Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/c14db791-f048-3a1f-a855-8856d142305a.roa
File: c14db791-f048-3a1f-a855-8856d142305a.roa (raw, json)
Hash identifier: ojhJpn+6/JzBwGj5XsBILklQHl72/R7+3Bc9LOIyiH0=
Subject key identifier: 92:24:2E:7C:9F:A0:86:EE:4E:7A:8C:7B:FE:82:1B:1D:2C:CC:60:01
Certificate issuer: /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial: 010D0C9F432858481C9A76BD964A51C074B59DA0
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/c14db791-f048-3a1f-a855-8856d142305a.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 22504
IP address blocks: 67.218.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:76:bd:96:4a:51:c0:74:b5:9d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=2c7a09a9-60be-4f61-9cbb-f6283ce6e4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dc:10:15:52:0c:02:89:c1:ba:68:b3:17:d7:
c4:d7:dd:ab:58:41:07:2c:14:8b:a1:7e:0c:9c:2e:
a5:6a:7b:68:32:97:15:09:d3:85:a9:bc:c3:58:6c:
db:f1:2f:03:1b:3a:0f:8d:dc:5e:86:bf:f7:ad:df:
e5:a8:5e:17:3b:8f:81:ce:c3:dd:02:79:e9:bc:0e:
4a:ce:86:20:36:38:ed:05:f8:79:fe:47:b0:c8:1e:
62:ba:64:fa:c4:f0:24:61:77:37:9a:41:32:87:a7:
1c:30:49:25:80:20:9f:90:0f:76:df:12:26:a3:3c:
2b:73:e1:78:1d:15:2f:57:31:f2:2e:4f:50:83:d7:
50:eb:69:ec:06:3f:ff:70:38:9a:8c:23:f7:c3:32:
5c:b9:51:73:5d:8a:a1:3b:7e:6c:5a:0f:d2:15:07:
f0:94:2f:11:bf:25:c1:e9:4b:4f:3b:08:f8:a3:44:
23:6e:15:ea:75:85:83:12:00:11:68:4a:b8:e0:3e:
2b:b4:ef:5e:56:8b:a8:c7:5e:02:ff:40:cf:b4:44:
b2:ed:17:84:ab:85:fc:24:71:ee:52:f0:02:d7:8e:
14:d3:2f:06:b7:2b:36:08:a2:de:d5:98:3e:63:ca:
93:2d:fd:63:25:92:72:6f:75:02:1e:22:03:94:42:
c6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:24:2E:7C:9F:A0:86:EE:4E:7A:8C:7B:FE:82:1B:1D:2C:CC:60:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/c14db791-f048-3a1f-a855-8856d142305a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
X509v3 Authority Key Identifier:
keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.218.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:15:6f:b8:5a:8e:a8:37:f0:da:81:b8:20:e0:c8:1a:96:5c:
f6:11:de:31:8b:26:0b:23:bb:ec:98:59:1e:3e:bc:90:12:ea:
07:34:48:26:16:47:c2:84:0a:b1:20:14:97:20:1f:b9:85:aa:
44:9d:b9:a9:0e:8f:d9:06:ab:e3:e2:32:b1:6d:7f:79:85:ec:
cd:f7:91:28:b4:ac:ac:be:4d:5c:17:ac:0f:b8:fc:a0:56:b5:
b9:75:67:9c:20:12:c2:23:00:51:10:f5:dc:99:73:f9:21:29:
6f:ef:93:d7:54:9b:16:20:ee:3c:6c:4b:2c:4a:14:27:c1:8d:
66:67:c5:ed:b0:dd:93:53:b2:ce:7e:eb:a1:35:f2:d0:42:d8:
99:a5:b3:af:4e:e6:3e:51:d9:d3:5d:b7:fb:f9:dc:ef:91:77:
f8:20:a2:a9:ad:2f:4f:e7:b7:6d:1c:90:2e:50:be:5c:40:a8:
6d:0a:98:08:7b:ce:ff:b8:7e:e8:ec:14:39:91:ad:71:89:e9:
d0:7e:9e:03:de:3d:58:e0:f9:8c:a1:78:ac:fc:c1:6e:09:aa:
27:35:b3:07:14:45:2c:33:ec:94:59:67:27:57:7a:ef:6c:03:
cf:d5:e9:1a:2d:5a:2d:11:59:50:52:1a:cc:f6:e5:c2:d1:7a:
1b:84:0f:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgcmna9lkpRwHS1naAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQwMzc4YTktMTAzYy00NWNhLTg2OWQtN2M5MTE1Yzdi
MGY2MB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk
MmM3YTA5YTktNjBiZS00ZjYxLTljYmItZjYyODNjZTZlNGUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtwQFVIMAonBumizF9fE192rWEEHLBSLoX4M
nC6lantoMpcVCdOFqbzDWGzb8S8DGzoPjdxehr/3rd/lqF4XO4+BzsPdAnnpvA5K
zoYgNjjtBfh5/kewyB5iumT6xPAkYXc3mkEyh6ccMEklgCCfkA923xImozwrc+F4
HRUvVzHyLk9Qg9dQ62nsBj//cDiajCP3wzJcuVFzXYqhO35sWg/SFQfwlC8RvyXB
6UtPOwj4o0QjbhXqdYWDEgARaEq44D4rtO9eVouox14C/0DPtESy7ReEq4X8JHHu
UvAC144U0y8Gtys2CKLe1Zg+Y8qTLf1jJZJyb3UCHiIDlELGsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJIkLnyfoIbuTnqMe/6CGx0szGABMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAz
NzhhOS0xMDNjLTQ1Y2EtODY5ZC03YzkxMTVjN2IwZjYvYzE0ZGI3OTEtZjA0OC0z
YTFmLWE4NTUtODg1NmQxNDIzMDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQwMzc4YTktMTAzYy00NWNhLTg2
OWQtN2M5MTE1YzdiMGY2LzBkMDM3OGE5LTEwM2MtNDVjYS04NjlkLTdjOTExNWM3
YjBmNi5jcmwwHwYDVR0jBBgwFoAUQpcvL3NZ63r1YWANDjlXhTjWG8kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAzNzhhOS0xMDNjLTQ1Y2EtODY5ZC03Yzkx
MTVjN2IwZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9q9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG4Vb7hajqg38NqBuCDgyBqWXPYR3jGLJgsju+yYWR4+vJAS6gc0SCYW
R8KECrEgFJcgH7mFqkSduakOj9kGq+PiMrFtf3mF7M33kSi0rKy+TVwXrA+4/KBW
tbl1Z5wgEsIjAFEQ9dyZc/khKW/vk9dUmxYg7jxsSyxKFCfBjWZnxe2w3ZNTss5+
66E18tBC2Jmls69O5j5R2dNdt/v53O+Rd/ggoqmtL0/nt20ckC5QvlxAqG0KmAh7
zv+4fujsFDmRrXGJ6dB+ngPePVjg+YyheKz8wW4Jqic1swcURSwz7JRZZydXeu9s
A8/V6RotWi0RWVBSGsz25cLRehuED24=
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:44 2025 by rpki-client