Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/acaae100-0c56-36d9-97a6-aa87cc7a3d24.roa
File: acaae100-0c56-36d9-97a6-aa87cc7a3d24.roa (raw, json)
Hash identifier: GzZq0cG7MLCTUX2J3YwGagU4qKBaAr9SyTE/nkIuM0E=
Subject key identifier: F4:E6:B7:49:06:B2:85:29:76:88:BA:DD:E5:13:AA:56:4A:C3:7A:8D
Certificate issuer: /CN=fdea7099-d2e5-45e1-8c1e-a8206f549539
Certificate serial: 010D0C9F43285848F22C65DE9FA8DCFE2CB2FB80
Authority key identifier: 53:19:5B:43:E3:45:6A:E0:13:B2:4D:A8:F8:55:36:67:FC:01:F5:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/acaae100-0c56-36d9-97a6-aa87cc7a3d24.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 16509
IP address blocks: 205.201.40.0/24 maxlen: 24
205.201.41.0/24 maxlen: 24
205.201.42.0/24 maxlen: 24
205.201.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:65:de:9f:a8:dc:fe:2c:b2:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdea7099-d2e5-45e1-8c1e-a8206f549539
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=bd828f1c-760c-4fa0-883a-44bf732d3871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:21:9b:a0:64:d8:13:8f:1d:c5:a5:4a:c3:c9:
c3:6f:c2:39:1e:fe:c4:65:2e:82:60:f4:63:01:86:
41:75:bd:73:dd:4a:2f:28:37:2b:d3:e5:3a:d3:d1:
73:4c:fa:0b:d3:83:a0:a5:38:0c:d2:1d:eb:41:02:
36:d7:66:81:d9:b6:20:f8:40:c6:e8:e8:87:a5:b4:
f5:eb:a0:e0:3c:56:5f:2d:1f:c6:4e:42:28:d5:75:
70:ba:d6:a2:57:0f:94:00:89:98:ba:9c:1b:10:d9:
62:03:53:2f:cd:b3:f7:58:21:57:98:41:fd:a4:b0:
75:36:c1:47:b7:4b:22:3e:e8:1c:5a:04:2f:41:e5:
d1:fd:37:3b:6b:f1:8c:a3:b2:09:10:46:05:31:30:
a0:e8:2a:d2:b4:a9:f5:a2:41:8a:1d:45:72:a6:c6:
e5:df:f5:41:9d:77:9b:22:12:9b:10:7c:cf:3a:9e:
73:9b:34:e9:6c:5e:68:3a:a9:27:cf:1b:b2:a7:4a:
04:39:4b:c4:5e:aa:d0:b4:ba:b9:9f:da:19:02:65:
04:47:c4:f7:2c:ee:cf:7e:15:8a:ee:52:65:eb:23:
2a:fd:3f:1e:7b:ae:90:59:8c:5d:5e:e6:70:07:46:
d3:ea:d1:94:97:e0:09:b1:f9:b9:61:01:72:24:04:
f8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E6:B7:49:06:B2:85:29:76:88:BA:DD:E5:13:AA:56:4A:C3:7A:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/acaae100-0c56-36d9-97a6-aa87cc7a3d24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.crl
X509v3 Authority Key Identifier:
keyid:53:19:5B:43:E3:45:6A:E0:13:B2:4D:A8:F8:55:36:67:FC:01:F5:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer
sbgp-ipAddrBlock: critical
IPv4:
205.201.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:91:d2:69:b3:a8:33:48:70:78:dd:7d:a4:77:ff:a3:cb:60:
71:96:3d:4c:d5:f6:0c:36:b6:2a:75:57:1c:05:40:4a:50:9e:
