Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/7b7a547d-8253-3de4-9bc6-b02a82562f5e.roa
File: 7b7a547d-8253-3de4-9bc6-b02a82562f5e.roa (raw, json)
Hash identifier: ccbBg31M+lFiglb8h0DsmzFcw5k3lnpM2arkgvi4VdI=
Subject key identifier: 38:E9:7B:97:86:0E:A4:11:ED:82:51:C0:8B:85:B4:41:D5:8B:FC:8A
Certificate issuer: /CN=78ff8a4a-5ee2-475a-b7cc-b971a6288885
Certificate serial: 010D0C9F432858487CEB2DFCEE87488A46F38E70
Authority key identifier: B0:EB:F0:1E:67:E5:D5:52:74:76:34:42:EE:60:3E:B1:49:63:EA:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/7b7a547d-8253-3de4-9bc6-b02a82562f5e.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 23274
IP address blocks: 64.6.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:2d:fc:ee:87:48:8a:46:f3:8e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ff8a4a-5ee2-475a-b7cc-b971a6288885
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=29c861b3-a03d-4cc1-9067-8e8f579e11ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ea:41:b8:ae:09:a3:a8:b3:42:77:4f:e2:3c:
08:a0:7a:ad:a2:1f:40:16:3a:f3:6d:62:70:e3:22:
45:71:0e:98:e3:43:4c:08:ce:8e:0f:0b:ec:2a:43:
6f:04:37:7f:3b:0f:6f:a8:77:7a:7e:5f:21:5e:96:
d7:61:80:c2:93:1c:8e:27:75:68:18:26:7c:54:57:
b2:5d:75:a8:71:88:a8:3b:1e:54:db:f2:ab:25:20:
ca:f2:b0:f3:4b:98:b1:14:90:c9:71:bf:26:ca:d9:
8e:0c:31:fc:a6:17:b9:0b:24:46:cd:44:43:b5:68:
af:b9:8e:c1:0e:0b:a3:fd:1e:14:8d:22:62:75:c9:
cd:59:65:42:64:36:6d:ad:b2:8a:eb:24:9f:a5:cf:
1e:da:58:24:5d:00:ff:3b:ec:c7:5a:4b:a7:22:2e:
54:9b:21:82:21:21:a5:6a:ed:ea:5a:3a:ed:3a:d5:
ee:38:71:b0:08:21:98:b6:1d:7f:af:55:62:69:5d:
4d:c9:0e:a5:f9:4a:72:b9:dc:38:30:b1:3d:9c:21:
67:68:83:5c:a0:d8:20:c0:28:4d:32:e9:a9:a4:13:
d6:4c:2a:91:c5:a2:69:d5:41:29:0e:80:86:83:68:
ef:71:e1:d9:b2:9d:c5:58:89:7e:bc:4f:ce:47:d5:
07:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E9:7B:97:86:0E:A4:11:ED:82:51:C0:8B:85:B4:41:D5:8B:FC:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/7b7a547d-8253-3de4-9bc6-b02a82562f5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.crl
X509v3 Authority Key Identifier:
keyid:B0:EB:F0:1E:67:E5:D5:52:74:76:34:42:EE:60:3E:B1:49:63:EA:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer
sbgp-ipAddrBlock: critical
IPv4:
64.6.18.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:fe:cf:8f:c9:5f:da:f4:99:46:8f:b4:56:61:d6:81:b9:93:
90:bc:89:93:d8:14:5a:13:95:e1:96:29:07:80:c2:60:77:89:
66:9d:69:b0:c8:4b:0e:6d:f4:62:72:84:82:2b:63:15:ec:40:
b6:28:66:ef:12:30:7a:23:e8:7f:ae:be:ed:07:61:89:fa:27:
b2:01:60:0d:8c:98:e7:95:46:a6:3f:be:bc:9f:e8:52:07:11:
fc:a7:79:85:8b:59:b1:ee:ce:58:3b:61:3c:44:6c:bf:dc:7c:
35:be:9c:2f:43:36:27:a2:57:3c:fa:73:b9:01:44:41:e6:b6:
68:f7:36:ee:72:d9:01:36:bc:bb:ac:8c:f2:93:35:d9:15:56:
60:b4:b3:ba:99:fe:8a:a0:e9:4a:fc:44:98:69:ce:83:80:47:
ba:fb:12:6c:ea:93:06:65:66:d6:da:e2:6d:f6:15:5f:fe:87:
d6:62:b2:8f:e6:12:98:a5:d0:39:00:28:e2:b9:e5:a3:ca:a3:
b7:af:13:b8:d8:37:a1:b5:77:f4:91:0f:53:91:b5:e2:43:32:
b7:e3:0d:40:04:2b:b6:dc:19:a6:3a:d9:1e:3b:16:67:99:a2:
58:42:74:6c:92:bb:12:3f:04:04:39:c9:4c:1a:af:da:9f:10:
10:67:3a:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh86y387odIikbzjnAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzhmZjhhNGEtNWVlMi00NzVhLWI3Y2MtYjk3MWE2Mjg4
ODg1MB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
MjljODYxYjMtYTAzZC00Y2MxLTkwNjctOGU4ZjU3OWUxMWZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOpBuK4Jo6izQndP4jwIoHqtoh9AFjrzbWJw
4yJFcQ6Y40NMCM6ODwvsKkNvBDd/Ow9vqHd6fl8hXpbXYYDCkxyOJ3VoGCZ8VFey
XXWocYioOx5U2/KrJSDK8rDzS5ixFJDJcb8mytmODDH8phe5CyRGzURDtWivuY7B
Dguj/R4UjSJidcnNWWVCZDZtrbKK6ySfpc8e2lgkXQD/O+zHWkunIi5UmyGCISGl
au3qWjrtOtXuOHGwCCGYth1/r1ViaV1NyQ6l+Upyudw4MLE9nCFnaINcoNggwChN
MumppBPWTCqRxaJp1UEpDoCGg2jvceHZsp3FWIl+vE/OR9UHHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDjpe5eGDqQR7YJRwIuFtEHVi/yKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGZm
OGE0YS01ZWUyLTQ3NWEtYjdjYy1iOTcxYTYyODg4ODUvN2I3YTU0N2QtODI1My0z
ZGU0LTliYzYtYjAyYTgyNTYyZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhmZjhhNGEtNWVlMi00NzVhLWI3
Y2MtYjk3MWE2Mjg4ODg1Lzc4ZmY4YTRhLTVlZTItNDc1YS1iN2NjLWI5NzFhNjI4
ODg4NS5jcmwwHwYDVR0jBBgwFoAUsOvwHmfl1VJ0djRC7mA+sUlj6kgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGZmOGE0YS01ZWUyLTQ3NWEtYjdjYy1iOTcx
YTYyODg4ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAYSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABz+z4/JX9r0mUaPtFZh1oG5k5C8iZPYFFoTleGWKQeAwmB3iWadabDI
Sw5t9GJyhIIrYxXsQLYoZu8SMHoj6H+uvu0HYYn6J7IBYA2MmOeVRqY/vryf6FIH
EfyneYWLWbHuzlg7YTxEbL/cfDW+nC9DNieiVzz6c7kBREHmtmj3Nu5y2QE2vLus
jPKTNdkVVmC0s7qZ/oqg6Ur8RJhpzoOAR7r7EmzqkwZlZtba4m32FV/+h9Ziso/m
Epil0DkAKOK55aPKo7evE7jYN6G1d/SRD1ORteJDMrfjDUAEK7bcGaY62R47FmeZ
olhCdGySuxI/BAQ5yUwar9qfEBBnOgk=
-----END CERTIFICATE-----
Generated at Thu Apr 10 03:20:36 2025 by rpki-client