Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/60000e37-b527-3189-9379-65c88001b757.roa
File: 60000e37-b527-3189-9379-65c88001b757.roa (raw, json)
Hash identifier: aKhQXGSe7idJTbwhtslTLaL2cMhLePOtXh+CYDr7/Q4=
Subject key identifier: A3:24:87:33:33:4E:C9:56:92:14:63:FB:3C:5C:67:62:CA:27:88:5F
Certificate issuer: /CN=9d91b72c-b83a-431c-9cfd-60b797f3113e
Certificate serial: 010D0C9F432858480214FF0C64E2188B46907940
Authority key identifier: 3E:33:66:FA:1A:C0:9D:08:AF:D5:EC:72:B5:D7:FB:24:CC:B6:A9:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/60000e37-b527-3189-9379-65c88001b757.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 32097
IP address blocks: 69.30.192.0/18 maxlen: 24
69.197.128.0/18 maxlen: 24
173.208.128.0/17 maxlen: 24
204.12.192.0/18 maxlen: 24
208.110.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:14:ff:0c:64:e2:18:8b:46:90:79:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d91b72c-b83a-431c-9cfd-60b797f3113e
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=cd3e110a-107a-4180-a2f9-15e4aa9f8c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:90:e4:06:59:e5:40:7c:44:7f:1d:af:08:55:
a8:04:64:f3:34:d3:8b:2b:9e:4c:98:cc:1b:6d:f8:
63:7c:32:88:40:1d:d6:83:94:ef:cb:9f:1c:37:1c:
60:f2:be:b2:e5:70:3b:18:a3:78:7b:b7:39:cc:0d:
3c:1a:32:4e:29:83:3f:e5:5b:8c:80:3a:15:4f:17:
61:e8:6b:a6:76:af:93:8d:84:a2:8c:26:63:51:da:
6b:f5:3c:3c:64:b6:20:51:55:8b:21:61:0e:9d:54:
dd:98:6a:c5:9e:e5:dc:d9:17:19:1a:ac:8e:df:44:
07:11:25:fa:23:9c:5a:9b:45:a1:60:6c:0b:41:f9:
fb:6b:7d:99:26:f1:55:a2:06:5e:3f:f4:9d:30:d5:
aa:7d:57:88:85:d3:e2:f2:b3:b7:5b:6e:68:b9:cc:
fb:8f:43:fa:b9:7d:a1:7a:f4:60:95:f0:9a:a7:88:
6d:bf:ae:59:05:81:30:e4:99:2a:ba:75:38:6a:69:
10:71:01:80:12:a8:bf:67:96:85:40:9f:f0:4f:29:
70:d8:4c:24:2f:a4:60:cc:04:cd:9d:1b:f2:23:35:
02:db:10:3b:41:58:01:22:af:87:b3:be:af:d5:f7:
3a:60:f2:45:f8:fc:c7:58:ac:f4:90:23:a5:62:0c:
ce:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:24:87:33:33:4E:C9:56:92:14:63:FB:3C:5C:67:62:CA:27:88:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/60000e37-b527-3189-9379-65c88001b757.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/9d91b72c-b83a-431c-9cfd-60b797f3113e.crl
X509v3 Authority Key Identifier:
keyid:3E:33:66:FA:1A:C0:9D:08:AF:D5:EC:72:B5:D7:FB:24:CC:B6:A9:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer
sbgp-ipAddrBlock: critical
IPv4:
69.30.192.0/18
69.197.128.0/18
173.208.128.0/17
204.12.192.0/18
208.110.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:04:0f:87:be:22:f2:9d:2a:ea:d4:57:16:67:b3:b9:4e:64:
