Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/e22cc87a-26d1-352c-a851-40ac9097a36b.roa
File: e22cc87a-26d1-352c-a851-40ac9097a36b.roa (raw, json)
Hash identifier: FL1IDx1AY92fpRvsIFzeSwGQwMyu3Sh7Unt8Q+J+gIc=
Subject key identifier: 43:C0:9A:15:CF:32:41:43:C3:91:08:62:06:36:CB:6C:37:FA:E4:0A
Certificate issuer: /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Certificate serial: 010D0C9F43285848222FE1229D296B44B0D71680
Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/e22cc87a-26d1-352c-a851-40ac9097a36b.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 14618
IP address blocks: 64.112.112.0/24 maxlen: 24
64.112.113.0/24 maxlen: 24
64.112.114.0/24 maxlen: 24
64.112.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:e1:22:9d:29:6b:44:b0:d7:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=d34b7f4c-f0c4-47f1-8e34-c36c54b5e629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a7:77:f3:01:32:54:62:bd:49:77:1d:db:d6:
99:2d:f4:10:68:65:ff:83:ea:1c:29:9e:42:49:b8:
6c:21:56:1c:00:8f:2f:ff:26:e4:aa:9c:5d:88:7a:
3e:28:51:ae:d8:89:eb:01:e3:46:f3:49:55:b7:0e:
cc:47:36:e7:fb:80:f2:f6:3b:48:0f:ec:97:72:09:
cf:58:3c:3d:de:08:f7:37:3e:9b:eb:c8:87:ef:ca:
03:d6:2d:56:51:82:d0:43:c3:2e:d8:6e:ec:51:1d:
32:d0:4c:1c:57:b2:62:20:a5:42:03:cd:fb:24:94:
9a:21:04:6e:8f:d0:e8:ea:19:db:15:39:ad:34:24:
be:3f:03:0a:db:07:98:e6:80:cd:34:df:ce:fa:fb:
d4:08:3e:85:4a:dc:42:10:a7:62:27:12:54:ca:b0:
98:ee:ab:84:f0:f3:2d:30:c7:c1:de:27:bd:c9:4c:
62:de:0d:05:d6:43:ba:97:8d:7d:e1:00:6d:65:3a:
19:0f:3d:de:14:eb:e9:fe:0a:65:b6:14:ef:8d:b8:
73:4b:b9:1b:2f:f0:52:2e:a4:26:d1:bb:fe:dc:7c:
c9:2a:eb:30:c0:4a:bb:4a:0e:b7:31:10:2e:45:29:
f0:b7:b1:07:8a:a8:c8:26:4d:3f:c3:b9:1a:00:47:
ea:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C0:9A:15:CF:32:41:43:C3:91:08:62:06:36:CB:6C:37:FA:E4:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/e22cc87a-26d1-352c-a851-40ac9097a36b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl
X509v3 Authority Key Identifier:
keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
sbgp-ipAddrBlock: critical
IPv4:
64.112.112.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:14:4f:72:5f:54:4b:1b:a8:79:3e:8f:a9:2b:16:bc:1e:a7:
5b:0e:4c:e6:59:b4:bc:a0:80:d8:27:8e:3d:98:2f:3f:cd:fb:
7a:1d:b6:86:9e:03:d5:be:a0:33:5f:6c:09:9e:f2:ca:c0:23:
19:ef:18:af:40:cb:49:d3:93:be:77:96:48:ed:32:f7:1a:f1:
c8:18:fd:17:e9:82:ae:99:1d:34:da:22:a1:de:98:ff:68:ba:
45:38:2d:17:49:45:4e:a4:7b:f9:49:53:b4:b7:1e:31:02:fe:
42:4b:d5:a8:7c:cb:12:d6:43:e0:af:6d:d0:7d:10:08:2a:7d:
9b:45:a8:ee:17:76:77:48:89:32:be:eb:a5:8c:6f:2a:6d:b2:
ed:37:b7:6b:3f:4f:a1:ce:6c:09:b8:99:e5:b8:b8:33:f0:57:
a4:62:05:40:0c:bd:cb:87:8d:2d:14:19:6b:95:16:67:8d:1f:
3a:6f:66:57:cf:4d:f3:14:57:0b:05:6f:d6:f6:cd:8c:9e:08:
d3:33:bb:6c:96:89:5d:3e:56:16:df:e5:f4:3b:00:95:d6:8d:
22:1a:11:56:c6:0a:4f:5f:d8:f0:b6:ec:8e:bf:f1:8d:f9:b7:
e3:70:af:26:6e:73:66:22:8b:36:e9:d7:54:83:d7:78:39:37:
5a:cd:9f:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgiL+EinSlrRLDXFoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODZiY2RhNjgtMTVmZC00YzdkLTk4ODctZDlkNjdmMmNh
OTY5MB4XDTI0MTIwODAyMDAzOVoXDTI1MDMwODAyMDAzOVowLzEtMCsGA1UEAxMk
ZDM0YjdmNGMtZjBjNC00N2YxLThlMzQtYzM2YzU0YjVlNjI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKd38wEyVGK9SXcd29aZLfQQaGX/g+ocKZ5C
SbhsIVYcAI8v/ybkqpxdiHo+KFGu2InrAeNG80lVtw7MRzbn+4Dy9jtID+yXcgnP
WDw93gj3Nz6b68iH78oD1i1WUYLQQ8Mu2G7sUR0y0EwcV7JiIKVCA837JJSaIQRu
j9Do6hnbFTmtNCS+PwMK2weY5oDNNN/O+vvUCD6FStxCEKdiJxJUyrCY7quE8PMt
MMfB3ie9yUxi3g0F1kO6l4194QBtZToZDz3eFOvp/gplthTvjbhzS7kbL/BSLqQm
0bv+3HzJKuswwEq7Sg63MRAuRSnwt7EHiqjIJk0/w7kaAEfqOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEPAmhXPMkFDw5EIYgY2y2w3+uQKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NmJj
ZGE2OC0xNWZkLTRjN2QtOTg4Ny1kOWQ2N2YyY2E5NjkvZTIyY2M4N2EtMjZkMS0z
NTJjLWE4NTEtNDBhYzkwOTdhMzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODZiY2RhNjgtMTVmZC00YzdkLTk4
ODctZDlkNjdmMmNhOTY5Lzg2YmNkYTY4LTE1ZmQtNGM3ZC05ODg3LWQ5ZDY3ZjJj
YTk2OS5jcmwwHwYDVR0jBBgwFoAU3aPE+YsUoOm+qk9Hqd0Wrjr3/jEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84NmJjZGE2OC0xNWZkLTRjN2QtOTg4Ny1kOWQ2
N2YyY2E5NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQHBwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE0UT3JfVEsbqHk+j6krFrwep1sOTOZZtLyggNgnjj2YLz/N+3odtoae
A9W+oDNfbAme8srAIxnvGK9Ay0nTk753lkjtMvca8cgY/Rfpgq6ZHTTaIqHemP9o
ukU4LRdJRU6ke/lJU7S3HjEC/kJL1ah8yxLWQ+CvbdB9EAgqfZtFqO4XdndIiTK+
66WMbyptsu03t2s/T6HObAm4meW4uDPwV6RiBUAMvcuHjS0UGWuVFmeNHzpvZlfP
TfMUVwsFb9b2zYyeCNMzu2yWiV0+Vhbf5fQ7AJXWjSIaEVbGCk9f2PC27I6/8Y35
t+NwryZuc2Yiizbp11SD13g5N1rNn2U=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:15 2025 by rpki-client