Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15/ace4f36f-3b53-3796-be69-6548ad3e7057.roa
File: ace4f36f-3b53-3796-be69-6548ad3e7057.roa (raw, json)
Hash identifier: EVsE2IqciWGfaqRieXZgP2b/bBw6NnUYpKw6hFJoBeY=
Subject key identifier: 67:EA:4F:E7:DC:71:FC:53:7E:25:5C:18:22:45:23:A3:C6:30:3D:9F
Certificate issuer: /CN=d38fa32a-a6da-4615-8255-2c818c06ef15
Certificate serial: 010D0C9F4328584843B00ABA12683360C9C73A00
Authority key identifier: B0:67:1C:77:5A:84:56:36:CE:B2:69:45:C5:6F:E4:A3:1D:07:07:6C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15/ace4f36f-3b53-3796-be69-6548ad3e7057.roa
Signing time: Fri 20 Dec 2024 02:00:40 +0000
ROA not before: Fri 20 Dec 2024 02:00:40 +0000
ROA not after: Thu 20 Mar 2025 01:00:40 +0000
asID: 400817
IP address blocks: 204.107.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:43:b0:0a:ba:12:68:33:60:c9:c7:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38fa32a-a6da-4615-8255-2c818c06ef15
Validity
Not Before: Dec 20 02:00:40 2024 GMT
Not After : Mar 20 01:00:40 2025 GMT
Subject: CN=f7999590-bcac-4bf7-bfea-dabdf7734945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1e:69:6c:80:5b:b3:21:40:ce:98:4e:e1:e4:
82:11:ad:66:7b:71:ca:93:91:89:b2:31:5e:ad:a1:
8c:7e:93:60:9d:42:fe:60:71:39:5c:93:a0:c6:eb:
0f:f7:54:b6:3a:f4:f1:17:91:5d:6b:57:25:fd:06:
b4:e0:dd:07:a4:9c:e6:7c:c6:48:d8:79:ee:36:88:
17:23:64:f3:6c:d9:c6:43:13:dd:67:e2:e8:58:de:
79:a2:6d:c0:27:66:b3:dc:00:9b:65:b4:06:9c:74:
73:4f:01:d6:41:c0:4a:57:df:39:17:76:42:8c:8a:
58:54:04:3a:a9:27:fe:55:05:e9:8e:cc:24:28:94:
3f:31:cd:b5:9b:e9:42:fd:bd:23:56:02:1c:1d:a6:
c8:d8:5d:47:f1:0e:ba:ac:88:58:a5:8a:9c:cc:f3:
e4:be:48:f4:91:51:dc:8c:89:60:b7:e4:21:bf:48:
ec:df:e3:53:cd:14:ed:2d:99:07:96:39:6a:4a:91:
bb:2e:ac:1d:d3:54:9f:d8:11:13:3f:63:b1:d4:18:
25:5d:33:19:78:2a:ff:61:a8:04:b8:70:30:f3:8e:
fe:da:95:c1:86:4d:db:33:8e:c8:7d:09:65:31:10:
ff:a0:23:8f:5d:d5:cf:57:a2:05:58:79:53:4c:98:
41:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EA:4F:E7:DC:71:FC:53:7E:25:5C:18:22:45:23:A3:C6:30:3D:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15/ace4f36f-3b53-3796-be69-6548ad3e7057.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15/d38fa32a-a6da-4615-8255-2c818c06ef15.crl
X509v3 Authority Key Identifier:
keyid:B0:67:1C:77:5A:84:56:36:CE:B2:69:45:C5:6F:E4:A3:1D:07:07:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15.cer
sbgp-ipAddrBlock: critical
IPv4:
204.107.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:57:be:eb:85:00:ba:c2:60:ce:4b:62:e1:7d:61:85:b9:76:
87:5e:6a:c0:f6:dc:48:17:b9:0b:d5:f7:a7:d1:04:d9:b2:8f:
61:60:9d:c5:cf:61:89:8e:55:bf:f8:3d:23:30:10:b8:f5:79:
46:7b:d0:e1:f8:ca:c5:2f:c5:ca:03:bd:ef:41:58:d9:63:c3:
b5:af:f6:69:65:c4:7c:af:48:84:7b:7a:1e:13:4d:2a:a9:72:
db:ff:ad:bd:a6:73:22:0f:5d:2d:fb:e0:65:b3:ff:29:1b:1f:
a6:07:38:02:ea:9c:2e:45:5b:31:73:e7:da:e5:e2:fc:88:8c:
47:d1:8c:9a:0d:ce:36:3b:82:16:a4:c9:64:d2:57:c5:05:e9:
1f:b6:87:15:bc:4e:b1:a6:41:9a:72:a8:0f:c1:56:be:3e:8a:
fd:ee:48:11:d7:14:82:c3:3c:b1:ef:79:f0:e0:03:e5:f3:1d:
81:ad:fc:77:37:71:a0:10:ba:75:14:9a:a0:1b:57:7d:0e:99:
30:20:09:d0:a6:54:37:f9:1d:44:07:15:13:cb:4f:c2:da:91:
97:13:58:37:72:00:97:57:d8:f7:f9:a3:e3:a4:15:d3:67:fc:
68:03:05:4a:72:d9:dc:a2:57:80:3e:e5:66:cc:b0:88:1d:5a:
da:30:3c:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhDsAq6EmgzYMnHOgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDM4ZmEzMmEtYTZkYS00NjE1LTgyNTUtMmM4MThjMDZl
ZjE1MB4XDTI0MTIyMDAyMDA0MFoXDTI1MDMyMDAxMDA0MFowLzEtMCsGA1UEAxMk
Zjc5OTk1OTAtYmNhYy00YmY3LWJmZWEtZGFiZGY3NzM0OTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmB5pbIBbsyFAzphO4eSCEa1me3HKk5GJsjFe
raGMfpNgnUL+YHE5XJOgxusP91S2OvTxF5Fda1cl/Qa04N0HpJzmfMZI2HnuNogX
I2TzbNnGQxPdZ+LoWN55om3AJ2az3ACbZbQGnHRzTwHWQcBKV985F3ZCjIpYVAQ6
qSf+VQXpjswkKJQ/Mc21m+lC/b0jVgIcHabI2F1H8Q66rIhYpYqczPPkvkj0kVHc
jIlgt+Qhv0js3+NTzRTtLZkHljlqSpG7Lqwd01Sf2BETP2Ox1BglXTMZeCr/YagE
uHAw847+2pXBhk3bM47IfQllMRD/oCOPXdXPV6IFWHlTTJhBpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGfqT+fccfxTfiVcGCJFI6PGMD2fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kMzhm
YTMyYS1hNmRhLTQ2MTUtODI1NS0yYzgxOGMwNmVmMTUvYWNlNGYzNmYtM2I1My0z
Nzk2LWJlNjktNjU0OGFkM2U3MDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDM4ZmEzMmEtYTZkYS00NjE1LTgy
NTUtMmM4MThjMDZlZjE1L2QzOGZhMzJhLWE2ZGEtNDYxNS04MjU1LTJjODE4YzA2
ZWYxNS5jcmwwHwYDVR0jBBgwFoAUsGccd1qEVjbOsmlFxW/kox0HB2wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kMzhmYTMyYS1hNmRhLTQ2MTUtODI1NS0yYzgx
OGMwNmVmMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGtZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKVXvuuFALrCYM5LYuF9YYW5dodeasD23EgXuQvV96fRBNmyj2FgncXP
YYmOVb/4PSMwELj1eUZ70OH4ysUvxcoDve9BWNljw7Wv9mllxHyvSIR7eh4TTSqp
ctv/rb2mcyIPXS374GWz/ykbH6YHOALqnC5FWzFz59rl4vyIjEfRjJoNzjY7ghak
yWTSV8UF6R+2hxW8TrGmQZpyqA/BVr4+iv3uSBHXFILDPLHvefDgA+XzHYGt/Hc3
caAQunUUmqAbV30OmTAgCdCmVDf5HUQHFRPLT8LakZcTWDdyAJdX2Pf5o+OkFdNn
/GgDBUpy2dyiV4A+5WbMsIgdWtowPPQ=
-----END CERTIFICATE-----
Generated at Wed Apr 30 08:20:56 2025 by rpki-client