Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/a695d1a8-57a2-3f5d-abac-ea47525d89cc.roa
File: a695d1a8-57a2-3f5d-abac-ea47525d89cc.roa (raw, json)
Hash identifier: Uo3YHHZ2S+yoTjPvZG49D5CqcJHiQKD0TBwnS3B5Qn0=
Subject key identifier: 09:6C:0C:1E:7A:D4:CF:28:DC:A7:12:96:4D:E5:B5:D3:37:CC:E7:50
Certificate issuer: /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Certificate serial: 010D0C9F43285848504037759BEAE3B09FDECCC0
Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/a695d1a8-57a2-3f5d-abac-ea47525d89cc.roa
Signing time: Tue 24 Dec 2024 14:00:53 +0000
ROA not before: Tue 24 Dec 2024 14:00:53 +0000
ROA not after: Mon 24 Mar 2025 13:00:53 +0000
asID: 1742
IP address blocks: 128.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:50:40:37:75:9b:ea:e3:b0:9f:de:cc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Validity
Not Before: Dec 24 14:00:53 2024 GMT
Not After : Mar 24 13:00:53 2025 GMT
Subject: CN=36ff4c0d-db5e-44cd-94bb-6553ae196e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b7:7d:41:ad:d5:3e:9e:77:34:a6:be:d7:46:
e8:71:83:24:5d:67:79:11:2f:e9:a4:bd:24:9a:a7:
61:b6:64:41:76:d2:50:f4:46:fd:66:81:23:c3:9a:
09:b7:9b:5f:18:f3:e7:d1:5e:2c:e7:52:ef:ec:f3:
6e:f5:1b:57:3a:3e:0f:75:5a:73:25:e9:c8:ba:b4:
5f:32:9a:4a:50:56:91:dd:a0:c5:28:9b:48:3b:64:
6f:2d:e5:fe:12:95:e2:5f:b5:4b:4f:f9:f6:16:24:
01:0e:f8:ab:50:c2:a4:2a:75:c5:cd:4f:f8:ee:e2:
36:9c:e3:e2:bf:2a:6f:d0:11:62:6c:ff:58:ac:f8:
a8:59:81:fc:4a:ff:cd:77:e8:90:be:7c:55:db:c9:
dc:5f:80:c8:00:5e:2e:81:c6:34:a8:c2:21:6c:07:
2c:fa:74:1a:07:d5:cd:3d:8e:c0:f1:89:98:fc:4e:
82:9d:44:7d:69:d8:9a:ff:2c:6a:46:3b:cd:0d:ac:
77:f0:35:98:3d:9e:26:1b:ce:83:96:a1:5f:e5:29:
2f:00:e8:70:aa:bd:f1:17:6f:c7:b1:2c:85:f7:2f:
3e:4a:5f:b3:5f:76:6a:f6:3c:4e:b0:bc:a1:8b:55:
5d:d6:06:62:33:24:fc:6d:ab:87:e0:5a:33:d8:bf:
e2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6C:0C:1E:7A:D4:CF:28:DC:A7:12:96:4D:E5:B5:D3:37:CC:E7:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/a695d1a8-57a2-3f5d-abac-ea47525d89cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl
X509v3 Authority Key Identifier:
keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
sbgp-ipAddrBlock: critical
IPv4:
128.103.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:9a:07:97:44:af:7f:15:e6:3b:3e:2a:ce:94:eb:65:f4:90:
00:4b:91:65:69:84:e9:87:40:20:89:97:f7:24:52:3a:8c:6a:
80:1d:d4:6c:b2:6c:aa:d7:a5:c6:66:34:08:62:d6:63:88:f2:
