Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/e2c64b42-3241-3020-b640-0b5ca595529a.roa
File: e2c64b42-3241-3020-b640-0b5ca595529a.roa (raw, json)
Hash identifier: KWVHSAtVEN52D67O/jobe/gioaP5DGsPE+1lf6AegjQ=
Subject key identifier: 88:BD:35:28:D2:18:CC:AE:00:5B:69:32:22:C8:33:7A:C4:91:A9:88
Certificate issuer: /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial: 010D0C9F4328584862658ED15E56DFF4ACABA080
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/e2c64b42-3241-3020-b640-0b5ca595529a.roa
Signing time: Tue 31 Dec 2024 02:00:40 +0000
ROA not before: Tue 31 Dec 2024 02:00:40 +0000
ROA not after: Mon 31 Mar 2025 01:00:40 +0000
asID: 22359
IP address blocks: 208.52.177.2/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:62:65:8e:d1:5e:56:df:f4:ac:ab:a0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Validity
Not Before: Dec 31 02:00:40 2024 GMT
Not After : Mar 31 01:00:40 2025 GMT
Subject: CN=b2ae8930-dea5-4214-a20c-69e8613404a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f1:59:b5:be:ee:40:b2:5f:2d:e7:64:4b:42:
be:d8:0b:7d:72:f6:c0:73:3c:1a:30:27:b1:af:5e:
77:33:43:30:6d:4b:d4:ee:ff:0a:6a:1d:e6:d4:94:
b5:e9:3a:4a:64:b9:31:c5:db:ee:d2:85:1f:1c:90:
c7:cc:2e:ac:7a:37:b2:52:49:3d:d4:61:b0:8c:5c:
24:f1:24:b8:58:2d:98:21:93:6e:10:25:c5:b8:51:
11:81:71:6f:14:03:57:8b:92:4f:0c:66:18:0d:30:
f5:ec:7c:dc:a0:57:88:76:b8:51:b8:83:55:e8:7a:
82:00:3e:9d:0e:c6:48:7c:f6:f8:9d:0c:e5:57:52:
09:d3:61:29:16:d7:0d:4d:46:03:e9:f7:0a:70:c7:
4f:f9:dc:7e:03:dc:1a:46:7f:8d:8b:ad:d7:f3:9e:
5f:56:e3:d3:e4:f2:59:0a:28:4f:18:4c:7b:54:1e:
38:ef:5b:41:e0:ac:c7:22:48:12:2b:00:18:6c:7f:
db:15:0e:11:2c:93:38:34:c3:cb:70:57:cb:d9:0f:
e9:30:3b:7c:61:88:fb:11:d4:d9:ad:b6:3e:be:0d:
e8:f7:84:e7:ec:04:b9:cf:03:9b:19:5c:1c:da:90:
86:aa:9b:0a:02:a6:0f:79:b0:fc:18:a9:6e:a1:3e:
82:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BD:35:28:D2:18:CC:AE:00:5B:69:32:22:C8:33:7A:C4:91:A9:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/e2c64b42-3241-3020-b640-0b5ca595529a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
X509v3 Authority Key Identifier:
keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
sbgp-ipAddrBlock: critical
IPv4:
208.52.177.2/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:b0:1d:65:5a:3f:c1:33:6d:c8:fb:e3:f0:09:1b:0d:69:ac:
f7:f6:21:2b:60:e5:69:d1:b8:11:78:88:db:fc:46:fb:00:4b:
aa:7a:1a:22:c3:a3:10:13:89:71:e1:e1:1e:de:08:4a:58:39:
59:b1:61:22:a1:47:e4:9f:b0:d5:9d:55:01:c1:bb:65:60:a5:
e8:f7:9d:34:a8:f6:48:e6:d6:77:93:92:f3:c0:1c:58:cd:d2:
66:da:45:20:33:97:1c:84:de:34:aa:4c:00:a2:41:6b:2f:9e:
df:59:76:56:5f:33:de:0c:f3:c6:47:73:2f:83:75:3b:0f:e7:
3c:50:67:63:72:ca:3b:a7:2a:71:36:1a:f5:ff:72:00:0f:56:
16:a4:78:7e:46:00:36:cb:c8:75:49:7e:a2:44:32:2f:ba:3f:
71:c4:39:3f:a9:12:de:c8:59:ca:ae:13:ef:58:22:43:c4:80:
2e:19:45:94:a7:5f:c9:a8:c7:58:f0:d5:17:5b:2e:54:ed:73:
6c:46:7d:41:5c:c5:41:e0:be:56:1b:4c:6c:08:30:47:c2:3c:
65:7b:22:e1:07:9d:ee:ae:6e:8d:d1:9a:c0:19:e0:81:1c:05:
3b:2c:34:1c:80:41:5b:64:cd:19:ab:87:1e:7d:fd:d7:e1:b6:
e0:eb:6a:03
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhiZY7RXlbf9KyroIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmRlNWQ3NDYtMzQwMi00MjYzLWI4ODAtZWE0ZDdlY2Zj
MTY4MB4XDTI0MTIzMTAyMDA0MFoXDTI1MDMzMTAxMDA0MFowLzEtMCsGA1UEAxMk
YjJhZTg5MzAtZGVhNS00MjE0LWEyMGMtNjllODYxMzQwNGE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvFZtb7uQLJfLedkS0K+2At9cvbAczwaMCex
r153M0MwbUvU7v8Kah3m1JS16TpKZLkxxdvu0oUfHJDHzC6sejeyUkk91GGwjFwk
8SS4WC2YIZNuECXFuFERgXFvFANXi5JPDGYYDTD17HzcoFeIdrhRuINV6HqCAD6d
DsZIfPb4nQzlV1IJ02EpFtcNTUYD6fcKcMdP+dx+A9waRn+Ni63X855fVuPT5PJZ
CihPGEx7VB4471tB4KzHIkgSKwAYbH/bFQ4RLJM4NMPLcFfL2Q/pMDt8YYj7EdTZ
rbY+vg3o94Tn7AS5zwObGVwc2pCGqpsKAqYPebD8GKluoT6CyQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIi9NSjSGMyuAFtpMiLIM3rEkamIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1
ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRkN2VjZmMxNjgvZTJjNjRiNDItMzI0MS0z
MDIwLWI2NDAtMGI1Y2E1OTU1MjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmRlNWQ3NDYtMzQwMi00MjYzLWI4
ODAtZWE0ZDdlY2ZjMTY4LzJkZTVkNzQ2LTM0MDItNDI2My1iODgwLWVhNGQ3ZWNm
YzE2OC5jcmwwHwYDVR0jBBgwFoAUa7vQBHnN1sRmwfvAalg6KhVtSHwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRk
N2VjZmMxNjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0DSxAjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCpsB1lWj/BM23I++PwCRsNaaz39iErYOVp0bgReIjb/Eb7AEuqehoi
w6MQE4lx4eEe3ghKWDlZsWEioUfkn7DVnVUBwbtlYKXo9500qPZI5tZ3k5LzwBxY
zdJm2kUgM5cchN40qkwAokFrL57fWXZWXzPeDPPGR3Mvg3U7D+c8UGdjcso7pypx
Nhr1/3IAD1YWpHh+RgA2y8h1SX6iRDIvuj9xxDk/qRLeyFnKrhPvWCJDxIAuGUWU
p1/JqMdY8NUXWy5U7XNsRn1BXMVB4L5WG0xsCDBHwjxleyLhB53urm6N0ZrAGeCB
HAU7LDQcgEFbZM0Zq4ceff3X4bbg62oD
-----END CERTIFICATE-----
Generated at Tue Apr 29 20:28:21 2025 by rpki-client