Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/db056eb4-4785-3e79-924d-d9def55d1b10.roa
File: db056eb4-4785-3e79-924d-d9def55d1b10.roa (raw, json)
Hash identifier: 5WmzEYxcvlNfEhBAnMVbjEl0eUECUB4iWEXf/jizYvg=
Subject key identifier: 50:85:4A:BA:72:9F:53:3F:8E:DC:F7:F0:E4:77:7C:4A:93:EE:47:FA
Certificate issuer: /CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
Certificate serial: 010D0C9F4328584827C5479B99D8CD797111A760
Authority key identifier: 34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/db056eb4-4785-3e79-924d-d9def55d1b10.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 11659
IP address blocks: 169.147.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:47:9b:99:d8:cd:79:71:11:a7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=09472ca4-0ac9-4f95-a96a-b6760ae8e70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cd:46:de:b1:08:cc:74:83:21:af:ed:1c:84:
2a:35:85:da:c9:5e:39:6a:60:7e:75:3e:67:c8:01:
1c:08:66:5d:b1:b1:c7:e1:eb:34:1f:80:37:2b:e1:
9b:d3:99:aa:53:0e:c7:9f:c5:ba:85:43:52:5d:71:
09:ed:6a:10:e8:16:df:30:52:d8:19:89:33:bc:ce:
6f:ba:4f:3a:a9:c3:95:9e:96:1c:b4:80:05:9d:72:
6c:c4:83:31:1f:79:4c:cf:3b:fe:57:89:6a:93:b3:
09:ca:2c:3e:b1:69:e9:d9:38:25:d0:93:ff:2f:e4:
3c:5a:96:7d:dc:2b:17:61:dd:cf:00:f2:08:04:69:
af:7d:d7:fc:ee:7d:c7:40:1e:22:3b:0c:5e:bc:84:
c7:f9:56:55:ea:a1:00:53:74:2b:6b:0e:7f:07:35:
c2:81:59:7c:d2:62:7b:1e:35:32:67:b7:df:95:6c:
a1:a6:b0:f9:06:4a:2c:3a:1b:dc:01:9a:4d:11:24:
b5:e3:4a:8f:bd:31:d6:b0:9e:c0:29:82:6a:3b:93:
fb:d2:56:7f:d0:cc:f6:1c:54:9c:7c:fe:9c:72:a6:
ec:23:b1:ea:d4:0f:4b:78:0a:6a:a0:92:34:6c:87:
bf:80:6b:44:9b:e3:3b:de:61:a0:b1:4e:f5:f9:2c:
94:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:85:4A:BA:72:9F:53:3F:8E:DC:F7:F0:E4:77:7C:4A:93:EE:47:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/db056eb4-4785-3e79-924d-d9def55d1b10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.crl
X509v3 Authority Key Identifier:
keyid:34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
sbgp-ipAddrBlock: critical
IPv4:
169.147.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:36:81:76:b5:47:ba:4d:5a:54:89:5e:d0:a7:d9:26:a7:3b:
9c:aa:5e:b5:36:f7:9f:0b:a0:5d:bb:63:41:ec:80:69:3e:e0:
80:a3:1d:ae:bd:d3:c8:fd:05:79:f4:df:64:e0:15:0e:5e:ad:
b5:c1:fe:a7:de:85:0c:45:3d:88:67:a0:52:60:ab:5d:17:c6:
64:13:d9:9b:5f:dd:f3:17:7a:ca:32:56:a0:df:05:ff:20:7e:
df:29:e5:6f:13:47:ad:aa:86:7c:e4:09:02:03:3a:87:b1:a2:
31:e8:5e:be:1f:b9:04:55:55:36:27:61:ed:26:cc:6d:44:48:
86:24:41:1a:b9:53:71:a5:a7:c0:6b:0a:09:45:6d:bd:c4:b3:
5f:e6:eb:6c:ed:5a:46:3f:4c:54:74:32:e2:40:a8:c7:0e:6e:
df:7a:a2:4e:d3:f8:07:ac:6b:f9:54:3f:5c:36:70:cf:0c:4a:
65:db:79:20:8b:cc:57:cf:eb:7f:14:c1:8e:bb:2b:58:a4:4c:
8a:3b:86:52:e6:8b:5f:c3:35:91:6b:62:6b:b6:b3:90:9a:15:
b3:22:a4:ed:2d:f1:91:04:5d:e2:b7:eb:fc:5e:c9:6d:32:a6:
7c:6d:10:f5:e6:ef:03:52:c6:83:d5:8b:4b:58:3b:de:5f:96:
d4:c7:98:9b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEgnxUebmdjNeXERp2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTBiZmUwNWUtNGNiOC00ZjczLThlY2UtNDhlYmM4MmQw
ZDA5MB4XDTI0MTIxMDAyMDA0MFoXDTI1MDMxMDAxMDA0MFowLzEtMCsGA1UEAxMk
MDk0NzJjYTQtMGFjOS00Zjk1LWE5NmEtYjY3NjBhZThlNzBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc1G3rEIzHSDIa/tHIQqNYXayV45amB+dT5n
yAEcCGZdsbHH4es0H4A3K+Gb05mqUw7Hn8W6hUNSXXEJ7WoQ6BbfMFLYGYkzvM5v
uk86qcOVnpYctIAFnXJsxIMxH3lMzzv+V4lqk7MJyiw+sWnp2Tgl0JP/L+Q8WpZ9
3CsXYd3PAPIIBGmvfdf87n3HQB4iOwxevITH+VZV6qEAU3Qraw5/BzXCgVl80mJ7
HjUyZ7fflWyhprD5BkosOhvcAZpNESS140qPvTHWsJ7AKYJqO5P70lZ/0Mz2HFSc
fP6ccqbsI7Hq1A9LeApqoJI0bIe/gGtEm+M73mGgsU71+SyU7wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFCFSrpyn1M/jtz38OR3fEqT7kf6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lMGJm
ZTA1ZS00Y2I4LTRmNzMtOGVjZS00OGViYzgyZDBkMDkvZGIwNTZlYjQtNDc4NS0z
ZTc5LTkyNGQtZDlkZWY1NWQxYjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZTBiZmUwNWUtNGNiOC00ZjczLThl
Y2UtNDhlYmM4MmQwZDA5L2UwYmZlMDVlLTRjYjgtNGY3My04ZWNlLTQ4ZWJjODJk
MGQwOS5jcmwwHwYDVR0jBBgwFoAUNIflqah71XuldrQdvyHgi0couREwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9lMGJmZTA1ZS00Y2I4LTRmNzMtOGVjZS00OGVi
YzgyZDBkMDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqZMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAczaBdrVHuk1aVIle0KfZJqc7nKpetTb3nwugXbtjQeyAaT7ggKMdrr3T
yP0FefTfZOAVDl6ttcH+p96FDEU9iGegUmCrXRfGZBPZm1/d8xd6yjJWoN8F/yB+
3ynlbxNHraqGfOQJAgM6h7GiMehevh+5BFVVNidh7SbMbURIhiRBGrlTcaWnwGsK
CUVtvcSzX+brbO1aRj9MVHQy4kCoxw5u33qiTtP4B6xr+VQ/XDZwzwxKZdt5IIvM
V8/rfxTBjrsrWKRMijuGUuaLX8M1kWtia7azkJoVsyKk7S3xkQRd4rfr/F7JbTKm
fG0Q9ebvA1LGg9WLS1g73l+W1MeYmw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 13:58:14 2025 by rpki-client