Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e1742ff-4d69-38f8-846e-d7b85e429836.roa
File: 2e1742ff-4d69-38f8-846e-d7b85e429836.roa (raw, json)
Hash identifier: +cAL8oOzl4Sbn+LWTYJG/fRf0Pyav4Xv6VA/gQXy/h4=
Subject key identifier: E8:29:8F:7D:4B:E7:FC:57:C9:A7:5A:E8:67:52:21:F3:EC:27:CD:A2
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584845158DF429F6AD00DB3A79D2
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e1742ff-4d69-38f8-846e-d7b85e429836.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 399145
IP address blocks: 140.174.19.128/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:8d:f4:29:f6:ad:00:db:3a:79:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=d019c314-e610-45ca-85ac-b211d8ee84c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d4:0b:19:25:7a:e3:00:2b:4f:d7:56:57:b6:
fa:5b:1a:d3:2a:81:41:50:06:73:ab:b7:a7:6a:38:
eb:1a:93:b4:22:5a:b8:8b:33:7f:90:d5:dd:dc:51:
61:01:43:eb:d9:7d:a2:2b:19:a8:e0:5c:c9:45:32:
e4:0e:68:61:83:2b:df:85:27:da:e7:b3:71:56:41:
c7:4e:46:c2:fc:bf:7a:43:52:b4:d0:99:1e:73:23:
98:dd:78:28:f9:7a:8f:66:ed:13:de:51:0a:40:4b:
81:3e:0b:50:9e:85:12:5f:31:76:6d:8c:c5:4f:b3:
36:58:f4:16:4e:a3:c1:85:43:6b:6d:e3:ff:ce:07:
32:50:59:84:fa:b0:8b:1d:02:fd:a0:7d:77:6b:b3:
21:81:40:15:b4:4b:4b:9c:65:f2:a2:8c:6c:72:d1:
e0:84:f7:d3:fa:4d:53:23:79:11:82:ad:94:98:c8:
ee:7b:49:6e:8e:8c:44:3f:4e:95:05:2b:44:1d:1c:
de:d6:ba:d2:e4:28:ac:a8:be:62:f0:33:30:25:97:
c6:78:d8:c8:d4:40:3d:54:61:e5:76:85:02:f1:f2:
5f:42:a4:e6:21:6e:38:fd:88:f7:1f:e9:85:99:0a:
db:70:4f:ca:5c:6d:78:be:bd:f7:e2:7a:ac:bd:24:
1d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:29:8F:7D:4B:E7:FC:57:C9:A7:5A:E8:67:52:21:F3:EC:27:CD:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e1742ff-4d69-38f8-846e-d7b85e429836.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
140.174.19.128/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:f9:43:63:c3:83:31:e4:31:5a:a9:de:2e:8f:3d:88:a9:3c:
19:33:f0:7c:24:f3:9a:33:c2:94:9d:ff:b8:01:a2:1e:bd:d5:
26:9f:b8:1d:b5:68:e9:5e:84:72:8a:59:12:5a:0f:f0:7f:0a:
18:ab:f0:fb:e5:f5:73:44:3b:05:c8:d8:13:6c:d3:3f:c7:7e:
91:61:a6:87:63:11:f5:1f:6e:0a:59:e3:2d:62:65:34:cc:02:
78:67:d9:49:b5:60:15:77:7c:33:22:8c:78:d2:89:80:42:f7:
39:ee:8b:43:4f:c5:73:2d:80:cc:dd:36:76:34:63:5b:df:10:
63:8e:d8:6f:8f:48:1d:e7:b7:5b:9c:fb:0f:7e:f3:c2:58:a1:
dd:51:a1:93:9e:2c:6b:f2:d2:cf:1e:a2:b6:71:95:29:ee:39:
1c:81:61:46:7f:b1:3e:87:6b:db:55:e5:a5:a8:d2:79:71:4b:
59:b6:0f:c1:28:10:c6:9a:1e:ca:c9:91:4f:05:95:28:1e:bf:
bc:94:da:b4:90:e9:f7:80:ca:a5:84:9c:4b:0c:58:1d:da:14:
68:c8:59:18:ad:14:70:63:a3:da:ae:72:9d:47:6f:ba:fe:89:
d6:9d:52:04:d4:51:b9:dc:a8:17:81:7d:c5:f6:d0:4d:d8:75:
a2:00:f0:3b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhFFY30KfatANs6edIwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk
ZDAxOWMzMTQtZTYxMC00NWNhLTg1YWMtYjIxMWQ4ZWU4NGM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtQLGSV64wArT9dWV7b6WxrTKoFBUAZzq7en
ajjrGpO0Ilq4izN/kNXd3FFhAUPr2X2iKxmo4FzJRTLkDmhhgyvfhSfa57NxVkHH
TkbC/L96Q1K00JkecyOY3Xgo+XqPZu0T3lEKQEuBPgtQnoUSXzF2bYzFT7M2WPQW
TqPBhUNrbeP/zgcyUFmE+rCLHQL9oH13a7MhgUAVtEtLnGXyooxsctHghPfT+k1T
I3kRgq2UmMjue0lujoxEP06VBStEHRze1rrS5CisqL5i8DMwJZfGeNjI1EA9VGHl
doUC8fJfQqTmIW44/Yj3H+mFmQrbcE/KXG14vr334nqsvSQdgwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOgpj31L5/xXyada6GdSIfPsJ82iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMmUxNzQyZmYtNGQ2OS0z
OGY4LTg0NmUtZDdiODVlNDI5ODM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHjK4TgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC3+UNjw4Mx5DFaqd4ujz2IqTwZM/B8JPOaM8KUnf+4AaIevdUmn7gd
tWjpXoRyilkSWg/wfwoYq/D75fVzRDsFyNgTbNM/x36RYaaHYxH1H24KWeMtYmU0
zAJ4Z9lJtWAVd3wzIox40omAQvc57otDT8VzLYDM3TZ2NGNb3xBjjthvj0gd57db
nPsPfvPCWKHdUaGTnixr8tLPHqK2cZUp7jkcgWFGf7E+h2vbVeWlqNJ5cUtZtg/B
KBDGmh7KyZFPBZUoHr+8lNq0kOn3gMqlhJxLDFgd2hRoyFkYrRRwY6ParnKdR2+6
/onWnVIE1FG53KgXgX3F9tBN2HWiAPA7
-----END CERTIFICATE-----
Generated at Fri May 9 00:14:48 2025 by rpki-client