Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e16e00ad-982c-33fb-95af-67a63de985b7.roa
File: e16e00ad-982c-33fb-95af-67a63de985b7.roa (raw, json)
Hash identifier: NXqF2tp5v8W0vyAisZPfMBLSJf8+IPuWWevs5YUQfpc=
Subject key identifier: 81:A5:5B:7A:FE:EE:C8:28:C6:9B:C4:9E:7E:66:9F:72:77:C9:EF:F7
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F432858481F653543C9B197D429F08540
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e16e00ad-982c-33fb-95af-67a63de985b7.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 20014
IP address blocks: 64.33.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:35:43:c9:b1:97:d4:29:f0:85:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=85fb2a32-4cad-468e-8688-47f916687db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d0:10:44:62:e1:9b:c5:1c:90:8a:e3:7c:54:
b2:16:11:1a:ea:9a:e2:dc:5a:1c:e6:bd:c1:07:81:
be:0a:55:40:5b:bb:2a:71:fc:a5:9b:e3:a9:54:17:
75:64:6f:16:3b:64:ca:3e:39:fb:0a:d7:f6:54:99:
b9:7a:54:cf:f6:85:d6:0a:08:6b:cc:5a:25:74:bd:
42:57:e4:56:e9:c0:f7:56:d3:2a:be:6b:84:69:83:
9b:d2:c0:c5:10:16:39:e2:a8:94:bb:e4:6a:87:19:
74:e7:2d:29:13:92:7d:c4:bb:55:82:aa:72:0b:38:
6d:40:36:09:cc:38:7d:71:f7:3a:2a:c4:94:e7:29:
df:35:36:a3:37:13:04:ea:70:28:33:5c:4c:cd:b4:
f7:97:ba:6e:36:6f:24:2a:26:f0:73:05:05:5d:0c:
95:e7:42:18:eb:54:8c:6d:6e:0d:18:6f:e9:ca:13:
7e:e7:bf:f8:d2:c8:30:0e:1a:06:a4:a4:59:df:30:
3b:02:e8:dd:82:bc:11:b3:e4:3e:06:85:38:6e:2f:
b2:fa:0e:53:b0:52:30:93:5a:cd:7b:0e:09:1d:01:
29:c7:14:17:8f:ef:8a:b8:71:a8:7d:77:0e:c6:34:
4d:b5:ee:8e:66:c4:8c:e9:cc:7a:fc:8d:d0:1d:ca:
b8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A5:5B:7A:FE:EE:C8:28:C6:9B:C4:9E:7E:66:9F:72:77:C9:EF:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e16e00ad-982c-33fb-95af-67a63de985b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
64.33.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:33:af:e7:99:0a:11:27:d6:24:34:b2:b7:a5:0b:b3:8b:b2:
9d:ab:29:95:9c:83:cf:3f:e5:89:70:8f:96:75:9e:dd:b5:a4:
72:5b:ba:a3:51:eb:fe:0f:71:b4:e8:fb:8d:d5:9e:92:9b:7b:
ed:cd:99:80:53:0b:f9:64:31:02:03:b6:8f:d1:d2:30:50:73:
b0:c7:4b:2a:2b:cd:2f:6c:88:63:8b:c4:17:a3:09:c1:2f:45:
77:f7:61:23:0b:3d:03:f2:c8:13:50:22:cd:97:c4:4e:8c:f1:
e1:75:f4:f0:7b:a6:32:16:b2:2a:bf:ec:b3:7b:c7:69:f7:55:
4f:c3:76:43:f7:1b:d0:68:c0:85:d8:5d:43:71:3b:95:f6:82:
d0:25:72:49:1b:d5:30:1a:92:d3:ab:c8:fa:eb:37:7e:8f:4f:
88:2a:17:63:17:b8:11:8e:f5:86:7f:c4:b7:b4:dd:1c:e3:5d:
4b:ee:cf:60:26:65:05:a0:cf:9d:0c:ca:12:61:26:d2:08:b2:
92:e8:65:42:f5:d4:aa:44:a4:4c:5b:bb:1d:5e:6b:ea:66:ee:
0a:0a:8e:6c:2c:bb:ca:f7:5f:db:96:e3:d2:ae:e1:23:ba:62:
3b:4b:c9:41:ea:78:f5:93:6a:80:6d:4b:ae:1a:73:ea:6a:33:
81:4e:37:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgfZTVDybGX1CnwhUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI0MTIwNzAyMDAzOVoXDTI1MDMwNzAyMDAzOVowLzEtMCsGA1UEAxMk
ODVmYjJhMzItNGNhZC00NjhlLTg2ODgtNDdmOTE2Njg3ZGIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNAQRGLhm8UckIrjfFSyFhEa6pri3Foc5r3B
B4G+ClVAW7sqcfylm+OpVBd1ZG8WO2TKPjn7Ctf2VJm5elTP9oXWCghrzFoldL1C
V+RW6cD3VtMqvmuEaYOb0sDFEBY54qiUu+Rqhxl05y0pE5J9xLtVgqpyCzhtQDYJ
zDh9cfc6KsSU5ynfNTajNxME6nAoM1xMzbT3l7puNm8kKibwcwUFXQyV50IY61SM
bW4NGG/pyhN+57/40sgwDhoGpKRZ3zA7AujdgrwRs+Q+BoU4bi+y+g5TsFIwk1rN
ew4JHQEpxxQXj++KuHGofXcOxjRNte6OZsSM6cx6/I3QHcq4eQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIGlW3r+7sgoxpvEnn5mn3J3ye/3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZTE2ZTAwYWQtOTgyYy0z
M2ZiLTk1YWYtNjdhNjNkZTk4NWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCHuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIUzr+eZChEn1iQ0srelC7OLsp2rKZWcg88/5Ylwj5Z1nt21pHJbuqNR
6/4PcbTo+43VnpKbe+3NmYBTC/lkMQIDto/R0jBQc7DHSyorzS9siGOLxBejCcEv
RXf3YSMLPQPyyBNQIs2XxE6M8eF19PB7pjIWsiq/7LN7x2n3VU/DdkP3G9BowIXY
XUNxO5X2gtAlckkb1TAaktOryPrrN36PT4gqF2MXuBGO9YZ/xLe03RzjXUvuz2Am
ZQWgz50MyhJhJtIIspLoZUL11KpEpExbux1ea+pm7goKjmwsu8r3X9uW49Ku4SO6
YjtLyUHqePWTaoBtS64ac+pqM4FON+M=
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:11:37 2025 by rpki-client