Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/89d1130b-8a24-31a7-81ed-4b0fd2a1a9dc.roa
File: 89d1130b-8a24-31a7-81ed-4b0fd2a1a9dc.roa (raw, json)
Hash identifier: UG5eN9P2ocRhoRAfVtxW5CUVJ2a8OEPxEHEKOt11cTE=
Subject key identifier: 26:57:AB:DC:CE:B0:6F:96:41:86:A0:9B:B7:1D:CB:23:51:FD:EB:E3
Certificate issuer: /CN=1c54e35c-a6c9-47e0-b788-866bd333d8e0
Certificate serial: 010D0C9F43285848090FAD5E839A728ABBF11E80
Authority key identifier: AC:03:5B:5C:7A:BC:78:27:88:10:F2:5D:52:2A:5A:50:24:A6:B2:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/89d1130b-8a24-31a7-81ed-4b0fd2a1a9dc.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 9009
IP address blocks: 64.43.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:ad:5e:83:9a:72:8a:bb:f1:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c54e35c-a6c9-47e0-b788-866bd333d8e0
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=12180441-1064-4c79-a222-dbf126d2df9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d6:eb:2c:78:8f:38:fd:26:cc:d7:3c:cc:da:
ce:e1:26:e9:bb:c0:50:98:7f:3e:0f:00:6b:0c:68:
db:7c:c9:d7:62:85:d7:df:30:11:b3:d8:c9:9b:c5:
cf:e7:68:03:9e:f9:22:de:da:ab:5d:45:4a:6d:05:
46:76:16:05:0a:22:c9:7b:38:52:47:b4:54:a4:23:
af:fc:2f:f0:23:ae:fb:d8:92:88:ea:bc:9b:24:1c:
84:16:05:3e:a3:39:0b:f7:8a:45:12:09:97:ea:de:
23:1b:b8:52:09:b0:1f:4d:71:38:cd:ef:b1:47:90:
a0:91:d1:f3:9a:bb:66:39:2f:ac:5c:56:c5:07:6a:
e7:70:e3:8c:95:c9:5c:4f:d3:4d:63:b5:74:5f:78:
e0:d1:4e:c5:a7:40:7c:b4:21:58:e1:95:43:95:37:
ad:3a:a5:b1:23:41:69:d7:b0:05:57:91:37:ab:23:
02:c5:dd:c4:4e:1e:6d:41:1c:49:6e:55:1f:41:82:
cd:11:dd:88:3d:f8:6b:e1:21:ae:7b:d4:89:e1:97:
26:b4:ef:64:5f:41:3b:81:40:cb:32:49:30:a4:26:
74:b0:da:f3:14:7b:6d:84:5a:6f:e1:a9:16:a3:d2:
c6:f7:0c:b1:ae:9c:d1:82:9c:45:dc:35:c6:2c:10:
fe:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:57:AB:DC:CE:B0:6F:96:41:86:A0:9B:B7:1D:CB:23:51:FD:EB:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/89d1130b-8a24-31a7-81ed-4b0fd2a1a9dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/1c54e35c-a6c9-47e0-b788-866bd333d8e0.crl
X509v3 Authority Key Identifier:
keyid:AC:03:5B:5C:7A:BC:78:27:88:10:F2:5D:52:2A:5A:50:24:A6:B2:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0.cer
sbgp-ipAddrBlock: critical
IPv4:
64.43.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:9f:fd:9a:f8:d5:37:b1:56:f9:55:d4:b6:82:d7:17:a8:16:
6c:13:9e:9c:87:d0:f0:52:00:9a:9b:3c:2e:d5:c5:78:2f:85:
