Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/195c860d-8be0-36cb-b093-dc0e0ba0a59c.roa
File: 195c860d-8be0-36cb-b093-dc0e0ba0a59c.roa (raw, json)
Hash identifier: 4iY2ynDvPfB9jGPcayeUH3cUatkZgVshQt5Epa3zYpg=
Subject key identifier: 43:64:6F:F5:90:9C:6A:C9:27:1C:54:0C:D5:0E:D6:6D:E8:15:53:1A
Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Certificate serial: 010D0C9F43285848626588979267916A608D4040
Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/195c860d-8be0-36cb-b093-dc0e0ba0a59c.roa
Signing time: Tue 31 Dec 2024 02:00:40 +0000
ROA not before: Tue 31 Dec 2024 02:00:40 +0000
ROA not after: Mon 31 Mar 2025 01:00:40 +0000
asID: 401398
IP address blocks: 134.195.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:62:65:88:97:92:67:91:6a:60:8d:40:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Validity
Not Before: Dec 31 02:00:40 2024 GMT
Not After : Mar 31 01:00:40 2025 GMT
Subject: CN=445fdfc7-2663-4748-90d5-dcbe8a3d8f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cc:d6:b7:a1:74:d8:8d:9e:10:b7:e4:61:83:
4b:e4:60:df:a2:d3:e2:e1:ce:74:e7:83:9e:70:18:
0e:ef:d5:89:9d:f9:82:14:ed:3c:fa:4c:ec:9a:b5:
b3:6e:25:ab:69:e7:f4:4a:b5:79:96:31:ea:06:a2:
fe:f2:ba:63:d7:e9:0b:a2:91:fa:f8:58:47:b0:0c:
05:d7:22:90:88:17:c8:93:0d:c0:89:c2:a4:44:8d:
ef:ed:61:38:10:ef:83:83:22:ea:12:ea:32:ee:90:
41:3f:51:95:41:59:26:29:7a:e7:67:ab:21:b5:a8:
bc:b5:9f:34:39:63:05:0b:b4:a7:99:8a:1c:aa:40:
9f:a8:cf:18:6f:82:30:96:fb:b3:eb:8b:fb:23:ea:
6b:5e:b9:7e:19:57:d8:f1:b0:58:ac:dd:fa:01:13:
49:a9:a8:cb:d3:15:7d:ec:62:62:58:66:b3:07:a2:
5e:d7:7b:cd:a6:dd:bb:bb:77:13:6d:6a:65:65:1f:
ae:51:ef:1b:b8:72:15:57:10:c0:3b:00:2c:7d:da:
67:81:15:82:b8:0c:d2:fb:14:3e:13:fe:7e:40:e1:
bd:01:8a:9f:9d:e7:2c:2c:56:f7:4c:37:07:03:f8:
31:49:77:c2:2b:6f:13:ad:87:80:20:65:df:96:f7:
57:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:64:6F:F5:90:9C:6A:C9:27:1C:54:0C:D5:0E:D6:6D:E8:15:53:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/195c860d-8be0-36cb-b093-dc0e0ba0a59c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl
X509v3 Authority Key Identifier:
keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
sbgp-ipAddrBlock: critical
IPv4:
134.195.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:d2:8f:9c:18:e0:cb:b6:10:b5:7a:f7:ba:12:5c:f8:2f:66:
3a:43:87:0b:e4:1b:b5:20:1b:50:1b:7b:40:32:7a:1a:f8:30:
d9:d9:ee:eb:ce:28:4a:5a:9c:c9:b4:ba:cd:d7:94:e2:d8:c1:
d3:dc:3e:ea:26:1c:62:05:42:7f:2f:99:cb:3a:f9:f3:62:5c:
5f:a9:98:5a:9e:7a:41:9d:da:73:60:8e:eb:67:17:15:50:d2:
75:b5:82:d0:f5:89:33:50:e5:a7:90:f3:8c:12:41:da:a6:b8:
17:c0:d0:f6:90:b4:0e:b4:78:79:6b:8a:49:b4:68:e2:f5:17:
1d:02:b3:b2:de:04:e8:b5:82:16:cb:e3:d4:03:29:1b:d6:58:
f3:c6:7a:e6:d9:06:0a:36:3c:a2:85:8b:6e:82:71:36:99:99:
97:8c:fe:5e:8c:0a:9b:1d:b2:52:92:f9:e8:8b:a2:b8:3d:e2:
2c:b5:cb:84:bd:fd:7e:62:82:08:77:a2:cd:b0:cf:9f:04:82:
ca:6c:96:5c:a7:b0:83:67:a5:41:9a:7c:b6:15:61:74:17:9d:
9d:7e:8c:93:02:c1:e5:5d:a1:23:68:46:9f:1e:09:e7:2c:5b:
22:4d:ff:d5:71:14:cc:af:80:c8:4a:e6:45:e6:c2:9b:79:ca:
31:03:79:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhiZYiXkmeRamCNQEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjM4NmUyNTYtMmRjMy00ZDIxLTkzYjktYzI1M2RjZDM3
ZTRmMB4XDTI0MTIzMTAyMDA0MFoXDTI1MDMzMTAxMDA0MFowLzEtMCsGA1UEAxMk
NDQ1ZmRmYzctMjY2My00NzQ4LTkwZDUtZGNiZThhM2Q4ZjM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8zWt6F02I2eELfkYYNL5GDfotPi4c5054Oe
cBgO79WJnfmCFO08+kzsmrWzbiWraef0SrV5ljHqBqL+8rpj1+kLopH6+FhHsAwF
1yKQiBfIkw3AicKkRI3v7WE4EO+DgyLqEuoy7pBBP1GVQVkmKXrnZ6shtai8tZ80
OWMFC7SnmYocqkCfqM8Yb4Iwlvuz64v7I+prXrl+GVfY8bBYrN36ARNJqajL0xV9
7GJiWGazB6Je13vNpt27u3cTbWplZR+uUe8buHIVVxDAOwAsfdpngRWCuAzS+xQ+
E/5+QOG9AYqfnecsLFb3TDcHA/gxSXfCK28TrYeAIGXflvdXzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFENkb/WQnGrJJxxUDNUO1m3oFVMaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2
ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUzZGNkMzdlNGYvMTk1Yzg2MGQtOGJlMC0z
NmNiLWIwOTMtZGMwZTBiYTBhNTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjM4NmUyNTYtMmRjMy00ZDIxLTkz
YjktYzI1M2RjZDM3ZTRmL2IzODZlMjU2LTJkYzMtNGQyMS05M2I5LWMyNTNkY2Qz
N2U0Zi5jcmwwHwYDVR0jBBgwFoAU8iJcB8LMp4SDvdYUpquzee8m3jwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUz
ZGNkMzdlNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhsMrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJrSj5wY4Mu2ELV697oSXPgvZjpDhwvkG7UgG1Abe0Ayehr4MNnZ7uvO
KEpanMm0us3XlOLYwdPcPuomHGIFQn8vmcs6+fNiXF+pmFqeekGd2nNgjutnFxVQ
0nW1gtD1iTNQ5aeQ84wSQdqmuBfA0PaQtA60eHlrikm0aOL1Fx0Cs7LeBOi1ghbL
49QDKRvWWPPGeubZBgo2PKKFi26CcTaZmZeM/l6MCpsdslKS+eiLorg94iy1y4S9
/X5iggh3os2wz58EgspsllynsINnpUGafLYVYXQXnZ1+jJMCweVdoSNoRp8eCecs
WyJN/9VxFMyvgMhK5kXmwpt5yjEDeVs=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:43:27 2025 by rpki-client