Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/90d4a3ab-a999-3f60-a043-008f4327cba1.roa
File: 90d4a3ab-a999-3f60-a043-008f4327cba1.roa (raw, json)
Hash identifier: G8+MTEDFK65PIZ7uWBOtkNtw9yroF6AiEX1t4O5Qanw=
Subject key identifier: 58:A0:2B:23:59:E8:CC:9D:FC:46:9A:E1:F1:65:4B:88:C7:26:FF:47
Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial: 010D0C9F43285848A830ACE9B694FA714208E718
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/90d4a3ab-a999-3f60-a043-008f4327cba1.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 396982
IP address blocks: 130.41.132.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:ac:e9:b6:94:fa:71:42:08:e7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=46fc5e1e-ba26-40f2-96a9-2f26c585a772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:61:46:51:75:29:51:17:f7:07:90:85:74:10:
aa:a1:bd:30:42:2f:93:c1:20:fc:d6:d5:8a:ed:fc:
ea:69:f3:9c:66:73:c1:7c:6a:08:d8:62:a1:aa:67:
0b:be:ce:26:31:fb:dd:7f:b3:96:93:ca:4a:34:72:
10:b9:41:ef:fb:bb:a0:47:e5:c2:1e:98:9d:6c:12:
35:bb:39:d2:86:07:09:bd:12:73:33:67:4f:47:75:
65:20:6d:15:bd:bd:30:e8:85:25:d3:12:41:ba:33:
1f:de:5d:3c:0d:73:7d:d1:ca:89:0f:e6:fa:de:6e:
56:9e:db:8e:8e:9f:00:78:61:9a:96:ec:b6:b6:68:
8d:54:ea:50:77:2d:44:e0:bb:f6:f2:77:07:88:a7:
86:c1:f5:f2:f1:e5:64:af:38:bb:f8:e0:13:ad:fb:
57:4f:0e:e5:5e:80:c3:ab:2d:58:62:07:79:5c:68:
86:c9:42:d7:64:f1:d2:21:2f:4d:6a:ed:1a:2b:78:
62:ea:52:63:b8:8f:13:f6:b0:31:57:d7:f4:3f:8c:
87:39:b8:8d:db:89:47:e0:d2:68:e2:be:90:da:1d:
7c:91:df:c7:98:62:66:2b:f2:71:4b:32:23:24:c2:
f3:7d:ba:e8:8e:a3:f2:3b:4a:26:25:29:f3:62:ae:
6c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A0:2B:23:59:E8:CC:9D:FC:46:9A:E1:F1:65:4B:88:C7:26:FF:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/90d4a3ab-a999-3f60-a043-008f4327cba1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
X509v3 Authority Key Identifier:
keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
sbgp-ipAddrBlock: critical
IPv4:
130.41.132.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:b5:a6:a0:2e:38:8c:cc:6c:e1:93:aa:bd:e8:49:9b:82:b7:
31:f9:f5:35:12:bc:bb:fd:59:25:2a:7b:27:97:0e:05:5b:0e:
6f:8c:f6:6b:df:92:45:ec:7d:c2:fd:2f:4f:27:65:1f:76:3c:
2a:d3:d9:90:43:65:cf:e8:a4:e8:2f:b7:48:c7:64:64:53:ab:
d4:f0:a4:d9:61:2d:64:5a:0c:27:5e:d3:bf:0a:20:cb:b5:94:
fa:15:ff:4c:c8:67:4d:b3:fb:d2:d4:f2:58:99:3b:44:bf:72:
20:25:70:80:dc:ae:86:1b:26:59:06:56:82:38:53:a9:3c:41:
2d:22:fc:33:b6:f0:e1:f0:f2:8c:05:b6:16:37:51:6b:7d:dc:
bc:14:25:d5:56:ef:77:01:24:02:dd:8d:24:04:ea:99:aa:37:
de:e4:a3:66:e7:20:ee:8a:12:4b:57:2c:a5:77:ad:df:84:56:
e9:fe:eb:84:68:dd:0e:68:1c:86:b6:c0:61:b6:d5:8b:3a:30:
19:eb:2c:37:51:6a:32:f8:df:d4:95:6c:4e:d5:00:ce:a2:82:
bf:ec:05:b9:52:dc:84:ec:cc:dd:6e:e9:00:4b:c6:12:10:fa:
f2:68:11:c7:10:e1:bc:65:74:a1:71:39:df:54:43:02:fe:5d:
bf:29:85:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMKzptpT6cUII5xgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk
NDZmYzVlMWUtYmEyNi00MGYyLTk2YTktMmYyNmM1ODVhNzcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWFGUXUpURf3B5CFdBCqob0wQi+TwSD81tWK
7fzqafOcZnPBfGoI2GKhqmcLvs4mMfvdf7OWk8pKNHIQuUHv+7ugR+XCHpidbBI1
uznShgcJvRJzM2dPR3VlIG0Vvb0w6IUl0xJBujMf3l08DXN90cqJD+b63m5WntuO
jp8AeGGaluy2tmiNVOpQdy1E4Lv28ncHiKeGwfXy8eVkrzi7+OATrftXTw7lXoDD
qy1YYgd5XGiGyULXZPHSIS9Nau0aK3hi6lJjuI8T9rAxV9f0P4yHObiN24lH4NJo
4r6Q2h18kd/HmGJmK/JxSzIjJMLzfbrojqPyO0omJSnzYq5sQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFigKyNZ6Myd/Eaa4fFlS4jHJv9HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvOTBkNGEzYWItYTk5OS0z
ZjYwLWEwNDMtMDA4ZjQzMjdjYmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgimEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHy1pqAuOIzMbOGTqr3oSZuCtzH59TUSvLv9WSUqeyeXDgVbDm+M9mvf
kkXsfcL9L08nZR92PCrT2ZBDZc/opOgvt0jHZGRTq9TwpNlhLWRaDCde078KIMu1
lPoV/0zIZ02z+9LU8liZO0S/ciAlcIDcroYbJlkGVoI4U6k8QS0i/DO28OHw8owF
thY3UWt93LwUJdVW73cBJALdjSQE6pmqN97ko2bnIO6KEktXLKV3rd+EVun+64Ro
3Q5oHIa2wGG21Ys6MBnrLDdRajL439SVbE7VAM6igr/sBblS3ITszN1u6QBLxhIQ
+vJoEccQ4bxldKFxOd9UQwL+Xb8phfY=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:25 2025 by rpki-client