Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/03bd337f-f3c0-3826-804b-8dd09e9e7827.roa
File: 03bd337f-f3c0-3826-804b-8dd09e9e7827.roa (raw, json)
Hash identifier: LaRGxwQJWCsIZ3h4qZ6uZmbW5MjKVxTVwweNFoMRvfA=
Subject key identifier: 32:B5:DB:BA:EE:E5:31:6F:14:48:39:EF:7E:78:10:86:84:00:0B:01
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584863CB15F5D1B6F19F788C3EC0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/03bd337f-f3c0-3826-804b-8dd09e9e7827.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 64267
IP address blocks: 130.254.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:15:f5:d1:b6:f1:9f:78:8c:3e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=3c38355b-437f-4fa5-ad63-66d5e57bf7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ae:72:bc:2e:b7:8e:7c:16:6b:d5:ff:97:1f:
db:4d:70:88:37:ba:ff:7f:3a:c4:2d:be:57:16:31:
e9:85:ef:f4:f4:e1:bc:1b:ec:2e:31:ac:14:51:a3:
60:16:04:cf:f5:12:41:bb:15:44:b1:4d:42:6f:0f:
63:c9:c8:4d:65:50:1b:0a:01:d4:1c:55:52:56:66:
2b:1f:c4:04:6e:e2:80:7e:51:f7:44:f8:e4:99:81:
af:b2:fb:ab:62:93:68:ed:72:b5:b3:b1:f8:1a:ad:
82:a3:a8:72:96:5a:c9:a2:c8:da:e0:58:ab:4d:8c:
cc:62:14:0b:94:53:53:1b:22:4a:66:b3:90:a3:50:
50:05:f7:d2:a7:ba:1d:42:40:6c:bc:c5:17:3c:12:
99:14:71:3d:d5:b7:2c:ab:5f:ae:fa:c3:50:3e:57:
0d:ed:17:f5:4e:09:70:43:3c:24:66:5a:1c:9c:3e:
75:1c:75:dd:22:2c:26:54:ca:1e:fb:bf:7a:9a:b6:
5e:8f:1d:8f:56:a5:ee:93:56:60:fd:51:64:e0:ec:
04:9a:80:9b:7e:07:00:df:74:11:19:73:b3:94:f6:
03:94:4c:c2:e2:e0:d7:fc:ff:30:df:2f:7e:c7:48:
d4:3d:b6:1c:bd:5a:7a:6d:15:f0:eb:f0:4c:b1:8b:
fd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B5:DB:BA:EE:E5:31:6F:14:48:39:EF:7E:78:10:86:84:00:0B:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/03bd337f-f3c0-3826-804b-8dd09e9e7827.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
130.254.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:c3:4b:16:68:fb:71:f4:e8:34:8e:53:b0:d9:5e:da:b6:f5:
fc:ad:49:20:f5:76:98:37:0e:ab:8f:03:d0:92:5f:98:2a:ef:
59:c9:cd:65:b6:2e:a7:2d:d3:01:93:3c:1b:21:46:9a:b1:b3:
fd:b3:b5:98:72:94:95:a5:1d:f0:f7:46:da:90:62:d2:6c:01:
1e:3b:08:4b:d2:11:e3:d7:1d:cb:a0:58:a3:93:1e:0d:62:49:
c6:20:e4:84:8d:bd:aa:61:fb:f7:be:f2:4b:87:00:fc:cc:08:
17:5a:e3:00:6b:c8:40:c7:c0:74:35:2f:18:46:5c:88:0f:54:
d1:dc:39:4b:36:9a:06:b7:e9:75:a8:2f:cc:88:25:5d:18:6f:
8e:70:72:f5:5e:25:c2:b0:00:11:f3:32:65:8d:f4:39:fa:67:
1b:50:19:b3:15:36:96:8e:09:30:e5:2e:fa:ca:66:e1:29:66:
cc:51:a6:57:f7:37:86:f3:9f:33:f8:ad:42:c3:84:12:f5:bf:
2b:8c:71:e7:f7:93:db:f2:8b:72:48:c1:40:64:33:d9:97:eb:
dc:5c:7b:c5:a7:38:3a:a5:27:95:0c:ba:f4:53:c6:2d:55:9f:
25:b9:2e:a0:ca:1e:fa:07:de:64:35:c8:83:7f:f5:a9:26:b1:
40:1e:83:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhjyxX10bbxn3iMPsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI0MTIzMTE0MDA1M1oXDTI1MDMzMTEzMDA1M1owLzEtMCsGA1UEAxMk
M2MzODM1NWItNDM3Zi00ZmE1LWFkNjMtNjZkNWU1N2JmN2Q2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkq5yvC63jnwWa9X/lx/bTXCIN7r/fzrELb5X
FjHphe/09OG8G+wuMawUUaNgFgTP9RJBuxVEsU1Cbw9jychNZVAbCgHUHFVSVmYr
H8QEbuKAflH3RPjkmYGvsvurYpNo7XK1s7H4Gq2Co6hyllrJosja4FirTYzMYhQL
lFNTGyJKZrOQo1BQBffSp7odQkBsvMUXPBKZFHE91bcsq1+u+sNQPlcN7Rf1Tglw
QzwkZlocnD51HHXdIiwmVMoe+796mrZejx2PVqXuk1Zg/VFk4OwEmoCbfgcA33QR
GXOzlPYDlEzC4uDX/P8w3y9+x0jUPbYcvVp6bRXw6/BMsYv9nQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDK127ru5TFvFEg57354EIaEAAsBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMDNiZDMzN2YtZjNjMC0z
ODI2LTgwNGItOGRkMDllOWU3ODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv5oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALPDSxZo+3H06DSOU7DZXtq29fytSSD1dpg3DquPA9CSX5gq71nJzWW2
Lqct0wGTPBshRpqxs/2ztZhylJWlHfD3RtqQYtJsAR47CEvSEePXHcugWKOTHg1i
ScYg5ISNvaph+/e+8kuHAPzMCBda4wBryEDHwHQ1LxhGXIgPVNHcOUs2mga36XWo
L8yIJV0Yb45wcvVeJcKwABHzMmWN9Dn6ZxtQGbMVNpaOCTDlLvrKZuEpZsxRplf3
N4bznzP4rULDhBL1vyuMcef3k9vyi3JIwUBkM9mX69xce8WnODqlJ5UMuvRTxi1V
nyW5LqDKHvoH3mQ1yIN/9akmsUAegxA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:02:41 2025 by rpki-client