Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/40c9501a-2aa7-30a5-b202-677f56dc9fa3.roa
File: 40c9501a-2aa7-30a5-b202-677f56dc9fa3.roa (raw, json)
Hash identifier: GcHRhwO8+7KNR/LD9f4hvxOgDq7NdJrc1fcoe8S/CO0=
Subject key identifier: 07:4C:6C:EA:AF:AB:42:52:DB:0E:F3:C8:2C:A0:87:7F:C5:64:F4:15
Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial: 010D0C9F432858483B5009809615AAB140069400
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/40c9501a-2aa7-30a5-b202-677f56dc9fa3.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 13768
IP address blocks: 216.187.122.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:50:09:80:96:15:aa:b1:40:06:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=b756482f-af69-4e22-a1b9-5a808b550f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:75:9e:8b:ae:46:a5:99:81:59:73:70:34:fa:
2f:f0:60:df:a3:ff:29:64:33:4b:c9:a1:3d:17:c5:
e4:1d:14:b1:4b:c3:61:ce:0c:ea:82:4c:b6:d3:0f:
8c:ca:94:5f:cb:11:20:79:a0:e5:5f:14:80:f1:e0:
a0:32:00:b3:fa:ff:77:ad:0d:61:77:eb:09:10:53:
5f:f8:c8:87:a6:5c:c4:6e:a0:8e:36:3c:ad:7e:5f:
ef:ae:ee:8a:11:d6:d2:f2:ec:68:1b:c2:87:b1:7b:
5f:9c:0c:08:c6:1f:fb:85:5e:29:89:89:21:ac:f8:
1e:02:c6:17:f5:ae:62:50:68:c3:ef:29:2d:6e:99:
b3:ea:ee:59:7c:16:ae:8c:76:55:0b:45:8d:e6:66:
96:b1:c4:3e:37:32:1e:5d:cc:5d:90:b0:48:0f:61:
dd:f9:ee:77:c8:34:58:2c:fc:c7:2e:7d:32:ab:9e:
ac:f9:8b:3c:73:8d:86:7a:53:59:d0:38:c5:77:f0:
85:a4:a9:75:6e:0a:14:44:d2:61:de:c3:f7:37:de:
56:17:e6:af:c0:f6:97:a3:8e:ad:b4:88:fe:28:f5:
dd:19:88:cf:9b:c1:32:13:a7:c2:f4:a0:58:8f:96:
ac:33:f8:18:90:73:e7:3f:ef:ee:1c:3e:cb:4b:77:
fc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4C:6C:EA:AF:AB:42:52:DB:0E:F3:C8:2C:A0:87:7F:C5:64:F4:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/40c9501a-2aa7-30a5-b202-677f56dc9fa3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
X509v3 Authority Key Identifier:
keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
sbgp-ipAddrBlock: critical
IPv4:
216.187.122.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:e6:54:93:9b:36:c1:99:e5:88:ee:7b:4c:10:38:72:a0:79:
d6:78:9b:b5:31:e6:1d:ab:df:96:e7:67:0b:03:10:8a:05:08:
b0:53:81:73:20:a6:d8:dd:40:8b:1d:b3:2f:28:b7:bf:56:d0:
cd:1f:22:33:91:51:09:f1:d7:f3:a6:98:b9:67:70:bf:7c:5a:
0f:e5:82:be:54:ab:61:08:11:3f:1d:03:25:aa:ad:22:20:3f:
f5:5f:ea:e5:64:dc:b3:32:07:8d:e1:03:25:02:90:be:a4:6f:
03:24:a0:80:0c:0b:4c:be:01:10:62:d8:db:64:a7:68:e5:d6:
47:ce:2d:07:84:22:0a:68:fe:13:0a:66:85:fc:17:a4:36:a6:
44:13:7c:00:b3:11:e7:28:91:83:69:26:36:77:bb:e4:e6:d5:
aa:e6:11:06:84:5a:03:86:a4:19:96:96:51:04:42:ac:c5:af:
fe:64:b2:61:61:e3:d6:b3:81:22:1e:46:dd:c3:87:c5:bc:55:
11:9b:c7:7a:a6:68:f5:9c:ba:c6:4d:b0:ec:04:43:03:d1:04:
18:d3:b3:46:8b:f4:e4:89:76:90:35:e1:58:6a:b1:80:fe:dd:
04:f8:86:59:6a:85:47:3a:2e:41:87:4e:ac:6f:90:e4:a1:8e:
41:4d:e3:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg7UAmAlhWqsUAGlAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk
YjEwMB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk
Yjc1NjQ4MmYtYWY2OS00ZTIyLWExYjktNWE4MDhiNTUwZjFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HWei65GpZmBWXNwNPov8GDfo/8pZDNLyaE9
F8XkHRSxS8Nhzgzqgky20w+MypRfyxEgeaDlXxSA8eCgMgCz+v93rQ1hd+sJEFNf
+MiHplzEbqCONjytfl/vru6KEdbS8uxoG8KHsXtfnAwIxh/7hV4piYkhrPgeAsYX
9a5iUGjD7yktbpmz6u5ZfBaujHZVC0WN5maWscQ+NzIeXcxdkLBID2Hd+e53yDRY
LPzHLn0yq56s+Ys8c42GelNZ0DjFd/CFpKl1bgoURNJh3sP3N95WF+avwPaXo46t
tIj+KPXdGYjPm8EyE6fC9KBYj5asM/gYkHPnP+/uHD7LS3f8BQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAdMbOqvq0JS2w7zyCygh3/FZPQVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3
OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvNDBjOTUwMWEtMmFhNy0z
MGE1LWIyMDItNjc3ZjU2ZGM5ZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0
YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1
ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl
NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2Lt6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAvmVJObNsGZ5Yjue0wQOHKgedZ4m7Ux5h2r35bnZwsDEIoFCLBTgXMg
ptjdQIsdsy8ot79W0M0fIjORUQnx1/OmmLlncL98Wg/lgr5Uq2EIET8dAyWqrSIg
P/Vf6uVk3LMyB43hAyUCkL6kbwMkoIAMC0y+ARBi2Ntkp2jl1kfOLQeEIgpo/hMK
ZoX8F6Q2pkQTfACzEecokYNpJjZ3u+Tm1armEQaEWgOGpBmWllEEQqzFr/5ksmFh
49azgSIeRt3Dh8W8VRGbx3qmaPWcusZNsOwEQwPRBBjTs0aL9OSJdpA14VhqsYD+
3QT4hllqhUc6LkGHTqxvkOShjkFN40k=
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:42:47 2025 by rpki-client