Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f4cd94b3-ef3e-3af0-af98-bc4d402a7952.roa
File: f4cd94b3-ef3e-3af0-af98-bc4d402a7952.roa (raw, json)
Hash identifier: RiYZ4y+L1kCDam8jH4CT3mFOw2hq1fMbbfsocS5bY9U=
Subject key identifier: 41:69:F1:1F:9C:CA:25:50:B0:92:8D:8A:A0:E2:6F:17:CA:C6:7E:6E
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584839EAC967996394520F8A9800
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f4cd94b3-ef3e-3af0-af98-bc4d402a7952.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 3949
IP address blocks: 165.254.191.232/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:c9:67:99:63:94:52:0f:8a:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=c049a9d7-be30-4aa3-adfb-7f438dd12820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5b:5d:33:56:c0:68:e6:d5:b0:84:63:43:de:
8e:7d:21:20:3b:f5:9d:85:2d:2e:17:cb:78:48:43:
7c:d8:a0:6f:b5:b5:10:2a:68:5c:ba:c4:f8:44:c4:
73:68:e1:50:c2:9a:d6:6a:7e:77:f0:33:17:fc:b3:
a6:fc:53:8b:3c:dc:17:b7:66:82:27:54:ea:c6:aa:
c6:06:d4:eb:ee:d4:55:6b:4f:63:f6:97:18:c1:be:
0d:a0:da:85:51:30:bd:9e:50:b5:29:ce:3a:f5:04:
29:f9:17:56:a9:8f:b7:6a:44:68:b7:f9:5a:5d:b1:
60:92:cb:68:3a:6e:d8:e8:59:b7:2b:5f:f5:2b:c9:
ec:d7:0b:19:2e:58:b8:cf:45:90:5f:85:56:fa:26:
15:64:2b:a3:17:cc:ca:ec:b6:1b:13:ec:d3:45:ce:
d2:5c:4a:30:75:40:10:c9:0e:d4:a7:90:90:b2:28:
7f:ca:ec:ce:60:ee:ba:d0:e7:2a:05:03:c4:7e:0c:
95:59:a3:5f:aa:21:25:e2:50:50:87:07:90:97:ee:
de:e5:d5:23:cd:55:09:aa:a1:c1:8c:9a:7b:ae:68:
4e:77:99:76:df:9e:eb:50:31:54:52:02:9d:b5:88:
3c:01:af:14:ec:96:49:8a:b0:b3:c2:2c:62:32:fe:
a1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:69:F1:1F:9C:CA:25:50:B0:92:8D:8A:A0:E2:6F:17:CA:C6:7E:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f4cd94b3-ef3e-3af0-af98-bc4d402a7952.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
165.254.191.232/30
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:82:23:54:5a:d8:11:d0:93:f5:b0:72:d6:05:17:1e:37:a3:
65:fa:b5:1a:61:2b:6e:cd:67:55:87:9b:f3:41:e6:5b:ae:a2:
06:d9:98:2d:2e:fb:d4:8d:7b:cc:f2:f7:56:bb:2f:d6:95:95:
57:21:41:94:0b:fc:e1:f1:2f:72:79:34:e7:ba:ba:94:42:bc:
3e:1c:56:1d:9e:7a:fc:6a:e8:3e:ac:98:c4:0b:cf:24:10:ea:
67:7e:a3:a0:82:98:f6:74:b6:3a:aa:9a:81:c2:95:a1:70:09:
8f:4b:b6:47:c8:d0:61:76:ed:fe:35:38:ac:37:8b:f9:57:b2:
32:01:55:c5:aa:4f:03:80:83:76:75:9e:85:a1:7e:e0:d9:43:
6a:21:c1:8e:e5:1f:f7:97:52:3a:c0:ec:e0:ae:34:ba:fc:7e:
15:37:42:92:4b:f4:e2:1e:24:20:5f:df:8d:cf:45:51:93:ec:
72:45:db:ca:7f:c6:a6:f8:ec:a2:f2:a7:1f:d0:58:aa:a7:c0:
36:b8:bf:78:bd:37:85:41:aa:e5:bf:0c:a0:b4:78:56:d1:d7:
19:a0:17:4d:2f:76:7a:c3:08:1c:d7:c5:47:6b:fb:bb:48:28:
62:bc:7f:65:a4:3c:db:a5:1f:50:c7:e1:c0:86:48:e2:89:db:
be:2f:1c:29
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEg56slnmWOUUg+KmAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI0MTIxNjE0MDA1MVoXDTI1MDMxNjEzMDA1MVowLzEtMCsGA1UEAxMk
YzA0OWE5ZDctYmUzMC00YWEzLWFkZmItN2Y0MzhkZDEyODIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFtdM1bAaObVsIRjQ96OfSEgO/WdhS0uF8t4
SEN82KBvtbUQKmhcusT4RMRzaOFQwprWan538DMX/LOm/FOLPNwXt2aCJ1TqxqrG
BtTr7tRVa09j9pcYwb4NoNqFUTC9nlC1Kc469QQp+RdWqY+3akRot/laXbFgksto
Om7Y6Fm3K1/1K8ns1wsZLli4z0WQX4VW+iYVZCujF8zK7LYbE+zTRc7SXEowdUAQ
yQ7Up5CQsih/yuzOYO660OcqBQPEfgyVWaNfqiEl4lBQhweQl+7e5dUjzVUJqqHB
jJp7rmhOd5l2357rUDFUUgKdtYg8Aa8U7JZJirCzwixiMv6h5wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEFp8R+cyiVQsJKNiqDibxfKxn5uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZjRjZDk0YjMtZWYzZS0z
YWYwLWFmOTgtYmM0ZDQwMmE3OTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUCpf6/6DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCqgiNUWtgR0JP1sHLWBRceN6Nl+rUaYStuzWdVh5vzQeZbrqIG2Zgt
LvvUjXvM8vdWuy/WlZVXIUGUC/zh8S9yeTTnurqUQrw+HFYdnnr8aug+rJjEC88k
EOpnfqOggpj2dLY6qpqBwpWhcAmPS7ZHyNBhdu3+NTisN4v5V7IyAVXFqk8DgIN2
dZ6FoX7g2UNqIcGO5R/3l1I6wOzgrjS6/H4VN0KSS/TiHiQgX9+Nz0VRk+xyRdvK
f8am+Oyi8qcf0Fiqp8A2uL94vTeFQarlvwygtHhW0dcZoBdNL3Z6wwgc18VHa/u7
SChivH9lpDzbpR9Qx+HAhkjiidu+Lxwp
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:08 2025 by rpki-client