Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/dc04b1c3-67b4-3531-afdf-7c1d39073812.roa
File: dc04b1c3-67b4-3531-afdf-7c1d39073812.roa (raw, json)
Hash identifier: RtaJ6H+HO2XA2kDUl4UvUjgt7WnaSlHyTTQy6QM87ag=
Subject key identifier: 4B:42:96:52:9B:9B:C0:99:30:35:8A:A4:71:FF:70:B3:9B:AA:47:74
Certificate issuer: /CN=131ba7b9-70a5-4e7e-bba4-1a5c20488c71
Certificate serial: 010D0C9F4328584851A580F69F82DA659B9E1680
Authority key identifier: 6B:06:10:68:E1:5D:E0:00:FD:69:81:15:1C:7C:43:C4:F9:46:A0:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/dc04b1c3-67b4-3531-afdf-7c1d39073812.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 10490
IP address blocks: 128.61.0.0/16 maxlen: 24
130.207.0.0/16 maxlen: 24
143.215.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:80:f6:9f:82:da:65:9b:9e:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131ba7b9-70a5-4e7e-bba4-1a5c20488c71
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=4548dddc-128a-4a13-b040-3c26aa8db644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:65:cf:b0:2d:47:fd:c7:68:f2:9a:39:fa:49:
a1:02:32:12:25:ef:c5:fd:ba:84:34:ab:4c:66:cc:
0a:4e:89:60:44:78:c0:70:26:dd:fb:07:74:da:e6:
05:25:92:4f:f8:43:a7:e6:51:92:70:87:e1:4a:0b:
87:64:2f:37:16:7a:e3:0b:aa:ec:e3:19:76:57:ed:
81:0d:99:57:db:78:6b:2f:e4:cb:b2:5c:f6:d1:ab:
52:0b:ff:3e:f8:db:b8:99:c2:cb:56:eb:63:0a:31:
51:03:49:d2:0c:b3:0e:3f:b7:a0:e3:63:5f:00:94:
bc:d6:88:d0:3e:c9:ea:07:90:22:a8:e5:fe:e6:a5:
ad:45:6a:b4:1c:9a:bc:df:7a:0e:fa:90:2e:3e:84:
45:19:bc:91:78:05:01:df:b5:3a:57:5c:0e:ff:46:
4c:7b:eb:a5:75:9d:77:fe:fb:6d:36:74:24:67:fd:
3e:63:a0:5a:e0:74:8c:c3:24:a1:45:4d:8d:0c:6a:
b3:43:88:88:f3:84:95:7b:59:c7:16:fa:e2:b0:50:
ef:13:45:5c:42:39:8b:17:03:d7:27:c0:23:f7:ad:
0b:cd:8f:70:a2:59:f6:88:49:03:fc:2f:78:57:56:
99:79:ff:f4:95:64:66:dc:b4:7a:2c:4e:0e:6d:85:
48:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:42:96:52:9B:9B:C0:99:30:35:8A:A4:71:FF:70:B3:9B:AA:47:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/dc04b1c3-67b4-3531-afdf-7c1d39073812.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.crl
X509v3 Authority Key Identifier:
keyid:6B:06:10:68:E1:5D:E0:00:FD:69:81:15:1C:7C:43:C4:F9:46:A0:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.cer
sbgp-ipAddrBlock: critical
IPv4:
128.61.0.0/16
130.207.0.0/16
143.215.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:2f:d2:ce:76:47:7c:44:a4:b4:a2:26:5a:b3:d9:15:bd:2e:
e0:35:c7:11:34:25:f0:f2:16:43:cf:f2:f5:5f:77:a7:64:97:
da:4a:89:09:ab:cb:a7:de:8b:11:d0:4e:cc:aa:70:e1:b8:2d:
8c:da:be:47:28:b0:d3:6d:35:e2:1e:60:02:01:99:7a:7d:50:
29:78:94:29:cc:af:36:d1:ec:76:42:7b:37:c0:2c:b0:dd:2f:
97:10:c3:9e:38:33:f7:33:bf:2a:f8:4e:27:7c:a8:21:ed:c2:
0a:87:85:a2:a8:63:bc:d0:8f:99:30:52:ac:65:26:1d:13:86:
30:7f:3d:ae:d4:3f:51:21:fe:7e:f4:58:80:1b:29:79:0f:5c:
20:14:9f:a3:7d:5f:7e:b1:a8:13:40:a1:75:33:9a:24:79:7e:
39:ef:07:93:4b:36:48:5a:77:ab:54:fb:98:d6:79:6f:26:b5:
3c:0e:b7:4f:8d:aa:10:c6:3f:50:5b:ca:1e:9b:32:5b:09:96:
ce:59:6f:5a:79:bc:db:65:45:e6:71:97:dd:38:ad:e4:cf:b8:
6b:e3:16:b9:c9:ca:5a:34:6e:e8:37:25:e7:69:bd:f4:eb:4d:
05:5f:7d:f5:b9:14:d6:40:f3:e5:9d:c5:f3:98:3d:41:e7:d5:
88:2a:4d:cc
-----BEGIN CERTIFICATE-----
MIIGTDCCBTSgAwIBAgIUAQ0Mn0MoWEhRpYD2n4LaZZueFoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTMxYmE3YjktNzBhNS00ZTdlLWJiYTQtMWE1YzIwNDg4
YzcxMB4XDTI0MTIyNTAyMDAzOFoXDTI1MDMyNTAxMDAzOFowLzEtMCsGA1UEAxMk
NDU0OGRkZGMtMTI4YS00YTEzLWIwNDAtM2MyNmFhOGRiNjQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2XPsC1H/cdo8po5+kmhAjISJe/F/bqENKtM
ZswKTolgRHjAcCbd+wd02uYFJZJP+EOn5lGScIfhSguHZC83FnrjC6rs4xl2V+2B
DZlX23hrL+TLslz20atSC/8++Nu4mcLLVutjCjFRA0nSDLMOP7eg42NfAJS81ojQ
PsnqB5AiqOX+5qWtRWq0HJq833oO+pAuPoRFGbyReAUB37U6V1wO/0ZMe+uldZ13
/vttNnQkZ/0+Y6Ba4HSMwyShRU2NDGqzQ4iI84SVe1nHFvrisFDvE0VcQjmLFwPX
J8Aj960LzY9woln2iEkD/C94V1aZef/0lWRm3LR6LE4ObYVIaQIDAQABo4IDXjCC
A1owHQYDVR0OBBYEFEtCllKbm8CZMDWKpHH/cLObqkd0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMzFi
YTdiOS03MGE1LTRlN2UtYmJhNC0xYTVjMjA0ODhjNzEvZGMwNGIxYzMtNjdiNC0z
NTMxLWFmZGYtN2MxZDM5MDczODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTMxYmE3YjktNzBhNS00ZTdlLWJi
YTQtMWE1YzIwNDg4YzcxLzEzMWJhN2I5LTcwYTUtNGU3ZS1iYmE0LTFhNWMyMDQ4
OGM3MS5jcmwwHwYDVR0jBBgwFoAUawYQaOFd4AD9aYEVHHxDxPlGoJIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8xMzFiYTdiOS03MGE1LTRlN2UtYmJhNC0xYTVj
MjA0ODhjNzEuY2VyMCgGCCsGAQUFBwEHAQH/BBkwFzAVBAIAATAPAwMAgD0DAwCC
zwMDAI/XMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs
aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ
KoZIhvcNAQELBQADggEBAGwv0s52R3xEpLSiJlqz2RW9LuA1xxE0JfDyFkPP8vVf
d6dkl9pKiQmry6feixHQTsyqcOG4LYzavkcosNNtNeIeYAIBmXp9UCl4lCnMrzbR
7HZCezfALLDdL5cQw544M/czvyr4Tid8qCHtwgqHhaKoY7zQj5kwUqxlJh0ThjB/
Pa7UP1Eh/n70WIAbKXkPXCAUn6N9X36xqBNAoXUzmiR5fjnvB5NLNkhad6tU+5jW
eW8mtTwOt0+NqhDGP1Bbyh6bMlsJls5Zb1p5vNtlReZxl904reTPuGvjFrnJylo0
bug3JedpvfTrTQVfffW5FNZA8+WdxfOYPUHn1YgqTcw=
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:09:25 2025 by rpki-client