a7:aa:ae:5e:cc:28:49:65:a9:17:fb:ad:18:87:b1:f9:34:f7:
48:23:18:7f:2b:2c:67:d8:5f:f9:b5:ee:ef:75:43:8e:0c:b9:
3a:a3:ab:9f:e7:56:1d:f3:c5:45:cd:3e:5b:0a:6b:00:96:0c:
3b:8d:12:f6:5f:14:b1:87:a4:47:a4:b0:d4:56:54:76:c1:fa:
3a:a1:32:4b:f4:58:d3:03:35:d3:52:dd:d3:9f:45:a0:21:b8:
f8:34:d6:82:43:0b:6a:e6:24:d2:fe:70:8b:c4:29:88:fa:39:
f8:d3:52:10:7f:f1:9e:68:21:39:e6:32:92:f1:13:5a:e0:ae:
db:df:21:30:07:6b:4e:a1:1b:e1:b0:bb:42:0a:9d:65:54:73:
a2:63:50:da:f7:95:11:97:cc:c6:bf:56:1d:b2:f3:13:2d:69:
e8:66:a9:b5:fb:54:a8:c9:86:04:1a:49:19:ee:f3:58:6b:3d:
1b:8f:0b:cc:bc:10:ef:b2:8d:41:cf:91:ba:ec:30:68:d5:da:
de:cc:50:b8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEhQQDd1m+rjsJ/ezMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODc0MTdmZTYtMTc5MC00ODFhLTliZGMtNjU3NGMwZWY3
ZDdjMB4XDTI0MTIyNDE0MDA1M1oXDTI1MDMyNDEzMDA1M1owLzEtMCsGA1UEAxMk
MzZmZjRjMGQtZGI1ZS00NGNkLTk0YmItNjU1M2FlMTk2ZTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLd9Qa3VPp53NKa+10bocYMkXWd5ES/ppL0k
mqdhtmRBdtJQ9Eb9ZoEjw5oJt5tfGPPn0V4s51Lv7PNu9RtXOj4PdVpzJenIurRf
MppKUFaR3aDFKJtIO2RvLeX+EpXiX7VLT/n2FiQBDvirUMKkKnXFzU/47uI2nOPi
vypv0BFibP9YrPioWYH8Sv/Nd+iQvnxV28ncX4DIAF4ugcY0qMIhbAcs+nQaB9XN
PY7A8YmY/E6CnUR9adia/yxqRjvNDax38DWYPZ4mG86DlqFf5SkvAOhwqr3xF2/H
sSyF9y8+Sl+zX3Zq9jxOsLyhi1Vd1gZiMyT8bauH4Foz2L/i9QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAlsDB561M8o3KcSlk3ltdM3zOdQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NzQx
N2ZlNi0xNzkwLTQ4MWEtOWJkYy02NTc0YzBlZjdkN2MvYTY5NWQxYTgtNTdhMi0z
ZjVkLWFiYWMtZWE0NzUyNWQ4OWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODc0MTdmZTYtMTc5MC00ODFhLTli
ZGMtNjU3NGMwZWY3ZDdjLzg3NDE3ZmU2LTE3OTAtNDgxYS05YmRjLTY1NzRjMGVm
N2Q3Yy5jcmwwHwYDVR0jBBgwFoAUurcPAt6acXKk8OlAE68ADtiaXP0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84NzQxN2ZlNi0xNzkwLTQ4MWEtOWJkYy02NTc0
YzBlZjdkN2MuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgGcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAUZoHl0SvfxXmOz4qzpTrZfSQAEuRZWmE6YdAIImX9yRSOoxqgB3UbLJs
qtelxmY0CGLWY4jyp6quXswoSWWpF/utGIex+TT3SCMYfyssZ9hf+bXu73VDjgy5
OqOrn+dWHfPFRc0+WwprAJYMO40S9l8UsYekR6Sw1FZUdsH6OqEyS/RY0wM101Ld
059FoCG4+DTWgkMLauYk0v5wi8QpiPo5+NNSEH/xnmghOeYykvETWuCu298hMAdr
TqEb4bC7QgqdZVRzomNQ2veVEZfMxr9WHbLzEy1p6GaptftUqMmGBBpJGe7zWGs9
G48LzLwQ77KNQc+RuuwwaNXa3sxQuA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:10 2025 by rpki-client