Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/1f488ac3-ad33-356c-988c-89da07e21928.roa
File: 1f488ac3-ad33-356c-988c-89da07e21928.roa (raw, json)
Hash identifier: wBN3x5BTpHrT1LjULJywaC1TE6oZDRkbYkITN7dCnq4=
Subject key identifier: 5C:38:2E:E7:32:2D:78:11:87:30:AC:7F:60:82:41:04:CB:9F:39:49
Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial: 010D0C9F4328584898D6099139C3DE02C5747C00
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/1f488ac3-ad33-356c-988c-89da07e21928.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 6621
IP address blocks: 67.142.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:09:91:39:c3:de:02:c5:74:7c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=5085e93b-1aba-4801-bd75-c9fc7c70f136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e4:75:d3:48:a9:7b:66:91:51:82:05:45:f7:
ae:84:18:53:e1:69:02:94:50:3e:ab:28:c8:a6:91:
c5:9b:43:ba:6e:1c:90:fc:c0:da:a6:f1:0f:17:8c:
a2:77:04:fb:29:6c:ac:65:fa:c4:22:5b:a3:22:f4:
8d:8d:96:e7:7d:d8:a5:8d:ee:da:fd:31:6e:8e:86:
04:89:c2:9f:dd:b0:fe:09:cd:be:26:e9:9b:26:12:
ec:08:7b:25:f5:27:79:61:a9:77:36:c0:f9:55:7b:
26:43:76:cf:d9:81:e9:c1:8b:f8:f8:e5:27:f9:7f:
db:46:b2:b7:a5:4e:e1:db:2a:28:f7:6b:05:2e:23:
d7:80:49:33:1e:24:b8:19:9a:eb:69:3a:1f:1b:73:
80:f3:c3:9d:bf:3d:0f:15:f8:32:d2:73:82:20:ca:
a4:3c:18:e6:c0:42:8f:a3:ca:5a:11:ae:f4:0e:7e:
94:af:d6:71:c0:5c:61:28:5b:54:30:a3:86:58:a1:
b5:64:23:e6:20:30:1c:54:16:58:ce:b8:85:e8:ed:
eb:98:47:b7:7c:20:66:f4:ca:ce:ea:9c:a2:fe:52:
e4:f8:b2:70:16:66:d1:8c:37:f7:b0:76:82:6d:70:
4b:5f:39:3e:28:f7:49:7c:0e:22:d7:50:fd:0c:dc:
b2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:38:2E:E7:32:2D:78:11:87:30:AC:7F:60:82:41:04:CB:9F:39:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/1f488ac3-ad33-356c-988c-89da07e21928.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
X509v3 Authority Key Identifier:
keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
sbgp-ipAddrBlock: critical
IPv4:
67.142.187.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:d2:2b:d4:69:c0:e4:d1:11:b6:75:5a:c7:88:19:f2:e7:de:
fe:7e:ff:6a:99:6e:39:0c:3d:c4:6b:e6:fa:b7:6a:cc:68:eb:
c8:02:b8:1d:43:49:0a:2e:55:89:fe:05:38:c6:c8:66:96:57:
8f:45:e6:de:39:5c:a0:3e:d6:b1:5d:c2:ae:33:0d:0c:47:7b:
5c:16:2e:dd:12:c2:b5:a2:9e:24:ce:27:af:66:ee:c1:c5:e3:
11:b5:4e:b5:d0:5a:54:79:28:e6:95:67:46:49:0c:c9:61:6e:
23:49:09:9e:ea:ff:37:e2:9d:13:15:71:aa:f1:fc:4b:79:71:
38:91:82:d6:bb:8f:f5:f0:34:dd:e0:be:d2:62:2e:12:77:36:
39:d8:b5:51:47:1b:bd:e1:8a:31:ef:5d:bc:69:39:a0:70:2d:
ab:bf:ec:ac:66:d1:73:be:d8:9f:3c:49:bc:02:36:0c:cc:60:
22:f1:9d:1c:bc:b3:9e:dc:18:99:c0:13:4e:d3:f5:bf:d8:07:
79:7c:7f:ce:e8:8e:f9:a9:a7:bb:fd:04:df:93:c9:3f:28:bc:
05:1f:c3:77:85:cd:57:78:e4:e0:8b:70:a0:68:88:fa:4c:52:
bc:a1:3c:d3:b1:59:ac:5b:cd:0f:ed:03:04:fe:3b:95:df:3c:
8b:26:96:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1gmROcPeAsV0fAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0
NDYwMB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk
NTA4NWU5M2ItMWFiYS00ODAxLWJkNzUtYzlmYzdjNzBmMTM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOR100ipe2aRUYIFRfeuhBhT4WkClFA+qyjI
ppHFm0O6bhyQ/MDapvEPF4yidwT7KWysZfrEIlujIvSNjZbnfdilje7a/TFujoYE
icKf3bD+Cc2+JumbJhLsCHsl9Sd5Yal3NsD5VXsmQ3bP2YHpwYv4+OUn+X/bRrK3
pU7h2yoo92sFLiPXgEkzHiS4GZrraTofG3OA88Odvz0PFfgy0nOCIMqkPBjmwEKP
o8paEa70Dn6Ur9ZxwFxhKFtUMKOGWKG1ZCPmIDAcVBZYzriF6O3rmEe3fCBm9MrO
6pyi/lLk+LJwFmbRjDf3sHaCbXBLXzk+KPdJfA4i11D9DNyy3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFw4LucyLXgRhzCsf2CCQQTLnzlJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4
ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvMWY0ODhhYzMtYWQzMy0z
NTZjLTk4OGMtODlkYTA3ZTIxOTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk
MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy
NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5
ZTIzMjQ0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ467MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKLSK9RpwOTREbZ1WseIGfLn3v5+/2qZbjkMPcRr5vq3asxo68gCuB1D
SQouVYn+BTjGyGaWV49F5t45XKA+1rFdwq4zDQxHe1wWLt0SwrWiniTOJ69m7sHF
4xG1TrXQWlR5KOaVZ0ZJDMlhbiNJCZ7q/zfinRMVcarx/Et5cTiRgta7j/XwNN3g
vtJiLhJ3NjnYtVFHG73hijHvXbxpOaBwLau/7Kxm0XO+2J88SbwCNgzMYCLxnRy8
s57cGJnAE07T9b/YB3l8f87ojvmpp7v9BN+TyT8ovAUfw3eFzVd45OCLcKBoiPpM
UryhPNOxWaxbzQ/tAwT+O5XfPIsmllk=
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:48:39 2025 by rpki-client