Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8da98e5f-2213-3af7-9305-6228e9005054.roa
File: 8da98e5f-2213-3af7-9305-6228e9005054.roa (raw, json)
Hash identifier: ouVu+VTaWtFE8r9/rlb1TAQwyXRfzjyCDb2dfRCVmnQ=
Subject key identifier: 73:8A:4B:49:25:68:64:0C:20:E7:09:5E:1D:27:D5:7C:51:00:B0:58
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584839EABEB9374A322C2FAD4100
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8da98e5f-2213-3af7-9305-6228e9005054.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 2914
IP address blocks: 165.254.119.64/27 maxlen: 27
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:be:b9:37:4a:32:2c:2f:ad:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=cf1cbe4c-0e95-4ac5-8172-81c67c15b223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0b:63:07:ea:19:00:2d:17:0f:9d:bf:12:84:
b7:e5:7f:38:54:65:78:45:15:96:fa:8e:fb:2e:2b:
a0:f5:bb:44:85:ab:86:3e:f4:3f:61:be:21:e2:8c:
53:1f:37:2c:c8:0b:af:a6:1d:0b:e9:89:b6:9d:fc:
64:5f:e3:b2:5b:76:b1:87:90:bb:b9:ee:e6:8b:cd:
9c:79:a4:d7:97:1c:b9:ad:f1:e1:bc:93:92:c3:6e:
c7:9f:3b:4d:cd:c1:76:94:1b:19:2c:1e:c0:de:73:
12:7d:49:66:3d:f4:32:86:67:46:fa:36:e7:26:30:
3f:a0:be:85:1a:2a:77:c6:0f:6b:20:d5:b7:5a:38:
a9:1d:c7:cd:0f:34:a6:2d:fb:14:4e:47:da:4f:39:
52:ca:bb:15:0c:99:12:88:e5:1b:45:c7:8b:49:c3:
8b:19:c5:b5:64:4e:11:42:39:ff:9f:f8:4e:9b:37:
2b:3d:df:25:17:6a:64:6e:27:b3:c5:ac:26:00:41:
82:32:04:c9:aa:be:e2:4c:a7:a4:5b:2e:21:b5:d5:
51:ce:ec:9f:11:df:05:be:90:bd:84:51:69:b7:7b:
c0:fa:0e:e9:da:3b:ae:4e:1c:a1:d0:c8:8f:c1:1c:
e3:22:4e:1a:e3:08:86:df:9e:5c:1f:56:a9:7c:eb:
bd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8A:4B:49:25:68:64:0C:20:E7:09:5E:1D:27:D5:7C:51:00:B0:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8da98e5f-2213-3af7-9305-6228e9005054.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
165.254.119.64/27
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:6e:7a:01:f4:35:3a:f9:10:c1:10:4a:a6:62:42:58:e5:80:
c2:42:19:37:a2:37:57:6c:37:3c:59:f7:0b:3c:28:99:ab:cb:
93:9b:8c:58:6c:6f:97:e8:71:53:e9:c3:bc:55:12:4c:a0:e3:
da:fe:7a:8f:46:12:c2:91:e5:b4:68:68:b0:df:ea:fc:f8:30:
98:28:d5:b4:28:d2:0e:1e:13:15:ff:e7:ed:76:d4:d4:fa:9e:
c9:82:1e:59:a2:c3:74:1d:de:0d:f3:a6:2c:42:f6:4f:e1:9b:
15:df:2c:49:08:fd:79:cc:bd:31:25:aa:ac:55:65:dc:d8:68:
db:41:36:39:36:ff:a3:38:de:e6:4e:f4:bc:f7:61:a2:a7:79:
2e:39:c2:62:0d:42:49:36:4d:5b:51:8a:8a:b2:93:ce:84:5a:
0f:c5:bf:97:01:19:d9:f1:fa:c6:34:ce:40:75:2c:d1:61:65:
e2:a1:3f:27:91:7d:f3:d0:33:fb:b3:cb:03:1c:a4:91:a0:c3:
4f:92:2c:74:0f:94:65:e2:8a:e6:3d:2a:a6:0d:ef:c8:f5:f7:
39:ae:80:32:54:6d:70:78:f8:bf:8c:1b:f7:df:04:be:68:28:
6e:f8:32:78:00:9c:ee:d5:e8:af:45:c9:15:ca:fe:1b:cc:09:
2a:8e:98:4f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEg56r65N0oyLC+tQQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI0MTIxNjE0MDA1MVoXDTI1MDMxNjEzMDA1MVowLzEtMCsGA1UEAxMk
Y2YxY2JlNGMtMGU5NS00YWM1LTgxNzItODFjNjdjMTViMjIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAtjB+oZAC0XD52/EoS35X84VGV4RRWW+o77
Liug9btEhauGPvQ/Yb4h4oxTHzcsyAuvph0L6Ym2nfxkX+OyW3axh5C7ue7mi82c
eaTXlxy5rfHhvJOSw27HnztNzcF2lBsZLB7A3nMSfUlmPfQyhmdG+jbnJjA/oL6F
Gip3xg9rINW3WjipHcfNDzSmLfsUTkfaTzlSyrsVDJkSiOUbRceLScOLGcW1ZE4R
Qjn/n/hOmzcrPd8lF2pkbiezxawmAEGCMgTJqr7iTKekWy4htdVRzuyfEd8FvpC9
hFFpt3vA+g7p2juuThyh0MiPwRzjIk4a4wiG355cH1apfOu9MwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHOKS0klaGQMIOcJXh0n1XxRALBYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOGRhOThlNWYtMjIxMy0z
YWY3LTkzMDUtNjIyOGU5MDA1MDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFpf53QDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCfbnoB9DU6+RDBEEqmYkJY5YDCQhk3ojdXbDc8WfcLPCiZq8uTm4xY
bG+X6HFT6cO8VRJMoOPa/nqPRhLCkeW0aGiw3+r8+DCYKNW0KNIOHhMV/+ftdtTU
+p7Jgh5ZosN0Hd4N86YsQvZP4ZsV3yxJCP15zL0xJaqsVWXc2GjbQTY5Nv+jON7m
TvS892Gip3kuOcJiDUJJNk1bUYqKspPOhFoPxb+XARnZ8frGNM5AdSzRYWXioT8n
kX3z0DP7s8sDHKSRoMNPkix0D5Rl4ormPSqmDe/I9fc5roAyVG1wePi/jBv33wS+
aChu+DJ4AJzu1eivRckVyv4bzAkqjphP
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:53:55 2025 by rpki-client