Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/12e7f79e-082d-345c-af76-13bf08bb0424.roa
File: 12e7f79e-082d-345c-af76-13bf08bb0424.roa (raw, json)
Hash identifier: cZHU5VMgJGcHu2L6ZgCctMPMl61WaDPMtPDDsaTzbc8=
Subject key identifier: 81:CA:6A:B8:37:BA:A0:AB:8E:42:9C:87:62:36:5F:15:A1:15:80:C3
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858482EC015843B69C804C71F7DC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/12e7f79e-082d-345c-af76-13bf08bb0424.roa
Signing time: Thu 12 Dec 2024 14:00:51 +0000
ROA not before: Thu 12 Dec 2024 14:00:51 +0000
ROA not after: Wed 12 Mar 2025 13:00:51 +0000
asID: 20940
IP address blocks: 173.222.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2e:c0:15:84:3b:69:c8:04:c7:1f:7d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 12 14:00:51 2024 GMT
Not After : Mar 12 13:00:51 2025 GMT
Subject: CN=45a1dd40-ccb3-471d-9029-8acec0f3c4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2d:cd:67:36:c0:af:5a:b1:0b:6e:6e:62:b3:
56:db:14:a8:62:65:3c:8b:7d:9c:bc:ac:e9:06:c6:
5e:f5:8b:87:6f:8a:c1:66:6b:a0:7d:b5:69:07:fe:
e6:67:c2:2e:71:6a:32:0b:25:d3:d9:ab:3e:29:4a:
ff:c4:13:85:c7:2c:7f:1c:30:40:1a:0d:a2:76:e7:
85:77:5d:ba:0c:37:d4:70:8c:3f:d8:3d:e9:81:1f:
ad:31:cd:c9:a7:91:df:55:17:4f:6e:a5:ef:4b:47:
5f:d3:fb:a7:b8:56:e5:75:97:c5:d9:67:29:0b:17:
37:b1:2f:5f:ac:4e:df:ba:4a:ef:56:2c:de:8b:6d:
32:6c:04:04:3f:9a:f7:13:08:5c:72:16:56:a6:ce:
d0:9d:b1:f8:34:0b:f6:e9:8c:51:6a:ab:d7:cf:1a:
fa:fd:51:b0:d1:20:6f:cc:47:50:96:7e:ec:40:07:
70:03:9f:6d:b2:0c:f5:e6:2d:0c:3a:1b:8a:2c:4b:
10:ba:d2:f4:e0:e1:44:4a:5c:24:11:73:6b:a6:6c:
e3:a9:39:8b:c9:4b:e0:47:ef:c2:49:b8:5a:4b:86:
ba:70:cc:10:2b:e8:c4:52:6b:09:69:e9:cf:e5:b4:
b6:be:f7:78:bb:6b:2d:7b:bd:25:fa:77:d8:85:eb:
54:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CA:6A:B8:37:BA:A0:AB:8E:42:9C:87:62:36:5F:15:A1:15:80:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/12e7f79e-082d-345c-af76-13bf08bb0424.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
173.222.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:7c:01:0f:1b:30:eb:e4:ab:68:ef:26:63:9c:72:f3:3f:64:
87:7c:2e:ad:6b:8e:36:0e:73:ca:68:7d:f5:24:ee:b0:9e:95:
3b:8f:37:65:11:a0:b2:98:3a:2b:f9:e5:59:4b:c8:b3:41:6c:
13:dd:11:11:63:24:76:c8:e7:e1:c6:20:55:3b:6f:f1:84:08:
f2:a4:ba:3e:97:75:bb:4c:21:88:d0:51:b1:5e:36:1c:ba:f2:
9f:97:81:26:c8:fe:a7:fa:18:1c:b2:2f:5f:81:3e:38:ac:b4:
bd:7d:9a:6b:55:d8:f2:03:95:1a:52:15:ba:91:2a:72:a4:72:
69:d0:ff:34:56:dd:de:74:ce:e6:0a:9c:59:e2:18:ee:c4:78:
de:14:3f:74:d9:f6:2a:ec:8b:f1:1d:98:54:47:37:1e:76:32:
53:8a:a1:58:68:b6:de:57:61:e2:f2:f0:ab:dd:fa:c2:18:8d:
5a:75:1b:69:40:7c:2a:03:70:00:e9:f2:e4:6a:fd:33:c2:e8:
94:f9:21:b0:0b:dd:59:42:6f:6e:a7:03:69:76:ce:78:20:e0:
5d:a6:46:98:a6:a7:03:70:01:17:9c:56:5a:09:68:4a:bf:ce:
f5:f2:b0:d1:94:89:53:d5:4c:22:67:a7:ea:f3:3f:5b:84:7a:
53:37:77:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEguwBWEO2nIBMcffcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIxMjE0MDA1MVoXDTI1MDMxMjEzMDA1MVowLzEtMCsGA1UEAxMk
NDVhMWRkNDAtY2NiMy00NzFkLTkwMjktOGFjZWMwZjNjNGEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui3NZzbAr1qxC25uYrNW2xSoYmU8i32cvKzp
BsZe9YuHb4rBZmugfbVpB/7mZ8IucWoyCyXT2as+KUr/xBOFxyx/HDBAGg2idueF
d126DDfUcIw/2D3pgR+tMc3Jp5HfVRdPbqXvS0df0/unuFbldZfF2WcpCxc3sS9f
rE7fukrvVizei20ybAQEP5r3EwhcchZWps7QnbH4NAv26YxRaqvXzxr6/VGw0SBv
zEdQln7sQAdwA59tsgz15i0MOhuKLEsQutL04OFESlwkEXNrpmzjqTmLyUvgR+/C
SbhaS4a6cMwQK+jEUmsJaenP5bS2vvd4u2ste70l+nfYhetUwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIHKarg3uqCrjkKch2I2XxWhFYDDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTJlN2Y3OWUtMDgyZC0z
NDVjLWFmNzYtMTNiZjA4YmIwNDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrd6AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAR8AQ8bMOvkq2jvJmOccvM/ZId8Lq1rjjYOc8poffUk7rCelTuPN2UR
oLKYOiv55VlLyLNBbBPdERFjJHbI5+HGIFU7b/GECPKkuj6XdbtMIYjQUbFeNhy6
8p+XgSbI/qf6GByyL1+BPjistL19mmtV2PIDlRpSFbqRKnKkcmnQ/zRW3d50zuYK
nFniGO7EeN4UP3TZ9irsi/EdmFRHNx52MlOKoVhott5XYeLy8Kvd+sIYjVp1G2lA
fCoDcADp8uRq/TPC6JT5IbAL3VlCb26nA2l2zngg4F2mRpimpwNwARecVloJaEq/
zvXysNGUiVPVTCJnp+rzP1uEelM3d7o=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:36:15 2025 by rpki-client