84:d8:d5:32:4b:9e:76:3b:8e:70:86:fd:b6:eb:2d:09:d9:6a:
59:a5:a2:8c:25:26:5e:45:24:d8:87:59:6c:1a:83:f2:d5:bb:
70:8b:52:f5:ab:33:f3:c3:46:8b:46:8e:7c:66:85:7a:bf:43:
1d:35:e3:13:a6:8e:ef:5d:36:4f:7b:14:56:85:94:b8:09:03:
89:b8:46:b1:73:af:db:11:4f:56:a4:67:40:82:07:3f:af:c9:
e1:d0:d4:b4:88:8b:82:b2:7a:ea:e9:b2:01:66:bc:af:b0:53:
04:ac:65:ca:d1:29:ae:85:90:06:10:1c:64:c9:44:ff:0a:e6:
15:13:15:46:b8:91:4d:94:df:9e:9f:a5:46:9c:70:3a:6b:06:
38:19:70:0c:bc:b2:5c:16:51:c0:3d:dd:7c:14:61:09:89:31:
3a:16:bd:5c:a1:55:56:12:3b:4e:5f:a2:dc:df:11:31:50:b8:
da:09:ef:ed:34:20:c1:f0:b7:11:0c:52:17:10:da:3e:bd:a4:
5f:2a:a8:b7:e6:05:00:dc:ae:94:df:58:d4:fc:7e:70:94:0d:
76:eb:10:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLGXen6jc/iyy+4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmRlYTcwOTktZDJlNS00NWUxLThjMWUtYTgyMDZmNTQ5
NTM5MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk
YmQ4MjhmMWMtNzYwYy00ZmEwLTg4M2EtNDRiZjczMmQzODcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySGboGTYE48dxaVKw8nDb8I5Hv7EZS6CYPRj
AYZBdb1z3UovKDcr0+U609FzTPoL04OgpTgM0h3rQQI212aB2bYg+EDG6OiHpbT1
66DgPFZfLR/GTkIo1XVwutaiVw+UAImYupwbENliA1MvzbP3WCFXmEH9pLB1NsFH
t0siPugcWgQvQeXR/Tc7a/GMo7IJEEYFMTCg6CrStKn1okGKHUVypsbl3/VBnXeb
IhKbEHzPOp5zmzTpbF5oOqknzxuyp0oEOUvEXqrQtLq5n9oZAmUER8T3LO7PfhWK
7lJl6yMq/T8ee66QWYxdXuZwB0bT6tGUl+AJsfm5YQFyJAT4owIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPTmt0kGsoUpdoi63eUTqlZKw3qNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mZGVh
NzA5OS1kMmU1LTQ1ZTEtOGMxZS1hODIwNmY1NDk1MzkvYWNhYWUxMDAtMGM1Ni0z
NmQ5LTk3YTYtYWE4N2NjN2EzZDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmRlYTcwOTktZDJlNS00NWUxLThj
MWUtYTgyMDZmNTQ5NTM5L2ZkZWE3MDk5LWQyZTUtNDVlMS04YzFlLWE4MjA2ZjU0
OTUzOS5jcmwwHwYDVR0jBBgwFoAUUxlbQ+NFauATsk2o+FU2Z/wB9SgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mZGVhNzA5OS1kMmU1LTQ1ZTEtOGMxZS1hODIw
NmY1NDk1MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzckoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAWR0mmzqDNIcHjdfaR3/6PLYHGWPUzV9gw2tip1VxwFQEpQnoTY1TJL
nnY7jnCG/bbrLQnZalmloowlJl5FJNiHWWwag/LVu3CLUvWrM/PDRotGjnxmhXq/
Qx014xOmju9dNk97FFaFlLgJA4m4RrFzr9sRT1akZ0CCBz+vyeHQ1LSIi4Kyeurp
sgFmvK+wUwSsZcrRKa6FkAYQHGTJRP8K5hUTFUa4kU2U356fpUaccDprBjgZcAy8
slwWUcA93XwUYQmJMToWvVyhVVYSO05fotzfETFQuNoJ7+00IMHwtxEMUhcQ2j69
pF8qqLfmBQDcrpTfWNT8fnCUDXbrEFg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:17:17 2025 by rpki-client