Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/fafd8ca9-b845-3804-8d42-2f117aa68ed5.roa
File: fafd8ca9-b845-3804-8d42-2f117aa68ed5.roa (raw, json)
Hash identifier: WZRGpwsTwV2ntn3q4nPXL3Hiuk1X3kbqe1IXW84iwFg=
Subject key identifier: DC:6E:6C:AD:4F:40:48:56:F3:08:F5:BE:AA:35:87:BE:AC:E4:44:AA
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F432858486695B518F945F5115C7E20C0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/fafd8ca9-b845-3804-8d42-2f117aa68ed5.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 31898
IP address blocks: 158.120.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:b5:18:f9:45:f5:11:5c:7e:20:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=3fb9e1e7-fedd-4351-9846-49e2379bad13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c3:dc:ce:67:6d:de:b2:73:c5:52:15:46:6d:
ee:b9:f9:d8:56:9f:61:43:b2:e9:91:93:19:ff:65:
07:11:29:81:16:77:1c:36:1a:6e:96:fc:29:ad:96:
85:31:42:dd:98:2e:5e:8d:a5:f6:c2:6c:6f:bc:90:
7c:7f:04:71:bf:fd:7e:29:e2:c3:f9:f3:ab:97:99:
cc:f5:eb:5e:0b:86:fa:53:47:88:2e:e7:dc:6d:f7:
2f:22:bf:3c:eb:11:74:02:0c:b3:7f:56:56:e3:5b:
51:81:36:a4:be:95:b3:7d:6d:7c:9f:48:65:17:21:
54:37:ab:39:2b:65:31:4e:97:d9:3d:ae:31:be:3b:
f7:90:e7:c3:f2:24:58:54:dd:e8:f0:60:53:57:68:
8a:9c:5e:68:15:b0:2b:68:21:0c:86:22:87:8e:8d:
ac:eb:de:6a:56:bc:25:50:3f:1c:36:7f:88:05:51:
3c:3b:7f:23:4d:04:50:c6:d3:11:a0:60:83:7b:fd:
2a:f9:cd:bf:1a:8a:6e:07:5e:0a:12:3e:52:61:bd:
6e:e4:3b:3a:d6:80:09:0e:03:a8:6b:45:bb:fc:1e:
a9:ac:ed:94:60:a2:76:c2:ae:0c:fe:c7:45:c1:fc:
1c:20:66:e6:47:30:3c:a3:fb:dd:f0:fa:c8:69:34:
64:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6E:6C:AD:4F:40:48:56:F3:08:F5:BE:AA:35:87:BE:AC:E4:44:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/fafd8ca9-b845-3804-8d42-2f117aa68ed5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
158.120.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:53:cc:ae:19:1c:61:13:0c:ff:8f:dd:73:47:ea:4a:3a:01:
43:83:28:9b:9b:99:78:94:09:78:e7:75:d8:c9:9a:6c:28:d3:
8a:b7:35:a8:55:30:eb:ea:ad:f3:15:74:75:23:98:87:51:cb:
58:54:f2:c8:13:db:c6:32:8f:24:8c:a0:a1:a4:3e:e0:74:87:
b7:7b:10:6e:d1:d6:db:8b:5f:db:63:ad:e0:6c:b4:24:4d:30:
d6:78:9d:81:e1:01:9b:76:f2:9f:b1:d5:52:cf:c6:e6:8c:88:
29:c3:db:28:95:de:34:05:fd:3a:30:44:dd:f6:25:6a:f4:fb:
97:36:2a:91:bf:ba:ee:bb:1d:ea:e3:fd:94:f7:96:91:37:bd:
69:06:bf:fa:ba:56:60:88:ea:d6:83:d4:9b:f0:44:3d:ec:e3:
66:e5:b8:ab:01:d2:1c:8d:f3:60:2e:fe:7e:ad:08:1f:ff:c7:
00:f0:01:8a:4c:42:e3:c6:d6:4c:de:a1:9a:b5:2b:85:bd:aa:
9e:69:23:ba:82:7e:f7:42:2c:59:1c:8e:2e:ac:52:38:c3:ea:
74:b2:2a:f2:4b:76:27:d2:76:9b:a6:2e:13:2c:25:8e:32:a2:
0b:a2:a9:9c:f9:15:86:be:19:63:c5:6c:b8:68:7d:eb:9d:ba:
53:57:f2:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhmlbUY+UX1EVx+IMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy
OWJmMB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk
M2ZiOWUxZTctZmVkZC00MzUxLTk4NDYtNDllMjM3OWJhZDEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscPczmdt3rJzxVIVRm3uufnYVp9hQ7LpkZMZ
/2UHESmBFnccNhpulvwprZaFMULdmC5ejaX2wmxvvJB8fwRxv/1+KeLD+fOrl5nM
9eteC4b6U0eILufcbfcvIr886xF0Agyzf1ZW41tRgTakvpWzfW18n0hlFyFUN6s5
K2UxTpfZPa4xvjv3kOfD8iRYVN3o8GBTV2iKnF5oFbAraCEMhiKHjo2s695qVrwl
UD8cNn+IBVE8O38jTQRQxtMRoGCDe/0q+c2/GopuB14KEj5SYb1u5Ds61oAJDgOo
a0W7/B6prO2UYKJ2wq4M/sdFwfwcIGbmRzA8o/vd8PrIaTRkKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNxubK1PQEhW8wj1vqo1h76s5ESqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2
ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZmFmZDhjYTktYjg0NS0z
ODA0LThkNDItMmYxMTdhYTY4ZWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx
NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4
MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx
YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnngQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALNTzK4ZHGETDP+P3XNH6ko6AUODKJubmXiUCXjnddjJmmwo04q3NahV
MOvqrfMVdHUjmIdRy1hU8sgT28YyjySMoKGkPuB0h7d7EG7R1tuLX9tjreBstCRN
MNZ4nYHhAZt28p+x1VLPxuaMiCnD2yiV3jQF/TowRN32JWr0+5c2KpG/uu67Herj
/ZT3lpE3vWkGv/q6VmCI6taD1JvwRD3s42bluKsB0hyN82Au/n6tCB//xwDwAYpM
QuPG1kzeoZq1K4W9qp5pI7qCfvdCLFkcji6sUjjD6nSyKvJLdifSdpumLhMsJY4y
oguiqZz5FYa+GWPFbLhofeudulNX8sE=
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:44:46 2025 by rpki-client