36:f4:9a:e5:c5:64:
d1:8c:f5:e4:81:82:81:78:79:ca:fb:3a:c1:a0:a4:5c:f6:b0:
9e:6c:7a:2f:bc:aa:d3:af:d7:b6:b5:b8:54:77:79:2c:f1:2a:
b2:2a:95:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPca4uiVV1Y9LmsQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
N2M4MzVjYjQtZDJjNy00NmZkLWIyYmQtOTM4MjZiZDY3MDcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJbNZIjZvZp5TQd+hWOqasxwC8jz5YkOPP/q
kzhLh7ZF6zYB/6cAviaSGN5P8E1wM7WzMTOpNDPBju10M9flrosq8YRsWMnyuYNs
KkWBfQdyCVESpCyFp1zPXZRyX+i/7lOW7OaV64x1OABuc6Kyl/zsZN5bep50P3BZ
GOF8soH4PqYcZP6qO2b+nn2lcpV0tOU496wJkX+iQ+zPE+ThlGw1E2u2uSyfonnZ
w7EKiO9Vs5J5PjvIWP24YIeE1jjyXFERMFphQbmqSMwCPAf0Mx3KPe9paRRZgKqN
SnMG/Sg9CoLoCds88dKsm0v0OlkBTAEaLS9S/oE8QZ2m2B7+GwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAnCNII213I8VMZ+3JDVngXsbAzrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjJjZDAwZDMtZTkxZC0z
YTEzLWJiZmYtMjJhNjdkYTIxODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ73kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALJyP9/CQjbO8uH3VbiECfsQTxp69s5fbcq+7v9ZwPOQrLcQL36mx9H6
m48BEZaf4mwuV4RVVR4px/wxVkR4++e2yJ2DlZLTHY+LCAo9x9qV2cCkAwZOR7+K
XFHxkUeCAiHqMK+9YE3eKt7//QmxsqKVfe2qn6DSU86k0JlruUXwtRrF99vsxkuT
OZ7B9UfP7EwPzPdiYuIDd/vLBNWl23498vIdw/VAoMjjjHisIFb5w2pPOGMG+miR
zjYOKg2TbDrtwiGjn5Xpwi1nfSc7b/PbIzb0muXFZNGM9eSBgoF4ecr7OsGgpFz2
sJ5sei+8qtOv17a1uFR3eSzxKrIqlQY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:56:03 2025 by rpki-client