Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/411ef122-4825-4d67-8273-51b23b5d8b3d/bb8fe6b2-7a2b-3e5b-9bef-f89b0814aec3.roa
File: bb8fe6b2-7a2b-3e5b-9bef-f89b0814aec3.roa (raw, json)
Hash identifier: JbZbx/ZGAeTonEdm4vQ+iyzv69e7pADTpcJv45L5yUQ=
Subject key identifier: 05:F0:BD:1F:05:8D:2A:AA:76:DA:0E:49:D4:25:AF:31:C2:6B:A4:0C
Certificate issuer: /CN=411ef122-4825-4d67-8273-51b23b5d8b3d
Certificate serial: 010D0C9F432858489075F5331D62EE4DA516B820
Authority key identifier: E3:4A:A5:05:C4:F4:5D:C3:0F:C8:72:5D:46:30:97:A8:E3:C0:81:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/411ef122-4825-4d67-8273-51b23b5d8b3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/411ef122-4825-4d67-8273-51b23b5d8b3d/bb8fe6b2-7a2b-3e5b-9bef-f89b0814aec3.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 399877
IP address blocks: 205.166.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:f5:33:1d:62:ee:4d:a5:16:b8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411ef122-4825-4d67-8273-51b23b5d8b3d
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=0d781974-3812-4acf-b3f9-7588eb63e01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e3:ed:25:61:25:87:48:a1:c9:5d:ae:92:a9:
49:72:72:69:0e:9e:d9:ce:9a:41:24:8a:9e:af:02:
46:76:d2:16:21:75:15:7d:0a:8b:24:84:f6:de:86:
28:3e:42:de:77:01:50:ed:ca:62:4c:9e:10:ca:b8:
45:f0:8c:6b:c4:31:9c:73:72:b5:ff:ae:b0:c7:0e:
f3:eb:23:2f:f7:c2:f6:ce:df:37:54:19:27:7e:24:
d3:35:f5:6f:ae:ad:00:28:b3:6a:b8:c3:1d:ce:09:
50:46:40:a2:3e:d4:cd:46:46:7d:7e:87:8d:35:c6:
ce:38:43:0c:3d:61:e5:90:4a:5d:b0:6b:3d:8f:41:
4a:98:19:f3:62:60:86:36:ea:03:7c:1f:6b:9e:ea:
28:1e:70:64:de:83:64:55:a9:a8:10:c7:17:b0:b7:
1f:19:22:a2:c2:1e:54:cb:5b:12:8d:d1:e9:50:94:
10:86:f3:d2:7a:7c:c4:d4:95:0d:67:1f:c2:3d:93:
e0:98:69:87:fe:af:19:3b:7c:c4:ad:80:aa:73:c6:
9e:fe:db:cf:b8:19:50:11:b1:68:c2:f5:5c:58:b1:
59:ce:56:e5:65:75:4d:5c:43:78:9c:5d:de:76:fc:
b3:66:bf:61:27:f9:c1:7d:ed:6b:2f:ab:06:7c:cf:
c7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F0:BD:1F:05:8D:2A:AA:76:DA:0E:49:D4:25:AF:31:C2:6B:A4:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/411ef122-4825-4d67-8273-51b23b5d8b3d/bb8fe6b2-7a2b-3e5b-9bef-f89b0814aec3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/411ef122-4825-4d67-8273-51b23b5d8b3d/411ef122-4825-4d67-8273-51b23b5d8b3d.crl
X509v3 Authority Key Identifier:
keyid:E3:4A:A5:05:C4:F4:5D:C3:0F:C8:72:5D:46:30:97:A8:E3:C0:81:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/411ef122-4825-4d67-8273-51b23b5d8b3d.cer
sbgp-ipAddrBlock: critical
IPv4:
205.166.91.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:1a:d6:e5:7c:3a:84:86:be:49:28:ab:65:74:fa:f8:3b:69:
9e:d8:dc:bf:6e:88:15:17:22:af:0b:1b:3b:0d:29:cd:a1:cc:
04:2f:ab:fa:8b:c2:32:2a:5a:a8:56:e1:e0:9b:2e:23:ac:60:
69:98:52:57:14:71:bf:25:ad:e4:c5:77:f9:c6:c1:e2:02:f6:
5e:96:74:63:c3:31:33:62:4c:fb:c4:8c:47:64:fa:dc:a6:08:
02:1b:cd:be:76:f0:60:a5:2d:39:7b:36:9d:1a:95:b3:e4:01:
90:34:9a:d1:f8:b5:d0:6a:9f:94:0e:ea:4b:5d:f8:c7:23:5a:
6c:f3:fc:b0:04:e3:88:3a:33:11:c8:21:e5:bf:07:f5:9c:c1:
83:17:6d:37:01:31:9c:09:74:02:bb:e9:17:ad:2b:a7:ee:3a:
f9:8e:12:4f:58:53:77:2c:47:94:66:77:57:95:ac:32:6c:94:
6a:51:f8:1b:46:8b:70:29:a4:4d:5c:df:b1:ea:c8:a8:70:3b:
73:b9:16:2d:27:c2:4d:a7:9d:4d:61:57:4b:9a:f4:e2:34:4f:
19:79:7c:57:ec:da:40:e8:fb:d2:5f:74:c6:a0:db:b2:37:79:
9f:ac:ad:8f:13:f8:6c:2d:0b:25:01:b4:16:7e:b0:b7:80:03:
5c:27:6b:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdfUzHWLuTaUWuCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDExZWYxMjItNDgyNS00ZDY3LTgyNzMtNTFiMjNiNWQ4
YjNkMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk
MGQ3ODE5NzQtMzgxMi00YWNmLWIzZjktNzU4OGViNjNlMDFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOPtJWElh0ihyV2ukqlJcnJpDp7ZzppBJIqe
rwJGdtIWIXUVfQqLJIT23oYoPkLedwFQ7cpiTJ4QyrhF8IxrxDGcc3K1/66wxw7z
6yMv98L2zt83VBknfiTTNfVvrq0AKLNquMMdzglQRkCiPtTNRkZ9foeNNcbOOEMM
PWHlkEpdsGs9j0FKmBnzYmCGNuoDfB9rnuooHnBk3oNkVamoEMcXsLcfGSKiwh5U
y1sSjdHpUJQQhvPSenzE1JUNZx/CPZPgmGmH/q8ZO3zErYCqc8ae/tvPuBlQEbFo
wvVcWLFZzlblZXVNXEN4nF3edvyzZr9hJ/nBfe1rL6sGfM/HLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAXwvR8FjSqqdtoOSdQlrzHCa6QMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80MTFl
ZjEyMi00ODI1LTRkNjctODI3My01MWIyM2I1ZDhiM2QvYmI4ZmU2YjItN2EyYi0z
ZTViLTliZWYtZjg5YjA4MTRhZWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDExZWYxMjItNDgyNS00ZDY3LTgy
NzMtNTFiMjNiNWQ4YjNkLzQxMWVmMTIyLTQ4MjUtNGQ2Ny04MjczLTUxYjIzYjVk
OGIzZC5jcmwwHwYDVR0jBBgwFoAU40qlBcT0XcMPyHJdRjCXqOPAgQQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy80MTFlZjEyMi00ODI1LTRkNjctODI3My01MWIy
M2I1ZDhiM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzaZbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADka1uV8OoSGvkkoq2V0+vg7aZ7Y3L9uiBUXIq8LGzsNKc2hzAQvq/qL
wjIqWqhW4eCbLiOsYGmYUlcUcb8lreTFd/nGweIC9l6WdGPDMTNiTPvEjEdk+tym
CAIbzb528GClLTl7Np0albPkAZA0mtH4tdBqn5QO6ktd+McjWmzz/LAE44g6MxHI
IeW/B/WcwYMXbTcBMZwJdAK76RetK6fuOvmOEk9YU3csR5Rmd1eVrDJslGpR+BtG
i3AppE1c37HqyKhwO3O5Fi0nwk2nnU1hV0ua9OI0Txl5fFfs2kDo+9JfdMag27I3
eZ+srY8T+GwtCyUBtBZ+sLeAA1wna9U=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:33 2025 by rpki-client