Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/fb4f7728-2f5d-3f95-93ac-eb7b95fcd6ea.roa
File: fb4f7728-2f5d-3f95-93ac-eb7b95fcd6ea.roa (raw, json)
Hash identifier: 2D+nFu+8kDSRcJSov8xvRzlZlPjZ03ewpr5K0DiWLqU=
Subject key identifier: 5E:BC:AD:66:04:F1:CE:27:77:18:F8:8A:82:56:71:8B:FE:78:C2:29
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F432858486C2B092BAB0EC33E76754340
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/fb4f7728-2f5d-3f95-93ac-eb7b95fcd6ea.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 21859
IP address blocks: 128.1.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:09:2b:ab:0e:c3:3e:76:75:43:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=8993d310-a50f-4f02-8d58-54a73ae5b11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e3:a1:af:18:f1:07:6d:42:13:d1:bb:aa:d9:
16:e1:98:4b:2d:c1:73:3b:33:73:1b:87:5a:6f:f5:
53:a3:9a:e7:9f:44:3e:16:c7:5b:e5:a6:9b:38:eb:
27:a8:7d:e2:95:11:51:8c:fb:03:68:01:9e:ca:0c:
1f:bb:15:c7:34:60:8e:6d:a5:f7:8e:cb:e3:00:4d:
d3:2d:04:77:4c:3c:8d:5b:ea:15:2b:01:0e:ad:64:
70:64:a8:9d:72:6e:3c:d8:e9:d9:9b:41:22:ce:e5:
6c:eb:41:4a:ad:a3:5f:4e:11:3c:15:0c:5d:40:e2:
9e:c2:fe:60:0a:e8:78:c2:1d:79:0d:f3:3f:36:4c:
cc:0c:19:74:52:28:eb:75:bf:65:12:40:0e:e9:72:
ce:68:6d:2d:33:00:c0:17:8e:9d:d0:00:20:e5:b4:
d6:bc:e4:c4:d0:80:28:3b:87:19:f2:de:8c:36:44:
bb:59:15:f6:26:77:3d:af:bb:6e:73:1d:fc:74:bf:
cf:36:21:4e:9c:89:7c:1c:ce:e1:13:9b:a0:31:2f:
bd:20:41:61:1d:cd:fe:44:6f:98:d9:0a:37:37:26:
8e:bc:2a:1f:2b:98:b1:e9:d9:c8:2a:a1:4c:99:bf:
d3:4c:8c:45:94:7a:07:6d:08:78:46:05:1b:40:7d:
b8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BC:AD:66:04:F1:CE:27:77:18:F8:8A:82:56:71:8B:FE:78:C2:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/fb4f7728-2f5d-3f95-93ac-eb7b95fcd6ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
128.1.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:b5:65:ae:57:e9:20:f5:53:89:90:41:44:9e:31:7a:95:71:
94:4d:72:61:db:4e:b5:62:5c:f7:06:83:f0:d5:dd:bb:bc:6e:
6a:86:dd:6b:f3:1f:df:db:81:40:46:ae:f8:7b:80:d0:81:be:
92:37:b4:c5:57:46:15:66:82:e5:aa:34:01:b1:47:09:ac:5c:
4d:6b:98:e0:b1:0a:1a:8e:19:15:d9:47:cd:d1:38:55:53:2f:
62:5b:b4:2e:77:ec:cc:68:11:af:ce:d3:79:a0:bf:da:34:e9:
a1:d6:0a:57:97:c1:2a:f3:77:74:64:e1:24:3a:09:c5:40:ad:
e1:ad:64:95:74:fb:c1:26:2e:01:96:0f:db:64:11:2c:54:3f:
e7:6f:36:7a:36:64:80:9f:ad:ad:82:b4:ed:22:3c:a6:6b:64:
c8:a0:cf:8e:72:63:7c:47:33:5a:64:e2:f0:91:29:88:89:2b:
65:2b:af:23:60:70:bd:ca:38:6f:79:94:e7:d4:95:fa:80:a5:
fe:50:64:44:6f:c4:da:44:d0:75:98:6d:09:23:4b:86:30:ad:
21:08:5f:05:81:10:0a:61:0b:34:68:10:c6:a2:3d:60:f0:ed:
cf:04:d6:44:82:34:dd:67:0f:94:50:93:cd:35:3b:8c:92:68:
5b:f3:2b:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKwkrqw7DPnZ1Q0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk
ODk5M2QzMTAtYTUwZi00ZjAyLThkNTgtNTRhNzNhZTViMTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleOhrxjxB21CE9G7qtkW4ZhLLcFzOzNzG4da
b/VTo5rnn0Q+Fsdb5aabOOsnqH3ilRFRjPsDaAGeygwfuxXHNGCObaX3jsvjAE3T
LQR3TDyNW+oVKwEOrWRwZKidcm482OnZm0EizuVs60FKraNfThE8FQxdQOKewv5g
Cuh4wh15DfM/NkzMDBl0Uijrdb9lEkAO6XLOaG0tMwDAF46d0AAg5bTWvOTE0IAo
O4cZ8t6MNkS7WRX2Jnc9r7tucx38dL/PNiFOnIl8HM7hE5ugMS+9IEFhHc3+RG+Y
2Qo3NyaOvCofK5ix6dnIKqFMmb/TTIxFlHoHbQh4RgUbQH24jQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF68rWYE8c4ndxj4ioJWcYv+eMIpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvZmI0Zjc3MjgtMmY1ZC0z
Zjk1LTkzYWMtZWI3Yjk1ZmNkNmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAHeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABm1Za5X6SD1U4mQQUSeMXqVcZRNcmHbTrViXPcGg/DV3bu8bmqG3Wvz
H9/bgUBGrvh7gNCBvpI3tMVXRhVmguWqNAGxRwmsXE1rmOCxChqOGRXZR83ROFVT
L2JbtC537MxoEa/O03mgv9o06aHWCleXwSrzd3Rk4SQ6CcVAreGtZJV0+8EmLgGW
D9tkESxUP+dvNno2ZICfra2CtO0iPKZrZMigz45yY3xHM1pk4vCRKYiJK2UrryNg
cL3KOG95lOfUlfqApf5QZERvxNpE0HWYbQkjS4YwrSEIXwWBEAphCzRoEMaiPWDw
7c8E1kSCNN1nD5RQk801O4ySaFvzK3c=
-----END CERTIFICATE-----
Generated at Sun May 11 00:45:17 2025 by rpki-client