Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/3c892540-a9b0-3138-9b27-f3c6551fdd68.roa
File: 3c892540-a9b0-3138-9b27-f3c6551fdd68.roa (raw, json)
Hash identifier: 87yOoSibSqDOrvFbgeVTtHm0MiUsxVzwFVWOAlmvzvQ=
Subject key identifier: D5:D2:4C:04:94:C4:E9:61:C1:93:2F:C4:3E:7B:7A:0F:B9:BB:26:DA
Certificate issuer: /CN=c634bf2d-3875-4079-9788-431e36d8743a
Certificate serial: 010D0C9F4328584827C544EE63993C5C3C047A80
Authority key identifier: 8F:39:E7:00:D8:69:92:10:87:82:FF:BB:46:16:9E:64:9A:86:D5:C2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/3c892540-a9b0-3138-9b27-f3c6551fdd68.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 400718
IP address blocks: 168.102.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:44:ee:63:99:3c:5c:3c:04:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c634bf2d-3875-4079-9788-431e36d8743a
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=23afaf27-dfce-4c49-9276-e28241fe5e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:be:4c:ff:97:d2:1e:96:8e:f7:80:da:06:61:
31:d6:53:e3:d0:3f:7d:18:e6:bf:2e:c1:e9:6b:59:
cf:e9:76:7d:75:87:97:74:a3:7d:a7:b5:0b:f1:7b:
d9:36:88:65:85:bd:48:19:5c:45:b2:db:58:31:8f:
af:77:44:89:6f:d8:f1:e3:12:ec:e5:6e:ce:b7:0d:
94:73:fe:94:f0:da:aa:af:f0:8c:1f:10:5d:05:63:
d0:df:ce:c9:df:04:6a:f0:17:77:c7:ef:85:14:6b:
a7:4c:9d:3a:13:22:b5:a0:96:77:8a:bf:12:f5:e3:
24:f9:7b:e1:b5:cf:6b:ef:e3:ab:45:29:a4:8b:ef:
ca:9a:6c:a6:a4:54:6a:6f:78:72:d3:14:b0:0a:90:
c0:19:6f:ce:b1:cf:1e:29:0c:a4:41:5d:cf:d0:66:
fa:a5:49:c8:f6:64:1f:f4:96:a9:7c:b2:1f:0d:92:
58:c2:1f:00:82:20:e1:6c:dd:e6:69:ba:26:a6:39:
ec:a9:dd:e0:e2:6c:73:3e:0b:4a:fd:e7:89:f7:22:
09:d3:7c:3d:51:3a:71:d0:39:e2:26:39:02:04:62:
c6:2a:5a:8a:4d:67:31:94:c9:8f:cf:b3:f5:15:ca:
88:b7:61:6f:77:67:d9:6f:20:b9:1c:37:ee:f8:ed:
4e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D2:4C:04:94:C4:E9:61:C1:93:2F:C4:3E:7B:7A:0F:B9:BB:26:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/3c892540-a9b0-3138-9b27-f3c6551fdd68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/c634bf2d-3875-4079-9788-431e36d8743a.crl
X509v3 Authority Key Identifier:
keyid:8F:39:E7:00:D8:69:92:10:87:82:FF:BB:46:16:9E:64:9A:86:D5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a.cer
sbgp-ipAddrBlock: critical
IPv4:
168.102.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:97:8b:c7:d7:a2:4b:5c:01:e4:a0:45:c9:e6:5a:f5:5c:1b:
09:a8:d1:a0:f8:f9:79:e5:0b:f7:0d:42:57:64:46:ad:23:1a:
d2:9f:d4:cd:d3:60:fd:6a:21:cc:07:46:3b:34:49:a8:73:97:
e7:1a:49:25:c5:d6:de:96:8f:8b:a2:f9:54:e6:eb:fe:6b:54:
55:d3:0c:8a:66:de:f1:af:52:ba:f9:1d:9b:4c:96:a7:a7:19:
16:e2:5f:59:59:eb:b6:85:d0:e3:3a:90:8d:e7:b0:ff:b9:c4:
3d:8b:95:06:dc:8b:cb:f0:ab:c6:19:01:f9:ed:78:8e:93:94:
45:6c:56:56:8d:fe:8f:d0:25:57:de:b1:f1:c0:58:97:60:ac:
bb:62:52:5f:36:00:2f:21:a8:4b:6b:1c:a4:b9:55:a2:42:5a:
07:0f:26:92:e4:d1:7e:da:73:b3:3b:0a:66:9f:ff:16:93:21:
1b:a1:d9:c8:93:20:9e:73:72:4f:c4:6b:4f:44:ce:6f:54:30:
2c:bc:a0:e9:b0:6f:00:36:bd:de:29:0e:a3:7e:c1:89:f6:4b:
4b:67:6f:a9:15:7f:85:3d:ae:fb:43:3d:54:20:f3:76:82:1b:
19:d6:e4:84:c1:8b:5e:50:10:ba:9a:06:74:3c:f1:e9:5a:c4:
c7:b4:b7:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgnxUTuY5k8XDwEeoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzYzNGJmMmQtMzg3NS00MDc5LTk3ODgtNDMxZTM2ZDg3
NDNhMB4XDTI0MTIxMDAyMDA0MFoXDTI1MDMxMDAxMDA0MFowLzEtMCsGA1UEAxMk
MjNhZmFmMjctZGZjZS00YzQ5LTkyNzYtZTI4MjQxZmU1ZTMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb5M/5fSHpaO94DaBmEx1lPj0D99GOa/LsHp
a1nP6XZ9dYeXdKN9p7UL8XvZNohlhb1IGVxFsttYMY+vd0SJb9jx4xLs5W7Otw2U
c/6U8Nqqr/CMHxBdBWPQ387J3wRq8Bd3x++FFGunTJ06EyK1oJZ3ir8S9eMk+Xvh
tc9r7+OrRSmki+/KmmympFRqb3hy0xSwCpDAGW/Osc8eKQykQV3P0Gb6pUnI9mQf
9JapfLIfDZJYwh8AgiDhbN3mabompjnsqd3g4mxzPgtK/eeJ9yIJ03w9UTpx0Dni
JjkCBGLGKlqKTWcxlMmPz7P1FcqIt2Fvd2fZbyC5HDfu+O1OuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNXSTASUxOlhwZMvxD57eg+5uybaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNjM0
YmYyZC0zODc1LTQwNzktOTc4OC00MzFlMzZkODc0M2EvM2M4OTI1NDAtYTliMC0z
MTM4LTliMjctZjNjNjU1MWZkZDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzYzNGJmMmQtMzg3NS00MDc5LTk3
ODgtNDMxZTM2ZDg3NDNhL2M2MzRiZjJkLTM4NzUtNDA3OS05Nzg4LTQzMWUzNmQ4
NzQzYS5jcmwwHwYDVR0jBBgwFoAUjznnANhpkhCHgv+7RhaeZJqG1cIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNjM0YmYyZC0zODc1LTQwNzktOTc4OC00MzFl
MzZkODc0M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqGYAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGuXi8fXoktcAeSgRcnmWvVcGwmo0aD4+XnlC/cNQldkRq0jGtKf1M3T
YP1qIcwHRjs0Sahzl+caSSXF1t6Wj4ui+VTm6/5rVFXTDIpm3vGvUrr5HZtMlqen
GRbiX1lZ67aF0OM6kI3nsP+5xD2LlQbci8vwq8YZAfnteI6TlEVsVlaN/o/QJVfe
sfHAWJdgrLtiUl82AC8hqEtrHKS5VaJCWgcPJpLk0X7ac7M7Cmaf/xaTIRuh2ciT
IJ5zck/Ea09Ezm9UMCy8oOmwbwA2vd4pDqN+wYn2S0tnb6kVf4U9rvtDPVQg83aC
GxnW5ITBi15QELqaBnQ88elaxMe0t/M=
-----END CERTIFICATE-----
Generated at Mon May 12 16:58:41 2025 by rpki-client