Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/891439fd-34b5-3a59-98cf-17456b30b05b.roa
File: 891439fd-34b5-3a59-98cf-17456b30b05b.roa (raw, json)
Hash identifier: cYFlQeITZ0FAkTuJ8Gnv/3MxcfagX7uzkUVd43ar2j0=
Subject key identifier: 23:CD:A6:69:A2:BE:0A:C0:2F:9C:24:48:03:C8:16:68:DA:A2:C5:7F
Certificate issuer: /CN=ce57877c-89ad-4d14-9b2c-3fbd440b003b
Certificate serial: 010D0C9F4328584832F033DDB48A894B36CD6780
Authority key identifier: EE:8F:89:26:87:2F:B3:3A:F5:F1:46:8F:13:B6:F1:C6:1F:12:56:44
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/891439fd-34b5-3a59-98cf-17456b30b05b.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 32003
IP address blocks: 104.243.144.0/20 maxlen: 24
199.38.168.0/22 maxlen: 24
2606:780::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:33:dd:b4:8a:89:4b:36:cd:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce57877c-89ad-4d14-9b2c-3fbd440b003b
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=f5f7c2ec-14d6-471d-be01-1d9d46a2435c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0a:48:8c:f0:15:76:c0:32:f8:25:09:37:55:
9c:48:7a:f6:7c:2a:34:f6:e2:7a:8a:d3:85:f3:b3:
08:51:c8:5f:f5:c9:c7:2d:2b:4d:c8:66:56:cf:24:
95:3b:de:bf:d7:9c:9a:50:f3:d0:76:dc:d6:0d:34:
20:6d:3b:59:05:f5:b7:3c:15:b7:a7:cc:7e:83:89:
ad:9c:c9:61:7b:28:84:d8:23:e1:9b:59:e8:18:9f:
b8:21:ec:e4:5d:5e:78:7e:34:bc:bc:61:c2:c7:1d:
dd:56:70:dc:58:b4:c3:73:0c:db:55:f9:b0:e2:ed:
8a:e0:fa:3b:6d:93:c9:96:fd:17:dc:4d:24:12:4f:
0a:4b:4c:c5:ca:50:e3:53:e7:aa:c0:a8:40:ad:fc:
28:88:59:f1:d3:85:74:15:4a:17:32:eb:82:e0:0b:
3b:61:80:3d:9f:75:b3:a1:12:92:85:bb:f7:dd:a6:
29:ec:f5:eb:22:f8:43:a7:1f:91:ce:df:c5:bf:2f:
e8:f3:0d:5d:1f:fd:4a:60:a6:f4:a1:ee:6a:38:cb:
0e:59:a3:5f:b8:1d:e3:0b:89:90:51:56:31:16:4c:
ae:80:c4:f3:47:bb:25:52:e4:c0:ae:71:ec:7b:d5:
26:1a:f5:c8:05:79:d6:75:5d:e1:c2:23:62:88:61:
92:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CD:A6:69:A2:BE:0A:C0:2F:9C:24:48:03:C8:16:68:DA:A2:C5:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/891439fd-34b5-3a59-98cf-17456b30b05b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/ce57877c-89ad-4d14-9b2c-3fbd440b003b.crl
X509v3 Authority Key Identifier:
keyid:EE:8F:89:26:87:2F:B3:3A:F5:F1:46:8F:13:B6:F1:C6:1F:12:56:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b.cer
sbgp-ipAddrBlock: critical
IPv4:
104.243.144.0/20
199.38.168.0/22
IPv6:
2606:780::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:1c:6d:2b:cc:a2:50:25:22:a5:c1:5d:2a:e6:0f:13:fa:13:
ab:44:00:88:8a:64:0c:de:62:27:a1:0f:d8:08:5e:e2:39:91:
c6:ad:1f:a8:ba:e1:6c:97:2e:4a:b0:0d:22:79:83:0c:39:57:
63:36:ad:80:3f:b8:89:38:fc:cb:a0:d8:ed:bf:03:29:67:0d:
77:6d:c0:5d:9e:f8:dd:bd:b0:5b:58:2a:6e:c5:9b:2e:ab:3f:
54:97:be:2f:aa:0b:12:68:6d:c2:95:0d:b4:27:83:b7:51:dc:
2d:d5:88:64:eb:da:ed:64:25:9e:3f:84:37:48:34:47:b6:5b:
8c:71:17:d7:3c:99:d6:c2:40:35:fb:fd:c5:a1:f1:63:0c:73:
d0:5d:5a:b6:1e:19:94:0f:41:49:b6:b9:5d:f3:5e:fa:87:e5:
d7:50:1a:6d:ec:97:ef:9a:53:15:ee:6e:3e:7c:77:09:07:68:
f8:4d:1f:87:dc:d4:d8:5f:dd:82:7e:aa:c4:4b:f8:6d:41:20:
48:cc:60:d6:9e:05:99:a9:69:50:b3:fa:5f:9c:97:64:97:02:
9e:cc:a4:3e:fd:14:80:01:31:5e:f9:9a:9d:5d:dc:99:57:9b:
73:b4:a2:d3:41:1e:d7:db:fa:de:9f:fb:73:af:a6:cd:22:77:
55:71:70:9b
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEgy8DPdtIqJSzbNZ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2U1Nzg3N2MtODlhZC00ZDE0LTliMmMtM2ZiZDQ0MGIw
MDNiMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
ZjVmN2MyZWMtMTRkNi00NzFkLWJlMDEtMWQ5ZDQ2YTI0MzVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QpIjPAVdsAy+CUJN1WcSHr2fCo09uJ6itOF
87MIUchf9cnHLStNyGZWzySVO96/15yaUPPQdtzWDTQgbTtZBfW3PBW3p8x+g4mt
nMlheyiE2CPhm1noGJ+4IezkXV54fjS8vGHCxx3dVnDcWLTDcwzbVfmw4u2K4Po7
bZPJlv0X3E0kEk8KS0zFylDjU+eqwKhArfwoiFnx04V0FUoXMuuC4As7YYA9n3Wz
oRKShbv33aYp7PXrIvhDpx+Rzt/Fvy/o8w1dH/1KYKb0oe5qOMsOWaNfuB3jC4mQ
UVYxFkyugMTzR7slUuTArnHse9UmGvXIBXnWdV3hwiNiiGGSCwIDAQABo4IDajCC
A2YwHQYDVR0OBBYEFCPNpmmivgrAL5wkSAPIFmjaosV/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jZTU3
ODc3Yy04OWFkLTRkMTQtOWIyYy0zZmJkNDQwYjAwM2IvODkxNDM5ZmQtMzRiNS0z
YTU5LTk4Y2YtMTc0NTZiMzBiMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2U1Nzg3N2MtODlhZC00ZDE0LTli
MmMtM2ZiZDQ0MGIwMDNiL2NlNTc4NzdjLTg5YWQtNGQxNC05YjJjLTNmYmQ0NDBi
MDAzYi5jcmwwHwYDVR0jBBgwFoAU7o+JJocvszr18UaPE7bxxh8SVkQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9jZTU3ODc3Yy04OWFkLTRkMTQtOWIyYy0zZmJk
NDQwYjAwM2IuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEaPOQAwQC
xyaoMA0EAgACMAcDBQAmBgeAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABwcbSvMolAlIqXBXSrmDxP6E6tE
AIiKZAzeYiehD9gIXuI5kcatH6i64WyXLkqwDSJ5gww5V2M2rYA/uIk4/Mug2O2/
AylnDXdtwF2e+N29sFtYKm7Fmy6rP1SXvi+qCxJobcKVDbQng7dR3C3ViGTr2u1k
JZ4/hDdINEe2W4xxF9c8mdbCQDX7/cWh8WMMc9BdWrYeGZQPQUm2uV3zXvqH5ddQ
Gm3sl++aUxXubj58dwkHaPhNH4fc1Nhf3YJ+qsRL+G1BIEjMYNaeBZmpaVCz+l+c
l2SXAp7MpD79FIABMV75mp1d3JlXm3O0otNBHtfb+t6f+3Ovps0id1VxcJs=
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:19:21 2025 by rpki-client