Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/cf277cfd-9adc-3a96-8dfc-e8906e3ca579.roa
File: cf277cfd-9adc-3a96-8dfc-e8906e3ca579.roa (raw, json)
Hash identifier: r+CpZnKD21hhOSg3RtxNiZ3O7VxbsCv81x/nsYEC7/8=
Subject key identifier: 32:77:E4:83:E0:04:72:1D:7F:1D:8F:D4:17:12:B1:AB:2A:C7:98:21
Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial: 010D0C9F43285847F2BA32F54795682F290313C0
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/cf277cfd-9adc-3a96-8dfc-e8906e3ca579.roa
Signing time: Thu 21 Nov 2024 02:00:38 +0000
ROA not before: Thu 21 Nov 2024 02:00:38 +0000
ROA not after: Wed 19 Feb 2025 02:00:38 +0000
asID: 13692
IP address blocks: 216.110.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f2:ba:32:f5:47:95:68:2f:29:03:13:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Validity
Not Before: Nov 21 02:00:38 2024 GMT
Not After : Feb 19 02:00:38 2025 GMT
Subject: CN=94b28c1c-0638-454f-834c-021d9affcdcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0c:30:3a:af:5f:1a:c6:e9:65:f4:5c:0b:c4:
8b:65:dd:ae:33:84:b0:be:9c:9c:c3:c5:a3:ac:f1:
4d:41:82:88:77:2b:37:cf:f3:64:ba:66:5b:2e:0c:
3b:28:44:5a:6f:53:40:0f:ef:8a:a0:26:9a:f3:00:
46:30:04:43:0f:1e:61:73:02:72:40:f1:dd:5d:b5:
3d:21:d4:b7:23:14:ca:5f:05:a4:c7:43:8f:6a:cb:
54:77:1e:04:f2:4f:c3:bf:71:23:d5:8e:6d:9a:7a:
58:81:58:f4:1a:e1:b2:68:75:ea:b8:90:b1:b2:83:
28:3a:58:4e:9a:8b:68:31:1e:c4:fd:ab:96:b0:45:
aa:ac:c6:b7:41:de:85:c7:88:ac:67:0f:12:e5:52:
b2:65:0a:ca:5b:f8:69:73:cf:a1:fa:54:c5:bc:bf:
e8:88:f6:bb:9e:6b:5f:ad:f9:d1:24:d0:18:2e:5c:
7c:18:b7:c6:1e:af:ea:b7:8e:85:57:da:20:35:06:
77:32:ff:79:b7:19:5e:e4:d5:8b:5f:50:db:de:20:
8e:eb:9d:20:e4:6a:a2:56:ec:ac:4f:52:37:c5:9a:
51:10:15:43:eb:47:65:df:0d:3e:bc:bc:23:fd:c0:
ff:d7:bb:63:9b:10:8d:92:54:a7:3a:2f:ba:64:26:
9d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:77:E4:83:E0:04:72:1D:7F:1D:8F:D4:17:12:B1:AB:2A:C7:98:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/cf277cfd-9adc-3a96-8dfc-e8906e3ca579.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
X509v3 Authority Key Identifier:
keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
sbgp-ipAddrBlock: critical
IPv4:
216.110.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:7a:f1:e6:86:b8:48:1c:b6:82:5f:d4:8c:2f:c3:bb:19:53:
d0:3c:be:d1:bf:3c:16:97:6e:a1:7c:40:2b:ce:da:5a:f0:89:
da:40:d4:39:3a:a7:25:d4:06:db:62:9b:63:36:32:63:44:c2:
70:b2:c9:3a:61:57:ca:12:18:f8:2e:74:ab:b5:ed:3b:c7:83:
02:fe:84:5c:87:0f:f4:8a:40:b9:66:f8:d0:31:c7:c0:8b:7e:
fe:67:58:45:17:3a:cf:ed:2a:4f:a1:e7:d8:6f:7d:e8:10:75:
fc:f5:24:6e:ee:a9:ed:f3:3f:b0:e1:fe:e0:9b:7c:f2:a2:8e:
99:1d:89:f0:11:e3:48:d9:49:8d:31:68:96:b2:c3:6e:03:41:
df:d5:39:23:dc:bc:f6:80:5b:82:78:f1:bf:8f:48:f2:ea:64:
06:15:41:77:c5:a2:c5:b5:86:f3:62:28:8f:42:6c:f3:52:86:
07:08:02:c3:c0:bd:03:18:bd:b0:fb:79:62:ed:9b:f9:76:c4:
44:22:e1:64:0d:01:70:18:45:40:98:5d:4d:0e:2f:c8:b6:f7:
c9:94:eb:5d:37:7a:de:5a:3e:71:0d:e3:f8:37:45:f1:c1:67:
34:9e:1d:96:12:eb:84:26:c4:e5:6f:47:ad:15:b9:b0:b8:97:
93:e5:c4:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfyujL1R5VoLykDE8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI0MTEyMTAyMDAzOFoXDTI1MDIxOTAyMDAzOFowLzEtMCsGA1UEAxMk
OTRiMjhjMWMtMDYzOC00NTRmLTgzNGMtMDIxZDlhZmZjZGNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgwwOq9fGsbpZfRcC8SLZd2uM4Swvpycw8Wj
rPFNQYKIdys3z/NkumZbLgw7KERab1NAD++KoCaa8wBGMARDDx5hcwJyQPHdXbU9
IdS3IxTKXwWkx0OPastUdx4E8k/Dv3Ej1Y5tmnpYgVj0GuGyaHXquJCxsoMoOlhO
motoMR7E/auWsEWqrMa3Qd6Fx4isZw8S5VKyZQrKW/hpc8+h+lTFvL/oiPa7nmtf
rfnRJNAYLlx8GLfGHq/qt46FV9ogNQZ3Mv95txle5NWLX1Db3iCO650g5GqiVuys
T1I3xZpREBVD60dl3w0+vLwj/cD/17tjmxCNklSnOi+6ZCadDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDJ35IPgBHIdfx2P1BcSsasqx5ghMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvY2YyNzdjZmQtOWFkYy0z
YTk2LThkZmMtZTg5MDZlM2NhNTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2G7IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFR68eaGuEgctoJf1Iwvw7sZU9A8vtG/PBaXbqF8QCvO2lrwidpA1Dk6
pyXUBttim2M2MmNEwnCyyTphV8oSGPgudKu17TvHgwL+hFyHD/SKQLlm+NAxx8CL
fv5nWEUXOs/tKk+h59hvfegQdfz1JG7uqe3zP7Dh/uCbfPKijpkdifAR40jZSY0x
aJayw24DQd/VOSPcvPaAW4J48b+PSPLqZAYVQXfFosW1hvNiKI9CbPNShgcIAsPA
vQMYvbD7eWLtm/l2xEQi4WQNAXAYRUCYXU0OL8i298mU6103et5aPnEN4/g3RfHB
ZzSeHZYS64QmxOVvR60VubC4l5PlxCM=
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:37 2025 by rpki-client