b1:50:2e:b4:ea:9c:c7:98:bb:eb:dc:99:a7:4a:f8:79:4d:f5:
7f:41:fc:87:14:e2:0c:15:9a:f6:c3:57:7f:36:e7:65:b4:ed:
df:83:b4:7f:d5:00:4d:16:71:ab:75:4d:bc:d3:ce:8b:91:a2:
76:46:1a:cf:dd:b0:04:d1:d1:ed:b8:db:bf:de:93:ab:b4:6e:
64:87:a1:e8:2d:f2:de:bd:7b:72:16:e0:ea:b5:f5:9a:1d:be:
07:b2:86:02:f2:61:d9:e6:ff:5a:f5:bd:ab:c7:6c:30:9a:dc:
46:2f:cb:07:fd:65:49:8c:28:e7:4a:e1:7f:e0:38:e0:0c:a5:
48:98:89:d8:28:b7:02:92:08:8a:04:8c:44:9c:22:27:a8:1c:
12:21:c8:cf:7a:a6:1d:b6:9c:0f:56:17:7a:d1:23:fe:ea:ce:
d5:e2:24:79:9c:b3:51:d3:7b:d7:b6:92:23:09:93:91:f0:53:
ca:19:2f:2e:41:7b:f3:b4:c2:cc:33:62:8d:e5:57:03:f0:7b:
27:56:57:4a:89:59:15:3b:6b:72:47:c8:7b:d5:7b:4d:c5:84:
db:a9:92:01:b7:79:30:ca:0d:7b:9e:ad:cf:b6:aa:8a:da:3a:
61:65:41:b2
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEgCFP8MZOIYi0aQeUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWQ5MWI3MmMtYjgzYS00MzFjLTljZmQtNjBiNzk3ZjMx
MTNlMB4XDTI0MTEyNjE0MDAzOVoXDTI1MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk
Y2QzZTExMGEtMTA3YS00MTgwLWEyZjktMTVlNGFhOWY4YzgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJDkBlnlQHxEfx2vCFWoBGTzNNOLK55MmMwb
bfhjfDKIQB3Wg5Tvy58cNxxg8r6y5XA7GKN4e7c5zA08GjJOKYM/5VuMgDoVTxdh
6Gumdq+TjYSijCZjUdpr9Tw8ZLYgUVWLIWEOnVTdmGrFnuXc2RcZGqyO30QHESX6
I5xam0WhYGwLQfn7a32ZJvFVogZeP/SdMNWqfVeIhdPi8rO3W25oucz7j0P6uX2h
evRglfCap4htv65ZBYEw5JkqunU4amkQcQGAEqi/Z5aFQJ/wTylw2EwkL6RgzATN
nRvyIzUC2xA7QVgBIq+Hs76v1fc6YPJF+PzHWKz0kCOlYgzODQIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFKMkhzMzTslWkhRj+zxcZ2LKJ4hfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZDkx
YjcyYy1iODNhLTQzMWMtOWNmZC02MGI3OTdmMzExM2UvNjAwMDBlMzctYjUyNy0z
MTg5LTkzNzktNjVjODgwMDFiNzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWQ5MWI3MmMtYjgzYS00MzFjLTlj
ZmQtNjBiNzk3ZjMxMTNlLzlkOTFiNzJjLWI4M2EtNDMxYy05Y2ZkLTYwYjc5N2Yz
MTEzZS5jcmwwHwYDVR0jBBgwFoAUPjNm+hrAnQiv1exytdf7JMy2qUkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZDkxYjcyYy1iODNhLTQzMWMtOWNmZC02MGI3
OTdmMzExM2UuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQGRR7AAwQG
RcWAAwQHrdCAAwQGzAzAAwQF0G5AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIAED4e+IvKdKurUVxZns7lO
ZLFQLrTqnMeYu+vcmadK+HlN9X9B/IcU4gwVmvbDV38252W07d+DtH/VAE0Wcat1
TbzTzouRonZGGs/dsATR0e2427/ek6u0bmSHoegt8t69e3IW4Oq19ZodvgeyhgLy
Ydnm/1r1vavHbDCa3EYvywf9ZUmMKOdK4X/gOOAMpUiYidgotwKSCIoEjEScIieo
HBIhyM96ph22nA9WF3rRI/7qztXiJHmcs1HTe9e2kiMJk5HwU8oZLy5Be/O0wswz
Yo3lVwPweydWV0qJWRU7a3JHyHvVe03FhNupkgG3eTDKDXuerc+2qoraOmFlQbI=
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:11:54 2025 by rpki-client