Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb4cd200-c945-31be-a996-1b61b385984c.roa
File: bb4cd200-c945-31be-a996-1b61b385984c.roa (raw, json)
Hash identifier: rGl4q3VT4Xb02jOivrIgHpQeDG9O6KpSI3rDdj5XSys=
Subject key identifier: FA:61:45:8B:E5:9F:12:14:F2:AE:E1:81:BE:51:23:5D:68:E2:4F:25
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143A9D35C8240182A3588AB0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb4cd200-c945-31be-a996-1b61b385984c.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 71.238.58.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:9d:35:c8:24:01:82:a3:58:8a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=481c066b-d23f-4414-b446-005cc1d5b46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6a:b2:d3:3c:bb:91:5a:35:60:69:56:1c:98:
11:bb:6f:67:ef:53:81:0e:ea:fc:8d:50:d7:f1:a6:
6b:12:7a:6b:d4:59:9f:f0:b9:ee:78:f1:00:00:96:
e8:29:23:7a:e6:c3:06:8e:9c:d7:b4:88:0c:5b:b0:
61:1a:32:51:b4:61:b3:56:c5:2f:92:f9:a5:d8:70:
c2:8f:19:54:83:50:b7:c7:93:42:2d:a3:0b:a0:94:
e7:93:94:ab:0a:2b:43:47:db:ca:01:4d:db:e3:07:
10:7b:09:d3:0f:d9:81:4b:59:bd:49:e4:ca:ee:0e:
81:a1:81:c6:4e:fd:82:d6:8a:86:d7:4c:fd:a7:68:
67:a6:4f:10:c0:4b:b4:94:df:09:d9:6e:aa:bf:10:
e1:e2:22:da:95:c6:8e:0b:28:5d:ac:37:40:9d:1e:
38:4d:25:f3:a2:53:97:05:29:29:01:8c:48:70:b7:
3e:70:da:d4:63:99:6b:69:05:a9:bb:d6:d3:6b:41:
2c:83:ba:e5:e0:c0:71:ef:4c:41:a9:80:82:50:9a:
e3:20:36:46:36:2d:b8:c7:f8:a5:bc:e9:28:b1:72:
a6:42:40:11:fa:d7:e1:1d:08:9a:22:76:47:9f:fa:
cd:25:1b:f0:d3:0b:67:84:86:51:c2:af:ff:3b:f8:
44:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:61:45:8B:E5:9F:12:14:F2:AE:E1:81:BE:51:23:5D:68:E2:4F:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb4cd200-c945-31be-a996-1b61b385984c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.238.58.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:6a:c4:a4:ae:12:bb:22:98:38:a2:ff:6a:16:2c:21:cc:6a:
5e:44:76:2f:2e:6c:f1:f8:d3:a1:fe:96:25:73:90:b3:89:15:
47:08:58:e9:3c:96:a4:bd:7f:a3:ad:0f:f0:8f:a0:96:88:32:
34:b6:b4:a7:c3:55:8c:44:88:83:29:2c:99:63:5b:38:40:60:
77:04:c5:15:06:5e:4f:d6:49:e7:38:40:e4:96:5d:11:f0:3c:
2f:c6:51:a0:cd:62:30:00:56:1b:45:c7:9f:92:67:ca:a5:81:
a8:e4:af:b4:f1:e4:7a:6b:1f:df:48:8f:53:9c:92:85:c7:a1:
b0:c6:fe:e8:88:fc:a7:f0:b2:70:c3:24:51:18:86:3e:e5:e1:
8c:51:b4:bd:0d:96:14:20:87:ac:eb:8d:53:80:de:55:f1:bf:
0c:d4:c0:99:45:af:b0:c0:42:a0:20:6a:64:f0:1d:0b:04:00:
e6:e7:7a:3b:ec:ed:d1:f6:0a:13:c3:d7:8a:3a:01:bf:f6:64:
d9:fe:df:fc:d3:0d:30:33:60:19:90:dd:f0:fb:b8:29:57:3a:
d6:c4:4c:e8:6d:5b:85:3c:ae:75:60:52:76:4b:0a:d9:7e:5b:
58:c3:37:31:2d:f5:c9:83:84:76:11:d8:54:2a:6e:d7:a9:b3:
24:15:05:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOp01yCQBgqNYirAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
NDgxYzA2NmItZDIzZi00NDE0LWI0NDYtMDA1Y2MxZDViNDZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWqy0zy7kVo1YGlWHJgRu29n71OBDur8jVDX
8aZrEnpr1Fmf8LnuePEAAJboKSN65sMGjpzXtIgMW7BhGjJRtGGzVsUvkvml2HDC
jxlUg1C3x5NCLaMLoJTnk5SrCitDR9vKAU3b4wcQewnTD9mBS1m9SeTK7g6BoYHG
Tv2C1oqG10z9p2hnpk8QwEu0lN8J2W6qvxDh4iLalcaOCyhdrDdAnR44TSXzolOX
BSkpAYxIcLc+cNrUY5lraQWpu9bTa0Esg7rl4MBx70xBqYCCUJrjIDZGNi24x/il
vOkosXKmQkAR+tfhHQiaInZHn/rNJRvw0wtnhIZRwq//O/hEcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPphRYvlnxIU8q7hgb5RI11o4k8lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmI0Y2QyMDAtYzk0NS0z
MWJlLWE5OTYtMWI2MWIzODU5ODRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+46MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKNqxKSuErsimDii/2oWLCHMal5Edi8ubPH406H+liVzkLOJFUcIWOk8
lqS9f6OtD/CPoJaIMjS2tKfDVYxEiIMpLJljWzhAYHcExRUGXk/WSec4QOSWXRHw
PC/GUaDNYjAAVhtFx5+SZ8qlgajkr7Tx5HprH99Ij1OckoXHobDG/uiI/KfwsnDD
JFEYhj7l4YxRtL0NlhQgh6zrjVOA3lXxvwzUwJlFr7DAQqAgamTwHQsEAObnejvs
7dH2ChPD14o6Ab/2ZNn+3/zTDTAzYBmQ3fD7uClXOtbETOhtW4U8rnVgUnZLCtl+
W1jDNzEt9cmDhHYR2FQqbtepsyQVBY0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:18:58 2025 by rpki-client