Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/66ab0be3-ce1a-3b4f-ac7b-6921cca9b905.roa
File: 66ab0be3-ce1a-3b4f-ac7b-6921cca9b905.roa (raw, json)
Hash identifier: rE0UeTLaQwciLbFiEoQXOdOr4dUqWZrgWZipcFW93VE=
Subject key identifier: 08:56:37:81:99:53:E0:CE:A8:9F:51:6C:BE:A2:B5:FF:65:70:16:01
Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial: 010D0C9F43285847F84F846DB91544C016B7D240
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/66ab0be3-ce1a-3b4f-ac7b-6921cca9b905.roa
Signing time: Sat 23 Nov 2024 02:00:28 +0000
ROA not before: Sat 23 Nov 2024 02:00:28 +0000
ROA not after: Fri 21 Feb 2025 02:00:28 +0000
asID: 140227
IP address blocks: 104.143.32.0/20 maxlen: 24
172.81.96.0/22 maxlen: 24
172.81.100.0/23 maxlen: 24
198.176.59.0/24 maxlen: 24
198.176.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f8:4f:84:6d:b9:15:44:c0:16:b7:d2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Validity
Not Before: Nov 23 02:00:28 2024 GMT
Not After : Feb 21 02:00:28 2025 GMT
Subject: CN=52eba4c6-f1b3-4fa4-9f8f-d26c2e16bc6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8c:fd:f1:0c:48:e1:55:97:ae:0d:d1:03:cf:
d5:a6:1b:3f:8d:6b:a9:f3:3b:44:73:f1:c1:2f:11:
0c:4f:5e:44:e7:d7:7c:83:93:6c:62:8e:f8:d2:8d:
40:23:a4:17:88:4e:49:0b:1c:7d:55:b9:c9:51:63:
a0:d9:58:e0:8c:8d:72:bf:e0:19:8b:9d:d2:11:be:
6f:b8:e3:6e:f9:03:2c:db:c9:ba:aa:c9:d3:ff:2b:
07:84:3e:8b:50:f3:cb:5a:15:54:89:fc:70:a1:17:
81:70:34:4c:1c:a4:ee:32:63:0a:21:1d:3b:8b:fb:
b5:d5:92:26:2f:92:fd:fd:75:8e:a0:6a:df:d0:0c:
b7:95:35:76:61:a7:a8:92:25:98:66:1d:f2:f1:20:
ef:93:f3:cc:54:ac:84:18:d9:91:14:8c:77:93:b0:
4b:ab:55:8e:f0:41:7d:1f:cd:8f:de:a2:ee:da:66:
42:6b:6d:78:88:98:19:4f:82:dc:bc:84:0c:b8:5b:
cb:60:54:0d:74:36:4b:14:84:0d:cd:a1:e9:1b:01:
64:07:6c:eb:f9:09:31:f3:a8:8f:f1:54:1a:85:31:
c0:75:16:30:65:1b:0c:16:f6:d8:5f:f3:54:24:eb:
21:5b:c0:c9:61:3c:16:61:c8:c7:af:a1:cc:e3:12:
19:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:56:37:81:99:53:E0:CE:A8:9F:51:6C:BE:A2:B5:FF:65:70:16:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/66ab0be3-ce1a-3b4f-ac7b-6921cca9b905.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
X509v3 Authority Key Identifier:
keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
sbgp-ipAddrBlock: critical
IPv4:
104.143.32.0/20
172.81.96.0-172.81.101.255
198.176.59.0-198.176.63.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:d2:c6:36:b1:2d:53:4d:26:71:71:56:f9:22:83:68:0a:6c:
3c:8f:b7:9a:75:c6:fc:85:2a:33:59:46:41:94:0b:58:e6:44:
9d:d0:93:79:d5:45:bc:0d:6a:0b:2b:43:76:3d:36:8f:01:5a:
9f:90:7b:a6:95:21:42:4f:66:3d:33:3f:35:9d:4c:b0:d8:b7:
07:b4:ad:0e:50:2b:2e:3b:1d:00:56:a4:eb:80:a7:2c:8e:67:
60:ee:26:82:e0:16:e1:4a:38:52:a4:33:d2:54:4d:b2:58:8c:
be:50:d8:e1:9d:3d:eb:43:8b:37:89:5c:01:a9:64:ea:5b:50:
dd:d1:16:1c:99:63:ca:81:09:d1:3d:f6:82:6a:b6:50:4e:34:
80:14:2c:86:f3:9a:06:a7:31:0c:32:11:20:78:4d:23:1c:ef:
e5:cb:59:aa:8c:95:aa:23:5b:91:7a:e3:4b:9b:81:33:d1:ad:
5f:a9:dd:9a:86:38:2b:fe:f3:ed:93:78:e9:f4:cf:67:b9:39:
af:91:b2:5b:fa:34:27:6b:45:e2:0e:97:a8:12:8c:4f:26:f6:
9b:96:c9:79:a3:0a:62:cd:bd:3a:63:2f:79:77:be:4a:b3:1b:
b0:c2:7b:87:5a:44:6c:4c:b9:8a:e7:7e:36:4a:c0:48:bc:12:
36:95:48:fd
-----BEGIN CERTIFICATE-----
MIIGXzCCBUegAwIBAgIUAQ0Mn0MoWEf4T4RtuRVEwBa30kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm
MDYzMB4XDTI0MTEyMzAyMDAyOFoXDTI1MDIyMTAyMDAyOFowLzEtMCsGA1UEAxMk
NTJlYmE0YzYtZjFiMy00ZmE0LTlmOGYtZDI2YzJlMTZiYzZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIz98QxI4VWXrg3RA8/Vphs/jWup8ztEc/HB
LxEMT15E59d8g5NsYo740o1AI6QXiE5JCxx9VbnJUWOg2VjgjI1yv+AZi53SEb5v
uONu+QMs28m6qsnT/ysHhD6LUPPLWhVUifxwoReBcDRMHKTuMmMKIR07i/u11ZIm
L5L9/XWOoGrf0Ay3lTV2YaeokiWYZh3y8SDvk/PMVKyEGNmRFIx3k7BLq1WO8EF9
H82P3qLu2mZCa214iJgZT4LcvIQMuFvLYFQNdDZLFIQNzaHpGwFkB2zr+Qkx86iP
8VQahTHAdRYwZRsMFvbYX/NUJOshW8DJYTwWYcjHr6HM4xIZFwIDAQABo4IDcTCC
A20wHQYDVR0OBBYEFAhWN4GZU+DOqJ9RbL6itf9lcBYBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi
MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvNjZhYjBiZTMtY2UxYS0z
YjRmLWFjN2ItNjkyMWNjYTliOTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1
YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky
ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4
NzY5MmYwNjMuY2VyMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQEaI8gMAwD
BAWsUWADBAGsUWQwDAMEAMawOwMEBsawADBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA60sY2sS1TTSZxcVb5
IoNoCmw8j7eadcb8hSozWUZBlAtY5kSd0JN51UW8DWoLK0N2PTaPAVqfkHumlSFC
T2Y9Mz81nUyw2LcHtK0OUCsuOx0AVqTrgKcsjmdg7iaC4BbhSjhSpDPSVE2yWIy+
UNjhnT3rQ4s3iVwBqWTqW1Dd0RYcmWPKgQnRPfaCarZQTjSAFCyG85oGpzEMMhEg
eE0jHO/ly1mqjJWqI1uReuNLm4Ez0a1fqd2ahjgr/vPtk3jp9M9nuTmvkbJb+jQn
a0XiDpeoEoxPJvablsl5owpizb06Yy95d75KsxuwwnuHWkRsTLmK5342SsBIvBI2
lUj9
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:18:46 2025 by rpki-client