Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d38c3b3-aa72-3187-9865-015e0d1edc8a.roa
File: 1d38c3b3-aa72-3187-9865-015e0d1edc8a.roa (raw, json)
Hash identifier: xcjAQuG1UbhyhgLDKFTxTm0TiRkClIkZ3ufKzr9psUA=
Subject key identifier: 26:8D:EA:BF:0E:46:A1:34:EF:7E:61:2F:28:BA:73:8E:3F:B9:14:B7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D4E900FDD134EEB688100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d38c3b3-aa72-3187-9865-015e0d1edc8a.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33489
IP address blocks: 70.90.252.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:4e:90:0f:dd:13:4e:eb:68:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=af378e65-8338-4a5c-a3db-1d9f940c81f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ee:56:fc:62:75:1f:35:67:b3:4b:b1:8e:31:
42:74:4a:8e:34:0b:2a:b2:14:6f:05:7a:a0:53:fd:
0d:87:ee:b6:61:0a:30:73:c6:42:db:d5:12:60:c8:
31:22:4c:be:3e:8c:36:7e:22:e7:6f:79:33:41:c9:
44:2e:93:a0:1d:0b:8e:05:a2:ca:02:18:ca:99:23:
d4:76:3c:fc:e0:af:20:a5:58:0d:6b:31:01:af:5a:
ce:4d:e5:e8:cb:00:19:49:d4:15:21:36:59:7e:31:
4d:35:10:b7:8c:c4:15:05:71:f9:ac:85:cf:17:8c:
db:b2:c4:13:01:66:3a:d4:fb:25:f1:c9:1a:96:f9:
e0:6e:43:f7:13:ef:67:dd:9f:bb:66:10:de:17:09:
a8:16:dc:b7:3d:94:79:f3:5a:a1:a4:6c:3e:9f:19:
05:0f:09:8c:70:d3:91:59:18:61:25:1c:7d:47:9a:
3c:8f:8a:4b:9f:0d:85:cf:55:f8:bf:d9:b9:6f:97:
cd:f1:ef:bb:71:d8:2b:b3:d7:1e:ef:eb:aa:b2:e9:
36:33:4d:a0:82:b6:35:e6:70:3f:73:ed:35:e0:04:
18:38:03:9a:89:f5:d2:b1:2c:33:3c:2c:13:26:dd:
27:35:b1:d9:ae:be:54:be:e0:4d:5e:10:ea:5b:ea:
0f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8D:EA:BF:0E:46:A1:34:EF:7E:61:2F:28:BA:73:8E:3F:B9:14:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d38c3b3-aa72-3187-9865-015e0d1edc8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
70.90.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:da:5b:28:b8:fd:50:5a:e2:7d:05:60:72:2b:71:ed:73:dd:
b0:82:49:16:00:d1:17:a2:bc:d7:ea:c2:a4:1a:3e:8c:f5:8e:
75:a0:d2:92:fe:98:10:7c:ff:7d:cd:95:28:84:06:d2:df:fc:
ee:3a:a3:ac:97:a9:c0:23:5c:72:6b:03:20:90:a7:d2:db:83:
aa:b5:fa:65:ee:46:89:c7:8b:ee:69:a7:15:35:82:95:b0:5b:
08:e5:e2:c7:dc:44:52:83:50:01:29:5d:64:ed:57:a4:11:9e:
5b:4a:37:b1:bf:4e:40:ec:12:ce:6d:04:2a:f2:fe:ea:8e:66:
f4:78:ab:63:a3:ed:3d:3e:77:27:98:65:d0:20:3e:19:c2:4b:
d6:7f:3b:4e:9e:4e:73:81:cb:7e:95:95:2b:18:f8:78:71:4c:
9a:ad:4f:04:d2:91:43:2d:8a:92:4e:52:ea:75:35:db:9a:24:
a3:90:b9:4e:5e:ae:c8:cd:59:f0:53:9f:9c:0b:6a:2e:2d:fc:
80:53:01:72:a6:2d:84:8e:f4:6a:5c:f1:31:38:ec:bf:cb:3a:
1a:e2:c6:2d:d4:51:ad:d8:fb:91:f9:7d:bb:c1:bb:58:bd:78:
4e:d1:9d:6e:95:48:6d:4c:25:8d:9e:e5:fe:28:cc:69:fc:96:
48:51:af:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebU6QD90TTutogQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
YWYzNzhlNjUtODMzOC00YTVjLWEzZGItMWQ5Zjk0MGM4MWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1e5W/GJ1HzVns0uxjjFCdEqONAsqshRvBXqg
U/0Nh+62YQowc8ZC29USYMgxIky+Pow2fiLnb3kzQclELpOgHQuOBaLKAhjKmSPU
djz84K8gpVgNazEBr1rOTeXoywAZSdQVITZZfjFNNRC3jMQVBXH5rIXPF4zbssQT
AWY61Psl8ckalvngbkP3E+9n3Z+7ZhDeFwmoFty3PZR581qhpGw+nxkFDwmMcNOR
WRhhJRx9R5o8j4pLnw2Fz1X4v9m5b5fN8e+7cdgrs9ce7+uqsuk2M02ggrY15nA/
c+014AQYOAOaifXSsSwzPCwTJt0nNbHZrr5UvuBNXhDqW+oP9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCaN6r8ORqE0735hLyi6c44/uRS3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWQzOGMzYjMtYWE3Mi0z
MTg3LTk4NjUtMDE1ZTBkMWVkYzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRlr8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALPaWyi4/VBa4n0FYHIrce1z3bCCSRYA0ReivNfqwqQaPoz1jnWg0pL+
mBB8/33NlSiEBtLf/O46o6yXqcAjXHJrAyCQp9Lbg6q1+mXuRonHi+5ppxU1gpWw
Wwjl4sfcRFKDUAEpXWTtV6QRnltKN7G/TkDsEs5tBCry/uqOZvR4q2Oj7T0+dyeY
ZdAgPhnCS9Z/O06eTnOBy36VlSsY+HhxTJqtTwTSkUMtipJOUup1NduaJKOQuU5e
rsjNWfBTn5wLai4t/IBTAXKmLYSO9Gpc8TE47L/LOhrixi3UUa3Y+5H5fbvBu1i9
eE7RnW6VSG1MJY2e5f4ozGn8lkhRr5M=
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:31:39 2025 by rpki-client