dd:7d:07:46:3e:9d:56:12:5a:88:c2:70:b1:14:ad:da:16:45:
e1:bc:5c:72:40:49:8c:16:85:50:21:08:8e:90:28:74:5c:f1:
3d:08:b7:2c:36:09:91:4e:60:d5:a3:02:63:ec:2b:92:42:9b:
62:07:29:5b:a7:da:a1:79:17:e7:eb:57:9b:06:6c:98:47:73:
f5:c6:12:d0:3d:f0:60:c2:bc:19:aa:f3:8d:30:69:96:ce:84:
35:91:87:f0:3e:09:db:ba:72:3f:f2:a4:f1:c1:b0:9e:9f:42:
f0:55:1e:5e:df:09:34:ae:d6:7b:23:e2:de:f4:87:ac:3c:98:
3d:13:58:19:88:72:be:b4:0e:de:4e:de:d1:9f:b1:11:15:56:
c3:23:41:ae:69:bf:0a:8c:a1:ea:ce:31:c5:47:35:42:1d:65:
fd:60:af:7a:a8:c5:8e:00:af:4c:ac:c3:d2:31:99:00:f3:c5:
86:fb:7f:09:08:14:a8:b1:76:a8:64:c2:5c:fb:2a:c0:7b:c8:
9f:de:68:d7:57:e3:74:6c:a9:5c:78:8a:90:1e:b8:6b:53:7c:
c5:08:1f:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgJD61eg5pyirvxHoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWM1NGUzNWMtYTZjOS00N2UwLWI3ODgtODY2YmQzMzNk
OGUwMB4XDTI0MTEyOTAyMDAzOVoXDTI1MDIyNzAyMDAzOVowLzEtMCsGA1UEAxMk
MTIxODA0NDEtMTA2NC00Yzc5LWEyMjItZGJmMTI2ZDJkZjlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9brLHiPOP0mzNc8zNrO4Sbpu8BQmH8+DwBr
DGjbfMnXYoXX3zARs9jJm8XP52gDnvki3tqrXUVKbQVGdhYFCiLJezhSR7RUpCOv
/C/wI6772JKI6rybJByEFgU+ozkL94pFEgmX6t4jG7hSCbAfTXE4ze+xR5CgkdHz
mrtmOS+sXFbFB2rncOOMlclcT9NNY7V0X3jg0U7Fp0B8tCFY4ZVDlTetOqWxI0Fp
17AFV5E3qyMCxd3ETh5tQRxJblUfQYLNEd2IPfhr4SGue9SJ4ZcmtO9kX0E7gUDL
MkkwpCZ0sNrzFHtthFpv4akWo9LG9wyxrpzRgpxF3DXGLBD+SQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCZXq9zOsG+WQYagm7cdyyNR/evjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYzU0
ZTM1Yy1hNmM5LTQ3ZTAtYjc4OC04NjZiZDMzM2Q4ZTAvODlkMTEzMGItOGEyNC0z
MWE3LTgxZWQtNGIwZmQyYTFhOWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWM1NGUzNWMtYTZjOS00N2UwLWI3
ODgtODY2YmQzMzNkOGUwLzFjNTRlMzVjLWE2YzktNDdlMC1iNzg4LTg2NmJkMzMz
ZDhlMC5jcmwwHwYDVR0jBBgwFoAUrANbXHq8eCeIEPJdUipaUCSmsqAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xYzU0ZTM1Yy1hNmM5LTQ3ZTAtYjc4OC04NjZi
ZDMzM2Q4ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQCvAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEqf/Zr41TexVvlV1LaC1xeoFmwTnpyH0PBSAJqbPC7VxXgvhd19B0Y+
nVYSWojCcLEUrdoWReG8XHJASYwWhVAhCI6QKHRc8T0Ityw2CZFOYNWjAmPsK5JC
m2IHKVun2qF5F+frV5sGbJhHc/XGEtA98GDCvBmq840waZbOhDWRh/A+Cdu6cj/y
pPHBsJ6fQvBVHl7fCTSu1nsj4t70h6w8mD0TWBmIcr60Dt5O3tGfsREVVsMjQa5p
vwqMoerOMcVHNUIdZf1gr3qoxY4Ar0ysw9IxmQDzxYb7fwkIFKixdqhkwlz7KsB7
yJ/eaNdX43RsqVx4ipAeuGtTfMUIH6I=
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:28:40 2025 by rpki-client