Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/4bf7477f-d0a1-3f5d-8a88-28d9561ad4f0.roa
File: 4bf7477f-d0a1-3f5d-8a88-28d9561ad4f0.roa (raw, json)
Hash identifier: e0Z8QA4fMS70QmxhnZo+CKlOXj/TrRPH2l1/3/G5Mjw=
Subject key identifier: 8A:E2:91:3E:45:9A:74:13:02:4B:6B:B6:77:F6:38:FD:1D:ED:A8:06
Certificate issuer: /CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
Certificate serial: 010D0C9F43285848573AD24D7AB2682092C66700
Authority key identifier: 83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/4bf7477f-d0a1-3f5d-8a88-28d9561ad4f0.roa
Signing time: Fri 27 Dec 2024 02:00:40 +0000
ROA not before: Fri 27 Dec 2024 02:00:40 +0000
ROA not after: Thu 27 Mar 2025 01:00:40 +0000
asID: 30045
IP address blocks: 192.219.2.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:57:3a:d2:4d:7a:b2:68:20:92:c6:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
Validity
Not Before: Dec 27 02:00:40 2024 GMT
Not After : Mar 27 01:00:40 2025 GMT
Subject: CN=d7f7880b-633c-4969-88da-e68bafffa4ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:88:cd:ac:c5:f7:2c:6d:d2:dd:71:bc:72:70:
0e:2e:91:e6:ee:f1:e9:39:9c:e3:8b:7f:eb:68:64:
c8:9d:56:a5:37:dc:00:42:a3:65:90:df:3c:69:17:
10:9b:e4:f2:c9:1d:32:d9:3f:4f:c3:01:ef:af:79:
4c:e6:54:e2:51:31:36:64:fd:26:b5:53:1a:04:4e:
af:79:17:89:30:db:33:c0:0e:22:34:57:dd:bf:5e:
f0:43:01:9a:46:42:a8:28:ab:db:2c:eb:bf:92:8c:
13:86:03:78:7c:a8:23:64:b1:0d:ee:76:f5:b8:5e:
39:b6:27:99:63:82:44:92:09:3c:d2:30:d5:5e:19:
e7:80:91:db:ec:8f:23:13:77:74:d6:fe:aa:36:06:
94:e8:46:03:b9:6a:f0:d6:62:d2:f7:74:c4:08:d6:
75:17:d1:b1:85:46:56:58:0d:1a:f1:87:5e:b1:25:
38:75:23:f8:69:d9:8a:4a:cc:75:a1:01:d5:3b:28:
6b:d3:8a:a8:24:82:15:5a:ad:77:9d:d7:3c:7f:a5:
17:bc:c8:2f:5c:8d:f5:69:ed:7c:d1:34:36:6b:a6:
59:e3:c3:97:77:89:bd:6d:cc:e8:45:e7:61:35:1a:
b2:b5:56:a1:46:b3:af:9d:bf:ef:a0:a5:06:0e:0f:
71:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E2:91:3E:45:9A:74:13:02:4B:6B:B6:77:F6:38:FD:1D:ED:A8:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/4bf7477f-d0a1-3f5d-8a88-28d9561ad4f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl
X509v3 Authority Key Identifier:
keyid:83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
sbgp-ipAddrBlock: critical
IPv4:
192.219.2.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:df:92:54:b4:ce:27:39:ae:23:0d:53:26:b9:ba:35:16:45:
b4:48:2e:f9:62:6e:f5:26:a4:76:ec:db:12:28:aa:b9:c2:42:
13:83:90:7d:bb:98:5d:0a:ac:df:d5:d4:ee:bb:ec:20:56:ec:
b8:85:e8:8e:5c:ec:c8:57:0c:b2:85:ad:48:8f:73:77:cf:73:
9f:d4:74:b1:da:71:36:53:29:f9:bd:c1:52:ba:76:c0:90:01:
34:49:66:3d:3a:d8:72:1d:43:d0:21:47:8d:f6:2a:f0:5c:fb:
58:4f:1e:a4:5d:2a:2e:1c:cb:a2:c4:0d:e0:bc:46:80:56:bb:
15:aa:c6:d1:b7:02:63:29:fe:5c:d6:92:09:6e:fe:d0:41:44:
39:c5:19:c1:04:81:54:cd:d8:b8:ec:5d:e4:b5:c9:be:51:30:
65:62:52:c4:f8:90:da:68:b5:e8:24:fc:b6:d2:6c:4c:db:e0:
fe:e9:87:64:0c:b4:f1:6d:80:01:b9:a9:81:77:20:80:bd:9e:
bd:5e:f9:f6:5f:98:7c:dd:23:7f:ed:02:1a:9f:bb:10:61:a5:
8f:bd:8d:f4:d1:d6:e1:88:e2:1f:fe:4f:93:6d:ea:08:22:a8:
b2:3c:c7:b6:b8:11:14:46:55:45:bd:dd:8a:f0:10:ab:6b:98:
21:81:55:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhXOtJNerJoIJLGZwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGFjMWE1NmItZWEzMy00YmQ2LTlkM2UtMDA4OTZhOTFk
YjZiMB4XDTI0MTIyNzAyMDA0MFoXDTI1MDMyNzAxMDA0MFowLzEtMCsGA1UEAxMk
ZDdmNzg4MGItNjMzYy00OTY5LTg4ZGEtZTY4YmFmZmZhNGFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwojNrMX3LG3S3XG8cnAOLpHm7vHpOZzji3/r
aGTInValN9wAQqNlkN88aRcQm+TyyR0y2T9PwwHvr3lM5lTiUTE2ZP0mtVMaBE6v
eReJMNszwA4iNFfdv17wQwGaRkKoKKvbLOu/kowThgN4fKgjZLEN7nb1uF45tieZ
Y4JEkgk80jDVXhnngJHb7I8jE3d01v6qNgaU6EYDuWrw1mLS93TECNZ1F9GxhUZW
WA0a8YdesSU4dSP4admKSsx1oQHVOyhr04qoJIIVWq13ndc8f6UXvMgvXI31ae18
0TQ2a6ZZ48OXd4m9bczoRedhNRqytVahRrOvnb/voKUGDg9xwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIrikT5FmnQTAktrtnf2OP0d7agGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YWMx
YTU2Yi1lYTMzLTRiZDYtOWQzZS0wMDg5NmE5MWRiNmIvNGJmNzQ3N2YtZDBhMS0z
ZjVkLThhODgtMjhkOTU2MWFkNGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGFjMWE1NmItZWEzMy00YmQ2LTlk
M2UtMDA4OTZhOTFkYjZiLzhhYzFhNTZiLWVhMzMtNGJkNi05ZDNlLTAwODk2YTkx
ZGI2Yi5jcmwwHwYDVR0jBBgwFoAUg3U6Yyir4o99wKc7TDozymMHEyUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YWMxYTU2Yi1lYTMzLTRiZDYtOWQzZS0wMDg5
NmE5MWRiNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwNsCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADLfklS0zic5riMNUya5ujUWRbRILvlibvUmpHbs2xIoqrnCQhODkH27
mF0KrN/V1O677CBW7LiF6I5c7MhXDLKFrUiPc3fPc5/UdLHacTZTKfm9wVK6dsCQ
ATRJZj062HIdQ9AhR432KvBc+1hPHqRdKi4cy6LEDeC8RoBWuxWqxtG3AmMp/lzW
kglu/tBBRDnFGcEEgVTN2LjsXeS1yb5RMGViUsT4kNpotegk/LbSbEzb4P7ph2QM
tPFtgAG5qYF3IIC9nr1e+fZfmHzdI3/tAhqfuxBhpY+9jfTR1uGI4h/+T5Nt6ggi
qLI8x7a4ERRGVUW93YrwEKtrmCGBVSM=
-----END CERTIFICATE-----
Generated at Tue Apr 29 12:08:15 2025 by rpki-client