Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/9cd55a58-fa29-3814-89e1-3c001606f56f.roa
File: 9cd55a58-fa29-3814-89e1-3c001606f56f.roa (raw, json)
Hash identifier: 9mDiUieIH7T4Tbt4sys1hIPqJq0th6ouRvYLIa4voSk=
Subject key identifier: 48:3D:59:5C:47:4A:57:22:33:33:33:87:FC:7F:B5:C2:E8:61:19:FF
Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial: 010D0C9F432858484AAADEBF2C4640995FCEF600
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/9cd55a58-fa29-3814-89e1-3c001606f56f.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 397171
IP address blocks: 205.213.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:de:bf:2c:46:40:99:5f:ce:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=40a973c8-5683-4dd2-8b8e-8f8ee2c6dd79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:68:33:cc:39:26:91:45:fb:ef:d0:20:8b:d8:
44:05:97:05:1d:e4:a9:4c:e2:33:b6:06:3f:1e:39:
d6:ce:8d:ec:78:fc:e6:82:22:b3:09:e9:a8:13:13:
34:56:91:c3:e6:b0:66:4a:d1:85:7b:4e:b5:61:85:
3a:eb:5c:e3:5f:77:cf:ff:ff:38:4e:7e:f1:42:db:
af:39:30:cd:37:76:f7:fd:1f:79:6d:92:7e:75:93:
e8:39:fc:70:41:c9:fa:e4:26:f9:a9:6d:a3:3a:fe:
3c:66:d3:97:a1:e7:a4:6f:96:31:c5:98:ff:be:0e:
9d:81:38:1f:86:14:cf:f6:3d:57:48:8c:8c:bd:e0:
ee:82:0f:bb:86:61:86:ba:4a:83:4c:9a:d1:ce:f5:
a6:25:4e:06:72:29:60:3c:9a:c2:48:af:8c:0c:26:
57:d6:c7:44:32:36:4e:61:ce:65:86:24:8a:57:27:
aa:c7:6d:eb:a4:81:30:d7:25:4a:f0:c3:45:4f:7a:
7f:62:75:81:a8:90:c5:70:1b:8f:24:0d:92:49:f7:
aa:2f:4e:0f:2c:a7:63:3f:4b:c7:41:65:ac:0b:09:
78:2e:2e:6c:08:2d:8f:35:a8:53:9f:29:e5:dd:fc:
fd:43:3b:73:a3:5a:1a:dc:5c:f7:ce:5e:85:7d:99:
6d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3D:59:5C:47:4A:57:22:33:33:33:87:FC:7F:B5:C2:E8:61:19:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/9cd55a58-fa29-3814-89e1-3c001606f56f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
X509v3 Authority Key Identifier:
keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
sbgp-ipAddrBlock: critical
IPv4:
205.213.160.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:3a:1d:18:d9:76:b6:30:e6:87:c7:3c:67:3a:1f:03:9a:c6:
6b:dc:e2:b0:d2:3e:46:bd:7e:f9:80:16:29:08:d6:d3:65:a1:
e3:35:c0:11:0f:74:80:d5:88:cb:ed:7e:d9:74:c9:d6:8f:4e:
f7:71:f0:08:ac:25:5b:48:49:20:0e:bb:d9:45:ac:84:21:15:
bd:d3:53:ad:71:d2:8b:7f:37:16:71:95:d2:07:54:ab:b9:57:
95:da:a1:11:4b:f6:97:1b:fb:7f:6a:8e:9d:f8:01:e4:51:89:
a1:c2:2a:31:4c:97:66:6c:79:8c:b0:1f:8b:31:94:a9:39:ed:
60:72:14:72:bd:f6:38:32:00:a4:04:67:19:fd:b4:48:86:6b:
c8:cd:e2:e0:5a:ab:b8:83:98:f5:3b:bb:3a:1a:a1:5c:60:5c:
4f:d7:7e:ed:2b:0a:05:91:1c:b5:8a:af:fa:e4:76:8f:ea:32:
84:8d:bc:c3:a8:1e:53:10:2b:ea:74:fd:c1:6b:24:bb:e3:d4:
7b:e9:c5:55:16:a9:2e:fa:43:ed:27:fd:d4:7a:83:c2:95:4a:
7a:d0:37:d0:51:6d:17:48:85:b3:b9:73:00:83:ea:6f:f8:9c:
1e:aa:9b:49:04:87:33:16:52:74:f5:0c:fc:3f:5a:ed:d3:ee:
c1:94:3d:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhKqt6/LEZAmV/O9gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWEwMzM5NTMtOTc1Mi00NzlkLWI5ZWUtNDIxM2NmNjQ4
NDc5MB4XDTI0MTIyMjE0MDA1MVoXDTI1MDMyMjEzMDA1MVowLzEtMCsGA1UEAxMk
NDBhOTczYzgtNTY4My00ZGQyLThiOGUtOGY4ZWUyYzZkZDc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2gzzDkmkUX779Agi9hEBZcFHeSpTOIztgY/
HjnWzo3sePzmgiKzCemoExM0VpHD5rBmStGFe061YYU661zjX3fP//84Tn7xQtuv
OTDNN3b3/R95bZJ+dZPoOfxwQcn65Cb5qW2jOv48ZtOXoeekb5YxxZj/vg6dgTgf
hhTP9j1XSIyMveDugg+7hmGGukqDTJrRzvWmJU4GcilgPJrCSK+MDCZX1sdEMjZO
Yc5lhiSKVyeqx23rpIEw1yVK8MNFT3p/YnWBqJDFcBuPJA2SSfeqL04PLKdjP0vH
QWWsCwl4Li5sCC2PNahTnynl3fz9Qztzo1oa3Fz3zl6FfZltowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEg9WVxHSlciMzMzh/x/tcLoYRn/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAz
Mzk1My05NzUyLTQ3OWQtYjllZS00MjEzY2Y2NDg0NzkvOWNkNTVhNTgtZmEyOS0z
ODE0LTg5ZTEtM2MwMDE2MDZmNTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWEwMzM5NTMtOTc1Mi00NzlkLWI5
ZWUtNDIxM2NmNjQ4NDc5L2FhMDMzOTUzLTk3NTItNDc5ZC1iOWVlLTQyMTNjZjY0
ODQ3OS5jcmwwHwYDVR0jBBgwFoAUhCZLjuQsOm5/g8Ywel2MTTjmuLMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAzMzk1My05NzUyLTQ3OWQtYjllZS00MjEz
Y2Y2NDg0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzdWgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADc6HRjZdrYw5ofHPGc6HwOaxmvc4rDSPka9fvmAFikI1tNloeM1wBEP
dIDViMvtftl0ydaPTvdx8AisJVtISSAOu9lFrIQhFb3TU61x0ot/NxZxldIHVKu5
V5XaoRFL9pcb+39qjp34AeRRiaHCKjFMl2ZseYywH4sxlKk57WByFHK99jgyAKQE
Zxn9tEiGa8jN4uBaq7iDmPU7uzoaoVxgXE/Xfu0rCgWRHLWKr/rkdo/qMoSNvMOo
HlMQK+p0/cFrJLvj1HvpxVUWqS76Q+0n/dR6g8KVSnrQN9BRbRdIhbO5cwCD6m/4
nB6qm0kEhzMWUnT1DPw/Wu3T7sGUPd0=
-----END CERTIFICATE-----
Generated at Mon Apr 28 14:36:37 2025 by rpki-client