Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/65c907f0-46c1-3a8e-832f-efc39b353c41.roa
File: 65c907f0-46c1-3a8e-832f-efc39b353c41.roa (raw, json)
Hash identifier: Shedq0XFyNz8XJK6pO5rG/ku4o6KNryupW176J64iU0=
Subject key identifier: 9A:17:BB:91:2F:B7:1E:06:78:83:F3:D7:83:83:F5:F9:F9:E9:08:DE
Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial: 010D0C9F4328584832F02E2C896F6EB045226A80
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/65c907f0-46c1-3a8e-832f-efc39b353c41.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 36681
IP address blocks: 24.38.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:2e:2c:89:6f:6e:b0:45:22:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=05e2a0db-8cb6-4aee-ac8c-defb27df0deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ea:a1:ea:76:f8:01:3d:9e:73:24:e7:57:da:
0b:63:fe:6b:f8:3e:c4:6a:af:60:b7:6d:fd:07:6f:
9d:2d:44:f3:09:38:24:17:46:8d:d6:8b:ef:0b:0e:
59:64:90:62:03:31:3a:60:97:ec:0e:a9:d7:f2:f9:
62:47:b7:47:bd:4e:59:f6:06:c6:d3:f5:d8:62:db:
6d:f2:d4:a0:c5:29:1b:ca:cd:5a:34:d1:4f:a3:42:
4a:44:76:13:68:2f:f5:f8:cc:5e:8c:59:15:1b:dd:
b2:d7:2a:ad:b0:d7:b8:cf:5f:39:13:44:10:f5:3b:
d3:c5:0c:4a:a8:d7:cd:d2:50:ae:5e:c7:67:f7:52:
fb:68:bf:cf:69:53:ff:30:70:2e:64:2e:18:c6:73:
26:92:01:21:81:16:dd:aa:be:32:8a:8b:9e:d3:b6:
c6:1a:e5:32:be:29:67:4e:69:76:16:13:bf:2f:44:
1d:82:18:75:8f:db:ba:13:18:06:45:0d:d8:85:cf:
fc:ad:ee:25:7f:c0:33:9f:27:5b:b6:e9:d4:80:ae:
92:5e:fa:b1:80:bc:cc:ba:e9:5d:f6:5b:fd:51:11:
6a:d3:e7:53:8d:71:75:6d:a0:9f:6c:af:4a:a1:0e:
46:0b:4b:a4:d1:f6:30:50:39:2c:0f:10:de:26:be:
b1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:17:BB:91:2F:B7:1E:06:78:83:F3:D7:83:83:F5:F9:F9:E9:08:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/65c907f0-46c1-3a8e-832f-efc39b353c41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
X509v3 Authority Key Identifier:
keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
sbgp-ipAddrBlock: critical
IPv4:
24.38.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:0d:c7:48:b5:1c:31:f3:d7:3f:a9:03:5f:2a:bb:a0:98:56:
6d:a2:2f:73:df:54:a3:f8:a5:7e:a8:73:1b:34:22:f0:5b:c2:
c8:27:c6:ec:81:c3:e1:3f:c7:e0:74:51:e2:4d:05:1e:53:fc:
5e:ca:35:8a:28:0d:74:36:b3:90:ac:92:72:65:7b:81:1a:9b:
92:e9:a9:a8:7d:cd:ac:83:d4:8d:12:ff:a7:41:e2:5d:8c:3f:
9c:c7:ad:39:72:fb:dc:1c:64:b0:e9:d2:33:7e:d6:ae:4b:a4:
35:9b:13:74:80:ac:5a:40:e5:38:70:20:2b:e6:dd:f6:97:b4:
d5:7f:4e:f4:d1:d6:b3:7b:de:ab:68:c8:05:7e:6c:52:82:71:
2e:52:68:1c:da:8e:fd:73:32:61:b7:7d:47:7b:ab:18:02:61:
ed:54:49:2c:0a:06:a0:cf:9b:8a:ef:a1:42:a4:f7:1c:29:54:
13:6c:79:b0:37:56:39:a0:84:58:cd:b7:82:f2:65:fc:94:f2:
e8:03:ca:d0:93:0a:25:9c:25:cf:33:2d:f4:81:44:b7:8e:5e:
ca:15:d9:ab:95:fa:43:70:f8:bb:b4:04:1a:44:59:c4:83:0d:
fa:fd:0f:11:b4:e3:99:00:83:e4:72:06:23:6c:1c:ba:bd:9f:
a9:41:97:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8C4siW9usEUiaoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh
ZDE1MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
MDVlMmEwZGItOGNiNi00YWVlLWFjOGMtZGVmYjI3ZGYwZGViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOqh6nb4AT2ecyTnV9oLY/5r+D7Eaq9gt239
B2+dLUTzCTgkF0aN1ovvCw5ZZJBiAzE6YJfsDqnX8vliR7dHvU5Z9gbG0/XYYttt
8tSgxSkbys1aNNFPo0JKRHYTaC/1+MxejFkVG92y1yqtsNe4z185E0QQ9TvTxQxK
qNfN0lCuXsdn91L7aL/PaVP/MHAuZC4YxnMmkgEhgRbdqr4yioue07bGGuUyviln
Tml2FhO/L0Qdghh1j9u6ExgGRQ3Yhc/8re4lf8AznydbtunUgK6SXvqxgLzMuuld
9lv9URFq0+dTjXF1baCfbK9KoQ5GC0uk0fYwUDksDxDeJr6xHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJoXu5Evtx4GeIPz14OD9fn56QjeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4
YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvNjVjOTA3ZjAtNDZjMS0z
YThlLTgzMmYtZWZjMzliMzUzYzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh
YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw
YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl
OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGCZYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAwNx0i1HDHz1z+pA18qu6CYVm2iL3PfVKP4pX6ocxs0IvBbwsgnxuyB
w+E/x+B0UeJNBR5T/F7KNYooDXQ2s5CsknJle4Eam5Lpqah9zayD1I0S/6dB4l2M
P5zHrTly+9wcZLDp0jN+1q5LpDWbE3SArFpA5ThwICvm3faXtNV/TvTR1rN73qto
yAV+bFKCcS5SaBzajv1zMmG3fUd7qxgCYe1USSwKBqDPm4rvoUKk9xwpVBNsebA3
VjmghFjNt4LyZfyU8ugDytCTCiWcJc8zLfSBRLeOXsoV2auV+kNw+Lu0BBpEWcSD
Dfr9DxG045kAg+RyBiNsHLq9n6lBly4=
-----END CERTIFICATE-----
Generated at Mon May 12 09:45:41 2025 by rpki-client