Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/2f128b9d-1500-3392-9a71-877eea156886.roa
File: 2f128b9d-1500-3392-9a71-877eea156886.roa (raw, json)
Hash identifier: aG0fIvf+h39NcD4BNyDC/eulE/YH3w07/1OXvqCeRpI=
Subject key identifier: 0D:99:2A:61:5E:CA:75:C8:2A:70:56:0A:4D:7F:63:A6:84:C7:C6:43
Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial: 010D0C9F432858487A2083E3DC09BD7801FC4910
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/2f128b9d-1500-3392-9a71-877eea156886.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 26496
IP address blocks: 64.13.192.0/18 maxlen: 24
64.207.128.0/18 maxlen: 24
70.32.64.0/18 maxlen: 24
72.10.32.0/19 maxlen: 24
72.47.192.0/18 maxlen: 24
205.186.128.0/18 maxlen: 24
216.70.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:83:e3:dc:09:bd:78:01:fc:49:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=0edc2d66-c735-4cff-bbe9-89c18dafa1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:59:5a:9e:b6:47:c8:ce:35:5f:97:64:98:b4:
70:be:a0:ff:ee:00:bf:13:cd:89:f6:70:3e:3b:22:
d7:00:83:4a:81:6c:cf:7c:df:37:ce:64:c2:bd:0e:
98:a5:87:26:87:89:03:fc:5d:c5:f6:23:49:a2:7b:
77:46:f0:dc:d3:a5:ac:79:af:a0:da:ff:7d:76:91:
21:d1:aa:66:13:bf:8e:50:04:d1:ed:11:f1:02:67:
7b:72:1e:bf:d7:97:a7:80:54:6d:74:5f:db:68:0e:
5c:f8:f5:6b:40:87:f7:10:ff:d3:fa:ba:8b:b2:4c:
59:cc:32:53:1a:15:d4:b9:7a:e0:70:06:ec:23:7d:
1d:90:ea:a4:b1:26:ed:a6:6f:f1:93:ce:d7:3e:9e:
00:a8:23:01:f9:b2:41:00:9e:20:04:3a:1b:16:01:
85:2c:62:d4:c4:9b:5a:f4:ec:fb:48:63:a4:87:20:
1b:0a:71:35:c5:41:9b:ae:db:91:25:22:06:84:77:
bf:b1:b5:c0:aa:49:fe:36:0e:9b:92:d1:3e:c9:9e:
ee:c6:81:67:b0:7a:85:51:71:ad:bf:ec:f9:51:06:
56:61:21:49:1d:37:bd:94:a8:68:21:9d:1c:35:21:
5f:be:e6:5a:5d:79:e4:c3:f0:07:cf:57:85:0d:2e:
4f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:99:2A:61:5E:CA:75:C8:2A:70:56:0A:4D:7F:63:A6:84:C7:C6:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/2f128b9d-1500-3392-9a71-877eea156886.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
X509v3 Authority Key Identifier:
keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
sbgp-ipAddrBlock: critical
IPv4:
64.13.192.0/18
64.207.128.0/18
70.32.64.0/18
72.10.32.0/19
72.47.192.0/18
205.186.128.0/18
216.70.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:e9:31:ea:c7:90:12:51:ef:e3:0d:00:ed:9c:49:a3:84:6f:
10:4a:50:91:e5:f8:66:4d:ca:47:af:81:63:3f:6c:56:23:56:
dd:09:03:d7:4f:9a:7b:3a:d4:97:d6:b4:a0:7d:60:98:69:c4:
27:d0:0d:7c:cd:db:7c:bc:b6:0c:ee:04:96:f6:d9:cb:8e:43:
56:8b:c8:5d:9b:34:e7:62:11:54:f4:e5:8d:89:77:15:8e:f6:
1f:27:46:f5:1b:39:28:7d:eb:a4:78:f1:e0:68:77:79:36:d6:
41:dc:98:bc:22:4f:36:1b:80:92:af:68:a0:8b:74:56:2a:bd:
1b:25:84:b4:32:49:bd:13:2c:dd:7c:a7:41:77:fc:6c:fe:b2:
98:ce:24:76:c9:86:b5:23:08:66:27:5d:35:9f:78:35:54:b7:
cf:f0:86:14:d8:22:fe:3f:97:bb:77:56:fc:5a:f6:a9:1f:29:
51:bf:d9:84:d8:ae:6f:3a:63:04:f9:2c:6a:f2:e0:8c:4c:67:
c6:67:b1:16:f3:24:f9:29:d6:8e:36:3f:a4:56:d4:ba:76:bf:
0d:12:4a:e5:62:32:4b:a4:94:b3:69:6b:13:1d:d8:87:3d:a0:
8a:85:50:74:57:3e:00:24:e9:f7:0c:57:7b:97:c5:b5:9c:be:
5d:5c:e5:51
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWEh6IIPj3Am9eAH8SRAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWVkNWNlODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4Y2Nm
MTNmMB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk
MGVkYzJkNjYtYzczNS00Y2ZmLWJiZTktODljMThkYWZhMWRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFlanrZHyM41X5dkmLRwvqD/7gC/E82J9nA+
OyLXAINKgWzPfN83zmTCvQ6YpYcmh4kD/F3F9iNJont3RvDc06Wsea+g2v99dpEh
0apmE7+OUATR7RHxAmd7ch6/15engFRtdF/baA5c+PVrQIf3EP/T+rqLskxZzDJT
GhXUuXrgcAbsI30dkOqksSbtpm/xk87XPp4AqCMB+bJBAJ4gBDobFgGFLGLUxJta
9Oz7SGOkhyAbCnE1xUGbrtuRJSIGhHe/sbXAqkn+Ng6bktE+yZ7uxoFnsHqFUXGt
v+z5UQZWYSFJHTe9lKhoIZ0cNSFfvuZaXXnkw/AHz1eFDS5PEQIDAQABo4IDeTCC
A3UwHQYDVR0OBBYEFA2ZKmFeynXIKnBWCk1/Y6aEx8ZDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1
Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZjZThjY2YxM2YvMmYxMjhiOWQtMTUwMC0z
MzkyLTlhNzEtODc3ZWVhMTU2ODg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWVkNWNlODAtMjI0ZS00NmFiLTk0
ZjEtMWFmY2U4Y2NmMTNmLzllZDVjZTgwLTIyNGUtNDZhYi05NGYxLTFhZmNlOGNj
ZjEzZi5jcmwwHwYDVR0jBBgwFoAUOB2fprp8wahErgn+WgCWnTv84Q8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZj
ZThjY2YxM2YuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQGQA3AAwQG
QM+AAwQGRiBAAwQFSAogAwQGSC/AAwQGzbqAAwQG2EZAMFQGA1UdIAEB/wRKMEgw
RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv
cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGrpMerH
kBJR7+MNAO2cSaOEbxBKUJHl+GZNykevgWM/bFYjVt0JA9dPmns61JfWtKB9YJhp
xCfQDXzN23y8tgzuBJb22cuOQ1aLyF2bNOdiEVT05Y2JdxWO9h8nRvUbOSh966R4
8eBod3k21kHcmLwiTzYbgJKvaKCLdFYqvRslhLQySb0TLN18p0F3/Gz+spjOJHbJ
hrUjCGYnXTWfeDVUt8/whhTYIv4/l7t3Vvxa9qkfKVG/2YTYrm86YwT5LGry4IxM
Z8ZnsRbzJPkp1o42P6RW1Lp2vw0SSuViMkuklLNpaxMd2Ic9oIqFUHRXPgAk6fcM
V3uXxbWcvl1c5VE=
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:28:08 2025 by rpki-client