Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/5135d0bf-2fc2-3d54-8231-70f4574ebf28.roa
File: 5135d0bf-2fc2-3d54-8231-70f4574ebf28.roa (raw, json)
Hash identifier: v5Bau4p0f7Kxxgd1PVV/DboCYrvjzONRudpXLCw7Ui0=
Subject key identifier: 62:B2:E4:00:AA:2E:23:20:4D:3D:81:71:39:CD:1C:B0:53:00:6D:89
Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa
Certificate serial: 010D0C9F432858480EA50F6B9476340D142A7320
Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/5135d0bf-2fc2-3d54-8231-70f4574ebf28.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 13325
IP address blocks: 167.240.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:0f:6b:94:76:34:0d:14:2a:73:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=9aa2f6e3-ddc9-4bc2-8b56-8dc0e07dd324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bb:cf:ab:1f:19:8d:c8:9e:8e:b1:d5:f8:4f:
2a:9e:69:5d:08:71:a3:91:a5:39:1f:00:15:71:65:
95:55:39:b3:cc:86:be:bb:44:4a:fa:69:b9:28:3f:
20:f5:21:e4:e5:38:f1:0b:4e:dc:44:0d:f4:06:4a:
54:eb:d1:3d:a3:c8:46:0e:c6:9d:dd:17:1e:3a:9c:
3c:d5:da:25:a7:37:0c:af:cd:64:2d:50:e7:65:e0:
0f:b3:f3:94:ad:fe:21:56:85:17:a3:f8:37:e0:4b:
d6:32:6b:2d:8e:b1:cf:92:44:5d:06:5a:0b:f2:a4:
20:61:ed:38:4c:c7:a9:7e:31:13:ae:5b:ef:ca:8e:
3a:c8:28:45:04:e0:9c:71:c0:3e:9a:57:f3:2f:02:
31:38:54:b1:94:1c:77:11:1c:ba:5a:5b:fa:0a:42:
6f:ca:c5:ff:e6:7b:e9:0c:46:e5:2a:eb:81:55:6c:
20:b8:15:20:a1:fc:f0:d1:53:6f:28:c9:3b:a2:1c:
b2:67:1e:d5:2d:26:2c:6f:03:84:1f:7b:2d:e9:a3:
61:87:ae:85:d1:2d:c2:6a:cd:21:41:66:0f:67:91:
73:63:df:23:2f:87:8d:91:9b:16:23:5f:95:15:51:
ea:40:48:a4:40:8c:f7:7b:91:48:f8:09:21:55:40:
5b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B2:E4:00:AA:2E:23:20:4D:3D:81:71:39:CD:1C:B0:53:00:6D:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/5135d0bf-2fc2-3d54-8231-70f4574ebf28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl
X509v3 Authority Key Identifier:
keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer
sbgp-ipAddrBlock: critical
IPv4:
167.240.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:fa:26:26:9d:48:54:75:ea:00:ba:74:61:5a:24:6f:f5:1d:
72:86:88:b3:d3:21:7f:16:e2:e2:ed:f5:50:ea:62:18:6b:9e:
e8:9f:af:94:c6:cc:88:e4:4f:bf:46:a7:42:76:29:e8:99:22:
14:db:f2:94:ec:bf:f2:9b:6e:18:dc:e3:29:59:e2:f3:99:a2:
92:e4:8d:a3:72:10:14:5e:e9:9b:5d:43:11:6d:94:90:05:0e:
89:26:cf:98:b9:cf:c3:5e:0e:3e:8a:13:8b:33:2d:eb:85:ab:
0c:93:13:67:d0:94:ea:0d:16:02:8a:77:6e:f6:e2:17:1f:c0:
f7:d2:af:5c:48:0a:cc:1a:ff:e4:ff:0c:dd:66:cf:eb:60:76:
c3:f0:42:c6:8e:d0:66:34:30:80:66:43:25:37:53:fc:e6:33:
51:ec:fd:1c:b4:f5:de:43:70:18:18:78:77:8d:85:0b:46:ae:
5c:3f:cb:bc:a5:8f:2b:d4:79:5f:61:5e:3c:21:8a:b3:e3:6c:
39:1a:01:cc:76:5d:a8:b8:2e:be:a4:eb:a5:ba:17:69:e0:ce:
e1:a1:4e:7f:97:7e:7d:ce:a5:41:df:9f:63:c2:2a:ee:9c:8e:
2b:4e:3e:fa:c5:31:aa:c7:30:32:5d:3d:df:09:5c:75:51:a6:
fc:a5:6c:4b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEgOpQ9rlHY0DRQqcyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy
NGZhMB4XDTI0MTIwMTAyMDAzOVoXDTI1MDMwMTAyMDAzOVowLzEtMCsGA1UEAxMk
OWFhMmY2ZTMtZGRjOS00YmMyLThiNTYtOGRjMGUwN2RkMzI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLvPqx8ZjciejrHV+E8qnmldCHGjkaU5HwAV
cWWVVTmzzIa+u0RK+mm5KD8g9SHk5TjxC07cRA30BkpU69E9o8hGDsad3RceOpw8
1dolpzcMr81kLVDnZeAPs/OUrf4hVoUXo/g34EvWMmstjrHPkkRdBloL8qQgYe04
TMepfjETrlvvyo46yChFBOCcccA+mlfzLwIxOFSxlBx3ERy6Wlv6CkJvysX/5nvp
DEblKuuBVWwguBUgofzw0VNvKMk7ohyyZx7VLSYsbwOEH3st6aNhh66F0S3Cas0h
QWYPZ5FzY98jL4eNkZsWI1+VFVHqQEikQIz3e5FI+AkhVUBbOQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGKy5ACqLiMgTT2BcTnNHLBTAG2JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh
ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvNTEzNWQwYmYtMmZjMi0z
ZDU0LTgyMzEtNzBmNDU3NGViZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw
ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh
MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj
ZGVlYTI0ZmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAp/AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAFPomJp1IVHXqALp0YVokb/UdcoaIs9Mhfxbi4u31UOpiGGue6J+vlMbM
iORPv0anQnYp6JkiFNvylOy/8ptuGNzjKVni85mikuSNo3IQFF7pm11DEW2UkAUO
iSbPmLnPw14OPooTizMt64WrDJMTZ9CU6g0WAop3bvbiFx/A99KvXEgKzBr/5P8M
3WbP62B2w/BCxo7QZjQwgGZDJTdT/OYzUez9HLT13kNwGBh4d42FC0auXD/LvKWP
K9R5X2FePCGKs+NsORoBzHZdqLguvqTrpboXaeDO4aFOf5d+fc6lQd+fY8Iq7pyO
K04++sUxqscwMl093wlcdVGm/KVsSw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:07:10 2025 by rpki-client