Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/027fdc51-d590-4a8f-bd4e-5e0ccb3e0482/d5fa07e0-44c8-37d1-be57-c7945f8fd180.roa
File: d5fa07e0-44c8-37d1-be57-c7945f8fd180.roa (raw, json)
Hash identifier: KZrKPJL4IJywqvpRMYUgOAGBEUkv5h8a3OkuQZI2Fw8=
Subject key identifier: FC:25:38:0D:FE:53:F7:2A:40:8C:41:DD:4B:68:CA:39:5F:B7:70:3B
Certificate issuer: /CN=027fdc51-d590-4a8f-bd4e-5e0ccb3e0482
Certificate serial: 010D0C9F432858480644F74075A19BFE12A76280
Authority key identifier: 36:35:3F:58:F7:B1:C6:61:FD:34:FB:25:63:0F:3A:F8:FF:2F:7D:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/027fdc51-d590-4a8f-bd4e-5e0ccb3e0482.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/027fdc51-d590-4a8f-bd4e-5e0ccb3e0482/d5fa07e0-44c8-37d1-be57-c7945f8fd180.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 11238
IP address blocks: 209.240.160.0/21 maxlen: 21
209.240.168.0/21 maxlen: 21
209.240.176.0/21 maxlen: 21
209.240.184.0/21 maxlen: 21
2605:7100::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:44:f7:40:75:a1:9b:fe:12:a7:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=027fdc51-d590-4a8f-bd4e-5e0ccb3e0482
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=8b4da275-c723-4259-a46b-83f0be1e4d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6c:fa:38:fb:fc:ef:03:7b:e4:11:93:cb:30:
65:70:50:ab:10:f8:24:b8:e7:d9:8e:44:37:03:2c:
b2:c6:dd:a1:e0:f4:55:9e:fe:28:a5:57:14:8c:15:
89:fe:da:84:91:bb:7b:4e:ea:b1:37:6f:21:9b:49:
9b:1e:89:d3:34:6f:78:da:b9:17:f2:c0:f5:49:e0:
a2:13:e1:f5:ca:43:27:d0:34:ae:17:07:7d:83:ab:
23:cb:19:9f:23:e2:6c:06:61:de:1d:1f:f8:27:29:
59:23:62:5d:f8:22:34:74:3d:4d:36:b9:9a:22:76:
a7:a3:20:9e:ae:01:dc:0e:18:84:ef:18:8b:c6:47:
11:af:27:63:69:15:fa:54:d8:ff:01:a9:37:63:db:
06:d8:89:d9:07:57:b2:3f:5b:e4:fa:d1:2a:c8:94:
06:8b:64:36:f7:3b:5b:96:8c:a0:44:f9:d2:b4:ac:
f9:7e:b8:e7:8b:e3:9d:a7:eb:4c:c7:d1:6f:e5:0e:
1b:eb:66:74:86:60:74:27:ae:da:74:63:30:d6:aa:
d2:ad:a0:02:3c:d6:59:12:c7:b0:48:18:29:f0:e6:
66:5b:66:ed:09:22:45:48:f6:ca:bf:6d:2e:7c:57:
a1:39:17:cb:e0:96:02:aa:2d:ec:82:98:39:88:be:
d5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:25:38:0D:FE:53:F7:2A:40:8C:41:DD:4B:68:CA:39:5F:B7:70:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/027fdc51-d590-4a8f-bd4e-5e0ccb3e0482/d5fa07e0-44c8-37d1-be57-c7945f8fd180.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/027fdc51-d590-4a8f-bd4e-5e0ccb3e0482/027fdc51-d590-4a8f-bd4e-5e0ccb3e0482.crl
X509v3 Authority Key Identifier:
keyid:36:35:3F:58:F7:B1:C6:61:FD:34:FB:25:63:0F:3A:F8:FF:2F:7D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/027fdc51-d590-4a8f-bd4e-5e0ccb3e0482.cer
sbgp-ipAddrBlock: critical
IPv4:
209.240.160.0/19
IPv6:
2605:7100::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:22:8d:9a:6f:c0:61:92:26:af:6f:aa:26:43:ae:39:11:7b:
51:42:c0:83:28:b5:95:c5:67:44:91:e9:da:0c:98:13:60:1a:
31:17:d6:71:03:8a:0d:3a:90:82:97:24:ee:52:e7:d0:6d:79:
3a:ef:6d:8f:d8:c1:84:5c:4a:d6:e1:bd:a6:e4:7d:5e:cc:98:
ed:bd:65:8c:fb:dc:01:a2:3e:89:f1:f8:47:c0:e2:4e:e8:c0:
f4:bd:70:33:76:d1:ab:8c:b6:38:52:e3:4e:73:2f:e1:2b:d9:
21:99:dc:40:f8:6d:7e:a8:02:e9:e0:ad:2b:aa:3d:bf:70:8f:
c4:d4:c7:ef:bb:25:11:86:51:d4:15:24:3b:f8:67:4c:82:e6:
e6:2f:01:d3:79:68:6b:2e:0b:75:69:52:c7:dd:83:e9:cb:8b:
1e:a0:65:05:72:e4:39:54:d2:dd:fc:94:a3:46:7e:95:fd:54:
62:ba:05:ba:4d:2d:45:3c:ce:b2:8f:86:9f:4a:05:de:23:60:
43:71:d3:62:41:d6:d6:0c:f8:65:4e:34:37:68:7a:5b:06:0a:
60:3e:fe:33:c6:44:38:d1:ad:3e:bb:35:b5:13:1f:80:0f:e7:
34:cb:ea:f0:c1:7a:e3:6f:4f:73:17:fb:3f:34:a3:31:e6:a5:
cc:d8:22:47
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEgGRPdAdaGb/hKnYoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDI3ZmRjNTEtZDU5MC00YThmLWJkNGUtNWUwY2NiM2Uw
NDgyMB4XDTI0MTEyODAyMDAzOFoXDTI1MDIyNjAyMDAzOFowLzEtMCsGA1UEAxMk
OGI0ZGEyNzUtYzcyMy00MjU5LWE0NmItODNmMGJlMWU0ZDcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2z6OPv87wN75BGTyzBlcFCrEPgkuOfZjkQ3
Ayyyxt2h4PRVnv4opVcUjBWJ/tqEkbt7TuqxN28hm0mbHonTNG942rkX8sD1SeCi
E+H1ykMn0DSuFwd9g6sjyxmfI+JsBmHeHR/4JylZI2Jd+CI0dD1NNrmaInanoyCe
rgHcDhiE7xiLxkcRrydjaRX6VNj/Aak3Y9sG2InZB1eyP1vk+tEqyJQGi2Q29ztb
loygRPnStKz5frjni+Odp+tMx9Fv5Q4b62Z0hmB0J67adGMw1qrSraACPNZZEsew
SBgp8OZmW2btCSJFSPbKv20ufFehORfL4JYCqi3sgpg5iL7VIwIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFPwlOA3+U/cqQIxB3Utoyjlft3A7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMjdm
ZGM1MS1kNTkwLTRhOGYtYmQ0ZS01ZTBjY2IzZTA0ODIvZDVmYTA3ZTAtNDRjOC0z
N2QxLWJlNTctYzc5NDVmOGZkMTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDI3ZmRjNTEtZDU5MC00YThmLWJk
NGUtNWUwY2NiM2UwNDgyLzAyN2ZkYzUxLWQ1OTAtNGE4Zi1iZDRlLTVlMGNjYjNl
MDQ4Mi5jcmwwHwYDVR0jBBgwFoAUNjU/WPexxmH9NPslYw86+P8vfSAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wMjdmZGM1MS1kNTkwLTRhOGYtYmQ0ZS01ZTBj
Y2IzZTA0ODIuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQF0fCgMA0E
AgACMAcDBQAmBXEAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAFQijZpvwGGSJq9vqiZDrjkRe1FCwIMotZXF
Z0SR6doMmBNgGjEX1nEDig06kIKXJO5S59BteTrvbY/YwYRcStbhvabkfV7MmO29
ZYz73AGiPonx+EfA4k7owPS9cDN20auMtjhS405zL+Er2SGZ3ED4bX6oAungrSuq
Pb9wj8TUx++7JRGGUdQVJDv4Z0yC5uYvAdN5aGsuC3VpUsfdg+nLix6gZQVy5DlU
0t38lKNGfpX9VGK6BbpNLUU8zrKPhp9KBd4jYENx02JB1tYM+GVONDdoelsGCmA+
/jPGRDjRrT67NbUTH4AP5zTL6vDBeuNvT3MX+z80ozHmpczYIkc=
-----END CERTIFICATE-----
Generated at Tue Apr 29 23:50:20 2025 by rpki-client