Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/495df817-6aa5-3bb3-ab23-e669e818122d.roa
File: 495df817-6aa5-3bb3-ab23-e669e818122d.roa (raw, json)
Hash identifier: uV4MDe+BFyocr+oQ8L+N5hqgyL0DSRoqeZUCw0tSZ+0=
Subject key identifier: 9C:C5:6A:5A:04:5E:CE:24:FD:7E:74:30:1E:07:99:BF:B6:B6:A1:8D
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F432858487E5067CCF7F10B346492B5A0
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/495df817-6aa5-3bb3-ab23-e669e818122d.roa
Signing time: Fri 10 Jan 2025 02:00:40 +0000
ROA not before: Fri 10 Jan 2025 02:00:40 +0000
ROA not after: Thu 10 Apr 2025 01:00:40 +0000
asID: 0
IP address blocks: 192.67.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7e:50:67:cc:f7:f1:0b:34:64:92:b5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Jan 10 02:00:40 2025 GMT
Not After : Apr 10 01:00:40 2025 GMT
Subject: CN=326ecd2d-c3f8-40ef-b501-cf4a48bad604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a4:75:6e:c0:cd:88:fe:33:7a:b5:55:4b:97:
c5:10:98:7d:9b:72:57:10:15:2d:81:dc:47:6e:02:
40:3d:e7:05:41:5e:9e:26:8c:64:26:bc:9a:cd:f8:
f9:e6:00:15:21:07:e1:94:53:e1:aa:75:9c:b8:28:
3b:88:d9:a9:91:d3:5a:85:9c:58:c8:c9:fa:70:b3:
95:82:5d:74:16:5f:21:0b:88:45:20:d6:5e:29:af:
0a:c8:27:58:04:76:cf:28:68:9e:be:ff:03:12:29:
29:29:87:f0:71:c8:2b:d3:b4:e1:8f:8a:f8:ae:9d:
b0:2d:3a:74:d3:95:78:26:9e:21:83:9e:f6:99:c6:
15:d8:b1:60:4f:d4:d7:87:dc:2b:19:77:95:d2:a1:
70:d5:e1:07:b8:7b:4b:79:d6:3d:13:4f:b3:20:e0:
bf:3e:53:36:b8:7f:c9:ae:5b:a7:b1:eb:c3:24:53:
bb:9c:7d:b3:9d:7c:b2:cb:83:9a:73:71:31:2e:44:
36:e0:fe:1c:b0:08:62:2e:c3:ad:31:de:35:5f:88:
d5:b2:d9:72:39:2b:46:e9:15:3b:2d:17:8d:8b:dc:
7d:e1:68:69:0c:98:6e:bd:09:cb:e9:c2:5c:c5:cd:
30:62:94:dc:55:07:b3:e9:e3:43:84:2a:25:7d:f3:
4c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C5:6A:5A:04:5E:CE:24:FD:7E:74:30:1E:07:99:BF:B6:B6:A1:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/495df817-6aa5-3bb3-ab23-e669e818122d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
192.67.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:36:c0:62:f9:7b:e6:ea:3f:21:61:e7:1a:66:e5:e1:62:71:
e8:95:73:6b:0c:8e:3f:31:4f:ef:ba:6c:a7:97:55:4b:e3:49:
a6:69:14:da:35:3a:4e:f5:a4:9c:10:07:a3:8e:7a:68:67:7e:
75:e2:4b:85:f8:be:dd:9e:9c:c9:64:c7:25:6a:50:35:36:2b:
01:23:87:cc:ba:f7:b7:c3:b0:a6:36:14:0d:96:89:a6:b8:5b:
5e:e0:8d:4a:0a:24:67:35:9a:54:be:d1:31:56:47:d3:78:90:
86:a1:e2:94:9f:85:ba:9e:19:7e:aa:1b:80:93:6e:95:a3:b8:
20:4f:4c:80:5b:d1:32:30:ff:28:e6:22:d2:27:9f:89:d1:c8:
a0:c5:e1:40:bc:b9:91:5a:ac:10:35:03:19:3b:bf:d1:e1:8f:
fb:5b:f6:3a:e0:9c:07:a7:89:cb:88:3a:9e:b3:db:82:09:6a:
5d:ca:7e:d2:a2:cd:78:21:4b:52:d5:87:63:e0:a5:e8:4f:93:
4c:b1:1b:c9:18:0c:bd:ef:5b:8a:99:13:b8:23:b2:62:48:de:
00:fa:de:6c:2d:ed:cb:47:63:23:65:e7:84:be:30:61:6d:58:
e6:35:a4:8c:ec:35:b0:4f:41:cd:dc:b7:14:3b:2d:6f:aa:0a:
34:6e:b0:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh+UGfM9/ELNGSStaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5
YzIwMB4XDTI1MDExMDAyMDA0MFoXDTI1MDQxMDAxMDA0MFowLzEtMCsGA1UEAxMk
MzI2ZWNkMmQtYzNmOC00MGVmLWI1MDEtY2Y0YTQ4YmFkNjA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKR1bsDNiP4zerVVS5fFEJh9m3JXEBUtgdxH
bgJAPecFQV6eJoxkJryazfj55gAVIQfhlFPhqnWcuCg7iNmpkdNahZxYyMn6cLOV
gl10Fl8hC4hFINZeKa8KyCdYBHbPKGievv8DEikpKYfwccgr07Thj4r4rp2wLTp0
05V4Jp4hg572mcYV2LFgT9TXh9wrGXeV0qFw1eEHuHtLedY9E0+zIOC/PlM2uH/J
rlunsevDJFO7nH2znXyyy4Oac3ExLkQ24P4csAhiLsOtMd41X4jVstlyOStG6RU7
LReNi9x94WhpDJhuvQnL6cJcxc0wYpTcVQez6eNDhColffNMFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJzFaloEXs4k/X50MB4Hmb+2tqGNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx
MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvNDk1ZGY4MTctNmFhNS0z
YmIzLWFiMjMtZTY2OWU4MTgxMjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi
M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi
OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm
YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEOwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGU2wGL5e+bqPyFh5xpm5eFiceiVc2sMjj8xT++6bKeXVUvjSaZpFNo1
Ok71pJwQB6OOemhnfnXiS4X4vt2enMlkxyVqUDU2KwEjh8y697fDsKY2FA2Wiaa4
W17gjUoKJGc1mlS+0TFWR9N4kIah4pSfhbqeGX6qG4CTbpWjuCBPTIBb0TIw/yjm
ItInn4nRyKDF4UC8uZFarBA1Axk7v9Hhj/tb9jrgnAenicuIOp6z24IJal3KftKi
zXghS1LVh2PgpehPk0yxG8kYDL3vW4qZE7gjsmJI3gD63mwt7ctHYyNl54S+MGFt
WOY1pIzsNbBPQc3ctxQ7LW+qCjRusKI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:46 2025 by rpki-client