Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c5f832f0-28d0-357b-9710-b9890d67dfc5.roa
File: c5f832f0-28d0-357b-9710-b9890d67dfc5.roa (raw, json)
Hash identifier: G6YSjNXP2N1ilp28QSHXinRLzt8s3X/WSVqcwb48kKA=
Subject key identifier: CF:05:E7:48:88:AE:D7:27:85:ED:FF:F3:F1:2E:3F:46:6E:9E:C1:70
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858482D5A8C9F75061DAF890A7480
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c5f832f0-28d0-357b-9710-b9890d67dfc5.roa
Signing time: Thu 12 Dec 2024 02:00:38 +0000
ROA not before: Thu 12 Dec 2024 02:00:38 +0000
ROA not after: Wed 12 Mar 2025 01:00:38 +0000
asID: 19437
IP address blocks: 131.153.192.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2d:5a:8c:9f:75:06:1d:af:89:0a:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Dec 12 02:00:38 2024 GMT
Not After : Mar 12 01:00:38 2025 GMT
Subject: CN=39ec19a1-17af-4f00-9ab9-23f13e433cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8e:5a:3b:2e:c6:ab:71:f8:3b:90:14:49:58:
ea:f0:d0:b5:4f:21:2e:91:87:03:4b:d5:d5:7a:db:
91:ec:82:8f:33:0d:95:66:d8:4c:b8:a7:f2:ad:bf:
e7:e9:de:e5:f1:fd:70:13:20:95:c1:4a:07:e9:75:
41:4b:be:af:74:d8:67:f8:b4:82:85:b5:a5:df:68:
dd:af:b7:6b:98:5d:a8:a4:27:53:60:69:53:8e:5b:
29:0b:85:0a:3a:66:6c:32:c1:5c:79:ff:89:f3:90:
60:af:49:cc:a5:c4:aa:6f:03:91:7d:f9:df:de:88:
a6:ec:7e:21:98:04:d0:80:13:ef:b8:a9:c1:cd:6c:
12:df:dd:ca:34:02:2f:7b:80:c0:d7:79:d9:81:30:
cf:af:f2:63:79:46:bc:47:c7:22:7e:eb:44:f1:d2:
01:98:b9:fc:fb:69:1f:c1:73:4f:d6:c8:b9:d0:38:
99:3c:61:d4:db:d4:b7:fa:0d:61:a3:bc:b7:a0:fa:
21:f0:7f:81:34:f6:19:28:60:1c:96:8e:9c:cd:ec:
02:e0:e1:ee:1f:87:af:3b:36:f5:7a:1c:82:17:87:
ae:a0:0b:9c:7a:0e:a0:3b:99:c9:b3:25:3e:ca:92:
4a:e5:7e:5a:1c:40:ba:96:eb:d5:57:44:d6:4e:2d:
67:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:05:E7:48:88:AE:D7:27:85:ED:FF:F3:F1:2E:3F:46:6E:9E:C1:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c5f832f0-28d0-357b-9710-b9890d67dfc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.192.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:bc:52:c0:2f:a1:f8:3f:54:63:43:73:28:f0:4b:8d:ea:8b:
cb:05:fb:c1:59:71:08:0b:83:f4:c3:af:81:ca:98:64:47:c7:
b1:ee:34:e7:17:31:7d:c1:2d:ec:ef:40:36:08:b6:9e:42:10:
ac:60:df:db:cc:75:9d:87:05:cf:3f:cb:b5:fe:3e:fc:89:fa:
05:d1:7d:09:a7:79:8d:ed:18:15:28:0c:ec:ed:be:08:9d:4d:
50:8c:15:1f:2c:3b:47:ed:55:12:3b:cc:75:fc:66:b2:25:18:
61:80:ae:66:e1:6c:5d:b0:fb:f0:f2:88:08:35:0f:c8:00:1a:
7c:08:4d:8e:6e:b2:a3:68:fe:c9:85:79:61:2f:ff:74:c5:65:
3c:4d:c2:e6:17:37:d3:66:0b:2c:d0:c3:df:86:0b:a5:4a:2e:
da:7a:c1:d6:5c:a7:0a:a3:22:e1:45:27:4d:8a:dd:13:71:30:
f9:c6:87:13:fd:22:5b:e1:f2:2f:f3:53:a6:79:c7:c9:5a:c9:
4e:1f:a8:c8:76:f5:c3:0a:0b:5b:47:56:e9:c5:89:f0:db:1b:
bd:69:72:dd:3e:c5:4a:1c:cd:43:8f:3f:52:e9:be:30:72:9e:
e5:86:dc:95:a9:d4:39:4c:fa:54:87:3f:66:fe:99:72:43:10:
16:ed:8e:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgtWoyfdQYdr4kKdIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI0MTIxMjAyMDAzOFoXDTI1MDMxMjAxMDAzOFowLzEtMCsGA1UEAxMk
MzllYzE5YTEtMTdhZi00ZjAwLTlhYjktMjNmMTNlNDMzY2MyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo45aOy7Gq3H4O5AUSVjq8NC1TyEukYcDS9XV
etuR7IKPMw2VZthMuKfyrb/n6d7l8f1wEyCVwUoH6XVBS76vdNhn+LSChbWl32jd
r7drmF2opCdTYGlTjlspC4UKOmZsMsFcef+J85Bgr0nMpcSqbwORffnf3oim7H4h
mATQgBPvuKnBzWwS393KNAIve4DA13nZgTDPr/JjeUa8R8cifutE8dIBmLn8+2kf
wXNP1si50DiZPGHU29S3+g1ho7y3oPoh8H+BNPYZKGAclo6czewC4OHuH4evOzb1
ehyCF4euoAuceg6gO5nJsyU+ypJK5X5aHEC6luvVV0TWTi1naQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM8F50iIrtcnhe3/8/EuP0ZunsFwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYzVmODMyZjAtMjhkMC0z
NTdiLTk3MTAtYjk4OTBkNjdkZmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5nAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAq8UsAvofg/VGNDcyjwS43qi8sF+8FZcQgLg/TDr4HKmGRHx7HuNOcX
MX3BLezvQDYItp5CEKxg39vMdZ2HBc8/y7X+PvyJ+gXRfQmneY3tGBUoDOztvgid
TVCMFR8sO0ftVRI7zHX8ZrIlGGGArmbhbF2w+/DyiAg1D8gAGnwITY5usqNo/smF
eWEv/3TFZTxNwuYXN9NmCyzQw9+GC6VKLtp6wdZcpwqjIuFFJ02K3RNxMPnGhxP9
Ilvh8i/zU6Z5x8layU4fqMh29cMKC1tHVunFifDbG71pct0+xUoczUOPP1LpvjBy
nuWG3JWp1DlM+lSHP2b+mXJDEBbtjm4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:57:17 2025 by rpki-client