Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba561342-eae0-3011-8c3e-f3bdd8ab4e1e.roa
File: ba561342-eae0-3011-8c3e-f3bdd8ab4e1e.roa (raw, json)
Hash identifier: lTWGG9JOv4TcdsPLsRkEmJJxdXh3F0uutWM66O8CpoI=
Subject key identifier: B4:EA:B6:44:3B:20:0E:A4:08:8D:AC:43:61:E0:A5:05:E8:45:DF:14
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F771EA09673593DBE07A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba561342-eae0-3011-8c3e-f3bdd8ab4e1e.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 24.127.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:71:ea:09:67:35:93:db:e0:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=425717e7-6348-45e9-9121-868b7795a8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1b:6b:d7:3d:c1:da:28:3d:83:9d:63:3e:a4:
ac:d7:cb:db:57:0b:2c:f1:f6:e6:45:f1:22:b3:f8:
92:45:4f:e4:3b:1e:d5:3d:9c:6f:fa:6d:9a:ea:ef:
3d:3e:97:5f:0b:0c:60:83:50:0e:64:ac:2d:82:ee:
19:83:91:27:4b:56:85:f1:04:ab:40:53:40:45:a1:
90:79:0c:e3:d5:e2:58:4b:26:aa:d3:49:98:6c:98:
ea:39:fa:e7:3a:4b:46:33:35:cb:bc:12:9c:8e:c4:
d1:d1:0e:f3:6f:11:17:40:37:99:e9:6a:10:6e:05:
36:25:45:3e:c6:9c:2b:0d:b9:21:38:79:3c:f4:f4:
f6:f6:20:99:be:cc:bf:36:3e:b4:fd:59:93:8f:cc:
39:3e:c9:52:c3:73:2a:a9:66:80:17:5e:a0:5d:cc:
3f:46:64:d0:29:52:0a:39:1e:cc:a0:5e:85:8a:68:
fa:72:25:88:40:64:33:52:d3:9f:7a:48:7d:e8:86:
5f:23:1e:7a:e4:85:94:3e:2d:e1:27:ac:eb:7a:7f:
e5:ca:69:54:ca:97:44:b7:09:78:fb:36:69:49:92:
74:ba:b3:93:15:77:de:f8:69:e8:3d:b9:60:7e:6e:
33:d3:98:1c:a5:d5:99:40:14:ec:af:c4:95:e9:51:
ef:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EA:B6:44:3B:20:0E:A4:08:8D:AC:43:61:E0:A5:05:E8:45:DF:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba561342-eae0-3011-8c3e-f3bdd8ab4e1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.127.193.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:b2:7e:a5:83:5b:4f:83:47:98:6a:de:a2:b8:ae:e2:9d:59:
10:ae:45:b4:db:f8:60:f6:07:9a:6c:a1:a9:16:f0:4b:bb:a7:
a5:4e:37:68:49:f4:7f:93:16:45:e7:38:b4:1b:d9:56:24:d3:
1c:a9:99:2b:dc:dc:80:0c:24:10:3c:72:88:6d:04:b5:e0:46:
fe:86:0a:a7:bc:89:c4:6b:3f:ca:76:9c:d4:ef:d3:84:01:35:
f5:9d:5f:c8:62:9b:50:22:d1:8a:c9:c0:8d:b7:69:7d:0a:ad:
c7:3c:6f:56:46:ba:fe:05:1c:79:0e:a9:41:80:6a:85:e7:ab:
ca:a3:70:a4:82:18:ef:f1:e3:86:6c:01:b7:9b:f1:22:d4:79:
15:b6:61:ba:de:98:70:4a:eb:d7:cd:1c:da:08:ea:0e:f9:bf:
27:e2:99:46:40:12:24:9b:89:4f:88:03:1b:41:c9:24:98:51:
e7:08:96:c7:7d:81:29:3c:c8:a1:44:63:40:f9:ad:56:1d:8a:
4e:81:2b:79:10:fe:fe:95:ad:06:80:ce:af:37:80:be:b5:c1:
12:00:7c:59:aa:45:7f:0b:5c:7b:b2:dc:21:af:df:4b:31:76:
1a:d1:97:b6:c3:c8:03:bd:1c:11:2c:31:12:5b:24:ec:c5:e2:
58:24:8a:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj093HqCWc1k9vgeoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
NDI1NzE3ZTctNjM0OC00NWU5LTkxMjEtODY4Yjc3OTVhOGU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBtr1z3B2ig9g51jPqSs18vbVwss8fbmRfEi
s/iSRU/kOx7VPZxv+m2a6u89PpdfCwxgg1AOZKwtgu4Zg5EnS1aF8QSrQFNARaGQ
eQzj1eJYSyaq00mYbJjqOfrnOktGMzXLvBKcjsTR0Q7zbxEXQDeZ6WoQbgU2JUU+
xpwrDbkhOHk89PT29iCZvsy/Nj60/VmTj8w5PslSw3MqqWaAF16gXcw/RmTQKVIK
OR7MoF6Fimj6ciWIQGQzUtOfekh96IZfIx565IWUPi3hJ6zren/lymlUypdEtwl4
+zZpSZJ0urOTFXfe+GnoPblgfm4z05gcpdWZQBTsr8SV6VHvLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLTqtkQ7IA6kCI2sQ2HgpQXoRd8UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmE1NjEzNDItZWFlMC0z
MDExLThjM2UtZjNiZGQ4YWI0ZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGH/BMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABiyfqWDW0+DR5hq3qK4ruKdWRCuRbTb+GD2B5psoakW8Eu7p6VON2hJ
9H+TFkXnOLQb2VYk0xypmSvc3IAMJBA8cohtBLXgRv6GCqe8icRrP8p2nNTv04QB
NfWdX8him1Ai0YrJwI23aX0Krcc8b1ZGuv4FHHkOqUGAaoXnq8qjcKSCGO/x44Zs
Abeb8SLUeRW2YbremHBK69fNHNoI6g75vyfimUZAEiSbiU+IAxtBySSYUecIlsd9
gSk8yKFEY0D5rVYdik6BK3kQ/v6VrQaAzq83gL61wRIAfFmqRX8LXHuy3CGv30sx
dhrRl7bDyAO9HBEsMRJbJOzF4lgkims=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:19:44 2025 by rpki-client