Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e63e2735-5918-38c0-a271-b423b4e6bfe2.roa
File: e63e2735-5918-38c0-a271-b423b4e6bfe2.roa (raw, json)
Hash identifier: jBUP0waYJSRvdblfZtdNufw43jvz9X14etxJ3wlWDkg=
Subject key identifier: 6A:58:44:B3:D8:66:99:30:D7:84:1E:12:C9:78:1A:BF:71:48:B1:67
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C103BBD2780D04AAE988580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e63e2735-5918-38c0-a271-b423b4e6bfe2.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33660
IP address blocks: 24.11.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:3b:bd:27:80:d0:4a:ae:98:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=a9244397-a44e-4fbc-8a03-4d1d8ebd5f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8e:7b:7a:a1:f2:88:18:96:09:a0:ea:c9:07:
18:4a:3c:fd:fa:3b:11:0f:16:09:be:c0:6b:7a:ef:
bd:12:79:47:8c:53:a9:a8:36:b4:38:97:e6:65:ba:
8d:08:13:f6:7e:64:01:a2:ff:50:d9:bd:b4:b9:d9:
41:d8:98:ea:70:83:e8:9a:78:cb:61:df:81:8b:97:
74:0d:98:5b:0f:75:92:c6:5b:b5:1d:2c:1a:70:77:
f5:c9:55:d3:29:cc:1e:c9:33:99:36:92:ac:ae:17:
60:f4:60:69:0f:60:76:0c:8d:b1:ed:f9:c3:d4:a1:
d8:3c:a0:30:08:95:5b:53:44:c1:2d:70:37:c3:cb:
a6:53:46:5f:0f:dd:ff:4a:9c:fa:78:32:2c:e4:f5:
bc:78:f5:3a:9f:f9:11:73:ad:09:29:f5:30:fd:77:
83:b9:6f:a6:48:8c:76:96:65:25:31:c0:ef:1c:af:
34:27:56:5a:e3:89:67:46:48:a4:fe:23:1f:04:1a:
71:ab:98:95:07:2e:51:d5:39:97:eb:9b:21:ff:65:
91:1f:7d:e0:4b:3a:7f:1c:ad:82:67:88:bd:70:6a:
bd:85:19:28:89:95:3a:10:a4:8d:f4:f0:02:a2:47:
d9:07:16:10:f4:2d:e2:fd:39:80:8b:7f:1e:21:51:
29:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:58:44:B3:D8:66:99:30:D7:84:1E:12:C9:78:1A:BF:71:48:B1:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e63e2735-5918-38c0-a271-b423b4e6bfe2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.11.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:92:0f:fc:df:d5:da:3b:75:5d:1e:62:5b:83:ba:92:26:8c:
90:1b:ef:0b:39:42:4b:9f:9f:26:f3:a2:66:78:93:94:42:59:
c6:bd:fe:99:65:ab:b7:36:37:65:24:38:fa:f2:40:98:2b:6f:
de:94:2f:03:b3:ba:6b:a8:8b:2f:18:0d:5a:e8:47:66:95:d1:
fa:1b:10:47:20:ca:b9:8c:e8:a5:ac:6f:35:77:a3:13:70:4e:
5f:5c:77:6c:84:27:91:ff:71:05:30:46:30:15:85:8a:a5:3e:
e2:4a:cb:3c:65:d6:f7:84:b4:ff:5d:b1:22:93:ca:db:fe:d6:
aa:7d:71:af:ef:48:ed:68:77:38:74:9b:af:08:86:a5:64:22:
29:71:8b:cc:a1:2c:f9:0c:0b:aa:40:dc:0a:92:16:e9:cc:89:
13:a4:92:40:8a:b3:79:ed:66:75:fd:f5:87:e7:c4:e6:9b:c0:
e6:e7:d1:c7:d9:9f:d6:cb:a0:f2:77:d5:ba:6d:9a:11:5a:2f:
16:a8:1d:9d:ad:64:06:d5:f1:a5:2d:b2:8b:7d:5f:c4:d5:82:
5e:0f:1a:d7:07:4f:73:23:62:0e:23:c0:a6:af:82:05:10:09:
bc:9e:60:bd:27:67:5b:14:ce:e6:91:0a:12:4f:5e:61:49:aa:
6f:3c:12:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEDu9J4DQSq6YhYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
YTkyNDQzOTctYTQ0ZS00ZmJjLThhMDMtNGQxZDhlYmQ1ZjY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY57eqHyiBiWCaDqyQcYSjz9+jsRDxYJvsBr
eu+9EnlHjFOpqDa0OJfmZbqNCBP2fmQBov9Q2b20udlB2JjqcIPomnjLYd+Bi5d0
DZhbD3WSxlu1HSwacHf1yVXTKcweyTOZNpKsrhdg9GBpD2B2DI2x7fnD1KHYPKAw
CJVbU0TBLXA3w8umU0ZfD93/Spz6eDIs5PW8ePU6n/kRc60JKfUw/XeDuW+mSIx2
lmUlMcDvHK80J1Za44lnRkik/iMfBBpxq5iVBy5R1TmX65sh/2WRH33gSzp/HK2C
Z4i9cGq9hRkoiZU6EKSN9PACokfZBxYQ9C3i/TmAi38eIVEpBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGpYRLPYZpkw14QeEsl4Gr9xSLFnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTYzZTI3MzUtNTkxOC0z
OGMwLWEyNzEtYjQyM2I0ZTZiZmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGAsgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHaSD/zf1do7dV0eYluDupImjJAb7ws5QkufnybzomZ4k5RCWca9/pll
q7c2N2UkOPryQJgrb96ULwOzumuoiy8YDVroR2aV0fobEEcgyrmM6KWsbzV3oxNw
Tl9cd2yEJ5H/cQUwRjAVhYqlPuJKyzxl1veEtP9dsSKTytv+1qp9ca/vSO1odzh0
m68IhqVkIilxi8yhLPkMC6pA3AqSFunMiROkkkCKs3ntZnX99YfnxOabwObn0cfZ
n9bLoPJ31bptmhFaLxaoHZ2tZAbV8aUtsot9X8TVgl4PGtcHT3MjYg4jwKavggUQ
CbyeYL0nZ1sUzuaRChJPXmFJqm88Evk=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:39:40 2025 by rpki-client