Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb2c1953-f5b1-3b76-84d6-2111c5537906.roa
File: fb2c1953-f5b1-3b76-84d6-2111c5537906.roa (raw, json)
Hash identifier: lMd0CGtk+ZBlrFgUNpeHxRI8dD3PuQiG8O0a9fvygG8=
Subject key identifier: 2A:BC:16:EA:45:92:7D:B5:DD:DF:A3:82:93:63:2E:D7:8E:CE:75:B5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10D9240AB425D1149003C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb2c1953-f5b1-3b76-84d6-2111c5537906.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 67.186.88.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:d9:24:0a:b4:25:d1:14:90:03:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=e92e9394-e007-4f09-bf79-944236045eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f6:a2:0c:55:84:c6:e7:ce:34:4a:92:02:90:
dd:7a:d4:04:ae:af:be:9b:46:8e:6b:ab:a1:3c:2a:
b0:a2:7a:85:b7:ab:5b:41:c2:b5:ef:fc:9f:92:e4:
60:9d:9b:e7:c8:35:53:63:90:41:f6:9d:8b:c5:0a:
ab:af:de:20:0b:48:a9:0e:18:74:3b:90:e2:fb:8a:
c7:9d:e7:37:b6:5b:c2:c9:54:f5:cb:45:da:31:22:
d9:f8:f7:5a:48:96:c8:5d:03:f5:75:9b:09:b2:cc:
20:6d:b4:05:7d:1f:66:55:6b:8f:80:64:50:0a:53:
7c:d7:74:f7:1b:cc:d4:0f:8a:53:bc:f2:0b:5b:2b:
c6:f5:6e:70:ec:33:f7:b9:eb:cd:44:19:ec:92:37:
e1:03:69:1e:1d:87:c4:c6:a7:bc:25:0b:12:55:b6:
64:6a:6c:7b:1c:40:0c:eb:b2:35:36:0d:0d:44:82:
b2:52:ea:b9:1d:9f:72:6e:fe:8e:00:45:11:33:ee:
a3:44:36:03:bc:d0:9c:86:df:38:c0:38:b0:5e:0e:
0b:35:e8:43:03:5a:c4:f1:57:9d:0f:61:d0:38:d6:
3d:74:e7:c1:bd:ec:1e:4e:88:b9:88:72:ee:4a:47:
74:32:4f:af:15:dd:d6:44:93:8f:d8:e8:9b:9b:e1:
9a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BC:16:EA:45:92:7D:B5:DD:DF:A3:82:93:63:2E:D7:8E:CE:75:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb2c1953-f5b1-3b76-84d6-2111c5537906.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.186.88.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:c8:f1:5a:95:af:ce:14:2c:2c:ff:fb:24:93:87:cb:76:24:
b4:da:be:b5:72:fb:46:86:c6:b4:44:e0:89:4d:42:5e:ee:98:
bb:a8:e3:67:0c:dd:e7:42:ef:d5:83:5a:4b:94:70:76:7e:6a:
c6:4c:81:2c:df:4d:0a:b8:6e:2f:dc:e8:21:90:7b:5b:c8:57:
a7:dc:d8:56:65:ef:3a:20:e2:66:3c:59:c3:78:9c:27:b7:85:
35:39:ca:28:76:ef:81:32:88:f2:5b:71:96:c0:d5:ea:6e:ea:
36:4b:77:c1:40:e8:8f:d2:85:e5:02:7c:d9:68:ab:ae:5d:7b:
6d:ca:71:88:b5:94:e3:19:21:c9:5a:0b:72:2c:84:2f:a8:be:
e3:3a:c3:53:ad:ce:9d:27:39:bc:3d:67:e0:eb:16:35:99:2f:
78:f4:13:17:bc:e1:d8:a1:32:ca:88:db:76:f2:d0:4a:6a:7c:
47:3d:bc:6b:20:15:ef:f3:06:38:d9:26:f0:59:df:9f:e7:5f:
b9:f8:48:69:c9:57:3b:7c:dd:8a:82:be:ab:b7:ce:0f:2f:38:
fe:e2:8d:c6:59:d2:36:da:e4:92:c7:25:38:6d:75:78:a7:72:
a3:c7:50:16:ac:d2:88:63:8e:93:67:29:58:6e:a2:06:e7:69:
f1:97:f6:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMENkkCrQl0RSQA8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
ZTkyZTkzOTQtZTAwNy00ZjA5LWJmNzktOTQ0MjM2MDQ1ZWI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPaiDFWExufONEqSApDdetQErq++m0aOa6uh
PCqwonqFt6tbQcK17/yfkuRgnZvnyDVTY5BB9p2LxQqrr94gC0ipDhh0O5Di+4rH
nec3tlvCyVT1y0XaMSLZ+PdaSJbIXQP1dZsJsswgbbQFfR9mVWuPgGRQClN813T3
G8zUD4pTvPILWyvG9W5w7DP3uevNRBnskjfhA2keHYfExqe8JQsSVbZkamx7HEAM
67I1Ng0NRIKyUuq5HZ9ybv6OAEURM+6jRDYDvNCcht84wDiwXg4LNehDA1rE8Ved
D2HQONY9dOfBveweToi5iHLuSkd0Mk+vFd3WRJOP2Oibm+GaPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCq8FupFkn213d+jgpNjLteOznW1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmIyYzE5NTMtZjViMS0z
Yjc2LTg0ZDYtMjExMWM1NTM3OTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ7pYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJvI8VqVr84ULCz/+ySTh8t2JLTavrVy+0aGxrRE4IlNQl7umLuo42cM
3edC79WDWkuUcHZ+asZMgSzfTQq4bi/c6CGQe1vIV6fc2FZl7zog4mY8WcN4nCe3
hTU5yih274EyiPJbcZbA1epu6jZLd8FA6I/SheUCfNloq65de23KcYi1lOMZIcla
C3IshC+ovuM6w1Otzp0nObw9Z+DrFjWZL3j0Exe84dihMsqI23by0EpqfEc9vGsg
Fe/zBjjZJvBZ35/nX7n4SGnJVzt83YqCvqu3zg8vOP7ijcZZ0jba5JLHJThtdXin
cqPHUBas0ohjjpNnKVhuogbnafGX9vo=
-----END CERTIFICATE-----
Generated at Tue Apr 29 13:07:58 2025 by rpki-client