Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c67a3d71-f749-3410-b917-3b421b025a3c.roa
File: c67a3d71-f749-3410-b917-3b421b025a3c.roa (raw, json)
Hash identifier: C7/DukCYeeu3lkqR1j6q4+HBh/YUlLdDiNafaJCKjok=
Subject key identifier: CB:ED:57:97:19:C3:68:FD:42:DA:08:02:0D:7C:A8:CE:D3:59:EC:2E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143AE0ED19EE4E147DBACB60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c67a3d71-f749-3410-b917-3b421b025a3c.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 71.232.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:e0:ed:19:ee:4e:14:7d:ba:cb:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=68d577c9-1a43-45c5-8b94-27320d9d02cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:dd:2a:96:6b:cf:bc:bf:de:cb:3b:21:ab:
af:5b:8b:20:b0:c9:47:8a:88:7b:94:fc:9d:6f:9e:
bd:de:88:76:f5:5a:b7:db:98:c4:02:2d:d1:c6:60:
6d:7e:ea:d7:34:b6:7a:ea:dd:73:93:2e:17:ff:60:
8c:d1:18:46:71:e1:98:5f:69:fa:f5:68:ab:c6:50:
cf:aa:dd:7e:b2:20:dc:d4:65:c2:53:57:dc:86:68:
a0:85:f0:1f:8e:56:4f:9f:30:81:1e:26:1d:fd:33:
f0:91:c9:f7:1f:cd:5e:88:b5:22:0a:73:88:dd:f3:
32:43:7a:88:a7:73:cd:43:c1:e4:3b:44:87:c1:e7:
89:41:e1:88:60:1f:79:72:83:f6:7b:81:05:35:0e:
b0:2c:5c:4a:c0:6c:c8:ca:86:c6:81:cb:89:8f:cd:
8f:0f:f0:91:4f:52:7c:7d:6e:7d:3d:f2:91:9c:c0:
ec:e1:43:0f:18:97:92:72:93:a8:70:60:60:d0:00:
f1:a3:6b:d3:33:a1:46:ff:1a:60:5c:b0:33:a6:bd:
11:71:bf:2f:9d:39:79:62:6f:62:f8:4c:cb:05:18:
a8:4a:4c:7b:42:d9:5d:0e:d3:8a:f5:30:0c:d6:13:
82:09:3b:f3:30:69:94:2f:16:74:9a:6b:6c:85:a7:
e7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:ED:57:97:19:C3:68:FD:42:DA:08:02:0D:7C:A8:CE:D3:59:EC:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c67a3d71-f749-3410-b917-3b421b025a3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.232.244.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:7c:2c:86:3d:a3:90:6a:66:f3:0a:eb:24:df:26:c3:c1:11:
78:bd:80:26:d8:92:93:43:ab:35:81:11:b6:7a:66:67:ba:6b:
85:35:da:d4:37:d4:e2:12:2b:85:e8:dc:ff:46:37:bf:ef:f6:
e3:19:e4:5a:64:e1:f0:01:3e:e3:e6:41:3a:eb:7a:e5:6b:77:
56:29:3c:7b:a2:28:03:00:a8:e5:4d:a8:44:02:8b:ef:c2:b3:
1d:dd:ad:0b:f6:c9:86:2e:c7:cc:ac:c1:b6:3c:a6:ba:3d:0f:
89:39:46:a0:82:4e:f8:2f:77:bd:77:de:8b:b0:2d:52:d2:fe:
6c:a2:31:ea:84:9a:48:f5:b2:5b:a4:bd:a4:d1:f0:4f:39:e7:
7d:11:2f:56:24:14:8c:8b:cb:52:37:dc:bc:d9:66:a8:ee:f8:
e6:6a:40:30:88:14:86:e6:09:d1:80:6c:53:49:65:3d:76:63:
81:2d:ff:9c:7e:9c:6a:d9:de:95:61:cd:b1:cd:ec:5b:72:62:
4c:0e:94:90:5b:ca:e6:a5:4b:79:ff:a8:36:8a:eb:b7:1d:59:
13:3e:3b:6f:66:3c:45:13:34:58:b7:3c:e9:ea:21:cc:3b:83:
8e:80:45:a1:3c:6d:69:56:e1:e8:17:84:d6:63:89:bd:fe:0d:
e0:35:8b:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOuDtGe5OFH26y2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
NjhkNTc3YzktMWE0My00NWM1LThiOTQtMjczMjBkOWQwMmNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEvdKpZrz7y/3ss7IauvW4sgsMlHioh7lPyd
b5693oh29Vq325jEAi3RxmBtfurXNLZ66t1zky4X/2CM0RhGceGYX2n69WirxlDP
qt1+siDc1GXCU1fchmighfAfjlZPnzCBHiYd/TPwkcn3H81eiLUiCnOI3fMyQ3qI
p3PNQ8HkO0SHweeJQeGIYB95coP2e4EFNQ6wLFxKwGzIyobGgcuJj82PD/CRT1J8
fW59PfKRnMDs4UMPGJeScpOocGBg0ADxo2vTM6FG/xpgXLAzpr0Rcb8vnTl5Ym9i
+EzLBRioSkx7QtldDtOK9TAM1hOCCTvzMGmULxZ0mmtshafnBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMvtV5cZw2j9QtoIAg18qM7TWewuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzY3YTNkNzEtZjc0OS0z
NDEwLWI5MTctM2I0MjFiMDI1YTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+j0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFt8LIY9o5BqZvMK6yTfJsPBEXi9gCbYkpNDqzWBEbZ6Zme6a4U12tQ3
1OISK4Xo3P9GN7/v9uMZ5Fpk4fABPuPmQTrreuVrd1YpPHuiKAMAqOVNqEQCi+/C
sx3drQv2yYYux8yswbY8pro9D4k5RqCCTvgvd7133ouwLVLS/myiMeqEmkj1sluk
vaTR8E85530RL1YkFIyLy1I33LzZZqju+OZqQDCIFIbmCdGAbFNJZT12Y4Et/5x+
nGrZ3pVhzbHN7FtyYkwOlJBbyualS3n/qDaK67cdWRM+O29mPEUTNFi3POnqIcw7
g46ARaE8bWlW4egXhNZjib3+DeA1i2Y=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:44:28 2025 by rpki-client