Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/a032e0ab-f5b5-3c6c-a88b-91d5f8360099.roa
File: a032e0ab-f5b5-3c6c-a88b-91d5f8360099.roa (raw, json)
Hash identifier: 32LBEc+DDzRO7pHParckFmRGan+Ktw/9dcd5Wbeq73g=
Subject key identifier: 10:D9:A8:2F:BA:60:90:D2:FB:8C:13:49:9D:81:B6:CD:B1:13:6D:8E
Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial: 010D0C9F43285848D7A64D85C698FEF3927AD29C
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/a032e0ab-f5b5-3c6c-a88b-91d5f8360099.roa
Signing time: Tue 11 Feb 2025 02:00:39 +0000
ROA not before: Tue 11 Feb 2025 02:00:39 +0000
ROA not after: Mon 12 May 2025 01:00:39 +0000
asID: 63062
IP address blocks: 67.44.16.0/20 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d7:a6:4d:85:c6:98:fe:f3:92:7a:d2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Validity
Not Before: Feb 11 02:00:39 2025 GMT
Not After : May 12 01:00:39 2025 GMT
Subject: CN=7bb3ae74-7c1b-4123-843a-30e0fb7f3328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:eb:48:34:11:11:e4:f5:e9:9d:05:a2:d8:fb:
5c:54:50:80:50:4f:47:42:25:b2:52:37:f5:f6:76:
39:ab:9a:df:63:6f:06:ea:94:7e:72:05:6a:24:8e:
41:21:75:0d:8f:78:15:01:4b:4c:82:eb:e1:51:ad:
c6:5a:7a:25:ba:17:85:7b:c7:dc:83:8c:b7:6f:c6:
a8:01:d0:71:a7:0e:25:f9:e6:f9:dd:09:9c:23:0f:
bd:3b:ca:2d:ae:0d:5e:f2:7d:4d:f2:95:a0:f7:8d:
1a:07:0d:32:b8:6c:dd:f8:bb:94:84:da:50:c5:b0:
3e:4b:27:10:86:f7:95:99:01:22:49:ba:e7:e8:bd:
a8:d2:62:28:f4:39:7a:c3:e3:1e:e3:bb:35:6b:2a:
77:9f:68:73:f1:36:95:a9:cb:e0:36:99:fe:06:a4:
ee:bc:c2:1a:31:16:37:5b:1f:48:56:c7:eb:34:78:
2a:e0:12:d1:d3:32:18:57:98:65:d5:56:5e:58:a9:
b0:41:d2:e1:99:61:bb:8d:d3:c0:c1:73:2b:43:ff:
ee:97:ff:c3:86:ee:2b:3c:8b:aa:63:ed:d1:b5:7e:
63:38:09:36:96:3f:e1:13:61:a5:bb:d9:eb:cf:d7:
49:24:e8:74:37:94:cf:ae:3a:de:76:a4:e7:8d:fb:
3a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D9:A8:2F:BA:60:90:D2:FB:8C:13:49:9D:81:B6:CD:B1:13:6D:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/a032e0ab-f5b5-3c6c-a88b-91d5f8360099.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
X509v3 Authority Key Identifier:
keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
sbgp-ipAddrBlock: critical
IPv4:
67.44.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:a6:a9:10:5b:49:7d:7f:e7:a3:cb:c9:60:c0:ab:dd:61:76:
cb:21:59:7b:77:51:b6:f5:03:ce:30:b4:3a:23:10:1d:59:23:
e7:c3:35:69:43:ce:d4:21:2e:10:ab:5f:e6:3b:8e:f4:2c:61:
df:93:da:c6:11:5a:72:da:9c:c9:56:a7:43:92:10:f6:b1:08:
5d:56:57:b8:bd:cc:3a:56:48:27:15:81:1c:8d:24:a8:9a:5e:
df:ec:7f:05:c0:d6:89:c1:4d:bc:f0:62:40:c3:26:c1:14:7b:
f0:37:46:b5:2a:92:2b:d3:19:e9:b0:50:3a:4d:15:1d:3e:59:
e4:33:99:66:cc:0c:8b:b3:9e:36:ed:68:c7:1e:19:29:41:6d:
90:85:d2:5f:6d:c7:a0:d5:8b:d6:5a:fa:31:79:91:dd:37:dc:
a6:d7:53:8c:06:32:cb:00:d0:32:65:cd:b3:b9:3f:42:18:2d:
c8:72:c2:70:4f:8f:45:c6:f8:cd:9f:6e:02:ce:c0:aa:ec:c0:
8b:e1:6a:20:bc:90:68:3e:60:fc:55:4e:e5:10:f2:90:c4:75:
ca:87:c0:e3:02:d2:e0:99:af:52:a8:fb:19:ae:0d:43:8a:8a:
7b:07:fb:44:51:ec:18:a0:0f:fd:78:d2:29:93:7e:dc:85:05:
a8:3d:09:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjXpk2Fxpj+85J60pwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0
NDYwMB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk
N2JiM2FlNzQtN2MxYi00MTIzLTg0M2EtMzBlMGZiN2YzMzI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhutINBER5PXpnQWi2PtcVFCAUE9HQiWyUjf1
9nY5q5rfY28G6pR+cgVqJI5BIXUNj3gVAUtMguvhUa3GWnoluheFe8fcg4y3b8ao
AdBxpw4l+eb53QmcIw+9O8otrg1e8n1N8pWg940aBw0yuGzd+LuUhNpQxbA+SycQ
hveVmQEiSbrn6L2o0mIo9Dl6w+Me47s1ayp3n2hz8TaVqcvgNpn+BqTuvMIaMRY3
Wx9IVsfrNHgq4BLR0zIYV5hl1VZeWKmwQdLhmWG7jdPAwXMrQ//ul//Dhu4rPIuq
Y+3RtX5jOAk2lj/hE2Glu9nrz9dJJOh0N5TPrjredqTnjfs6TQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBDZqC+6YJDS+4wTSZ2Bts2xE22OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4
ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvYTAzMmUwYWItZjViNS0z
YzZjLWE4OGItOTFkNWY4MzYwMDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk
MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy
NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5
ZTIzMjQ0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQywQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADqmqRBbSX1/56PLyWDAq91hdsshWXt3Ubb1A84wtDojEB1ZI+fDNWlD
ztQhLhCrX+Y7jvQsYd+T2sYRWnLanMlWp0OSEPaxCF1WV7i9zDpWSCcVgRyNJKia
Xt/sfwXA1onBTbzwYkDDJsEUe/A3RrUqkivTGemwUDpNFR0+WeQzmWbMDIuznjbt
aMceGSlBbZCF0l9tx6DVi9Za+jF5kd033KbXU4wGMssA0DJlzbO5P0IYLchywnBP
j0XG+M2fbgLOwKrswIvhaiC8kGg+YPxVTuUQ8pDEdcqHwOMC0uCZr1Ko+xmuDUOK
insH+0RR7BigD/140imTftyFBag9CVQ=
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:58:35 2025 by rpki-client