Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/d0c700f9-664c-320a-9ebe-8423a5faed0d.roa
File: d0c700f9-664c-320a-9ebe-8423a5faed0d.roa (raw, json)
Hash identifier: VXs+8lmCSTiUMHAU5UzjMC2S4tOq7l4DfgKJoYgv6W8=
Subject key identifier: B6:A8:58:9A:D2:2C:F3:65:28:7C:E9:32:57:AD:3A:F0:0F:B0:34:A5
Certificate issuer: /CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
Certificate serial: 010D0C9F4328584894A5ECBCFD23AC1B20FF7300
Authority key identifier: A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/d0c700f9-664c-320a-9ebe-8423a5faed0d.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 54613
IP address blocks: 134.195.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:ec:bc:fd:23:ac:1b:20:ff:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=403f2ef3-7258-4851-ac7a-291f8a12293c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b3:a1:42:d5:70:4c:f0:4c:f3:4a:da:25:ec:
c6:4c:26:95:32:8a:fa:7a:98:cd:7b:52:0a:42:46:
c1:09:49:cc:5a:01:95:4e:d6:8a:90:52:33:65:65:
a6:38:08:98:5e:26:88:26:7e:41:aa:c1:19:1f:74:
bd:c8:d7:a9:ca:c3:d0:76:2f:92:12:bd:c4:02:c8:
ea:d4:71:ee:21:01:00:f2:8e:5e:d9:1d:eb:31:ae:
a8:5e:44:3d:2a:f5:88:3f:5e:f1:b5:52:70:4e:8a:
18:1a:2b:8d:6b:21:d1:3b:33:48:7a:c5:79:14:a5:
f4:1f:c3:ca:04:6a:19:1a:b6:d6:83:fe:02:c0:d4:
dc:2f:41:3b:4c:4b:ea:98:7f:86:4a:e8:11:c7:76:
17:c7:b1:9e:d8:a8:71:0a:80:22:82:1c:c2:8f:53:
62:79:d3:4f:f1:84:c7:eb:dc:2d:8d:88:56:5b:d8:
61:c8:32:b4:a0:da:26:a0:89:c6:69:f2:96:5d:37:
f2:b5:42:56:4d:b0:12:6b:a1:0b:23:a7:a8:12:1c:
c3:7d:33:43:9a:b3:df:e4:d7:21:34:df:cc:ab:b3:
92:5e:c6:fb:d4:95:1d:f0:df:27:99:21:11:9f:8b:
d1:ab:b4:f1:cf:41:d2:45:f9:22:4c:36:2a:df:85:
03:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A8:58:9A:D2:2C:F3:65:28:7C:E9:32:57:AD:3A:F0:0F:B0:34:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/d0c700f9-664c-320a-9ebe-8423a5faed0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl
X509v3 Authority Key Identifier:
keyid:A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
sbgp-ipAddrBlock: critical
IPv4:
134.195.76.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:3c:9c:be:e9:eb:29:45:4c:9e:fe:9e:ed:fe:2b:8f:11:b1:
be:ae:19:d5:a1:a0:74:13:5e:59:01:e7:93:b8:29:88:a3:d5:
86:b2:3b:da:78:9d:dd:41:e5:c1:75:98:42:2c:f6:84:69:32:
9c:f6:a4:ec:69:db:6c:37:ca:19:4f:43:c4:c2:91:50:8a:bf:
90:60:4b:30:0e:98:41:05:00:84:0f:30:4f:77:21:df:2d:03:
4c:a2:26:84:45:c6:b3:6b:8d:f0:46:b7:22:eb:08:f9:c9:d7:
1b:6a:f4:7b:99:38:d9:cb:cc:a4:7e:58:5c:47:09:46:3d:d6:
03:db:76:a1:50:78:c0:47:03:6d:90:44:5a:70:4a:99:7b:34:
28:f4:20:e9:9a:6f:38:86:1f:54:f0:fc:08:5d:fc:e5:3a:30:
59:c1:a0:a6:75:ce:cd:e9:20:4d:08:f8:d2:c9:af:0a:f0:c1:
da:19:18:22:e3:ef:0a:8e:89:b5:62:ce:96:e6:71:77:27:6d:
ef:67:f9:e1:62:f6:94:fc:74:90:0b:24:9a:fd:51:26:b4:f6:
9d:d8:ee:96:e3:fb:0f:99:56:e5:b8:a6:2f:43:0e:cf:7c:72:
78:ff:cf:a5:79:bd:0a:00:b1:74:c9:02:a1:74:a9:0f:8a:c2:
b9:88:ca:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiUpey8/SOsGyD/cwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2IzYWQwMDMtYWE3Yi00NWI0LWIyNzMtZTAxY2E1Njg4
OTc2MB4XDTI1MDExODAyMDAzOFoXDTI1MDQxODAxMDAzOFowLzEtMCsGA1UEAxMk
NDAzZjJlZjMtNzI1OC00ODUxLWFjN2EtMjkxZjhhMTIyOTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7OhQtVwTPBM80raJezGTCaVMor6epjNe1IK
QkbBCUnMWgGVTtaKkFIzZWWmOAiYXiaIJn5BqsEZH3S9yNepysPQdi+SEr3EAsjq
1HHuIQEA8o5e2R3rMa6oXkQ9KvWIP17xtVJwTooYGiuNayHROzNIesV5FKX0H8PK
BGoZGrbWg/4CwNTcL0E7TEvqmH+GSugRx3YXx7Ge2KhxCoAighzCj1NiedNP8YTH
69wtjYhWW9hhyDK0oNomoInGafKWXTfytUJWTbASa6ELI6eoEhzDfTNDmrPf5Nch
NN/Mq7OSXsb71JUd8N8nmSERn4vRq7Txz0HSRfkiTDYq34UDyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLaoWJrSLPNlKHzpMletOvAPsDSlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNh
ZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFjYTU2ODg5NzYvZDBjNzAwZjktNjY0Yy0z
MjBhLTllYmUtODQyM2E1ZmFlZDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2IzYWQwMDMtYWE3Yi00NWI0LWIy
NzMtZTAxY2E1Njg4OTc2L2NiM2FkMDAzLWFhN2ItNDViNC1iMjczLWUwMWNhNTY4
ODk3Ni5jcmwwHwYDVR0jBBgwFoAUpXx2gQzGUdcquGv3mpLFL5ycpIkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNhZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFj
YTU2ODg5NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChsNMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGY8nL7p6ylFTJ7+nu3+K48Rsb6uGdWhoHQTXlkB55O4KYij1YayO9p4
nd1B5cF1mEIs9oRpMpz2pOxp22w3yhlPQ8TCkVCKv5BgSzAOmEEFAIQPME93Id8t
A0yiJoRFxrNrjfBGtyLrCPnJ1xtq9HuZONnLzKR+WFxHCUY91gPbdqFQeMBHA22Q
RFpwSpl7NCj0IOmabziGH1Tw/Ahd/OU6MFnBoKZ1zs3pIE0I+NLJrwrwwdoZGCLj
7wqOibVizpbmcXcnbe9n+eFi9pT8dJALJJr9USa09p3Y7pbj+w+ZVuW4pi9DDs98
cnj/z6V5vQoAsXTJAqF0qQ+KwrmIyvE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:44:12 2025 by rpki-client