Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/ba968438-1dc4-3db1-a0a1-e4360c977088.roa
File: ba968438-1dc4-3db1-a0a1-e4360c977088.roa (raw, json)
Hash identifier: lDZjANPiKrdAcgzc36Bt5J3BfrNHvcgCYLKGD09yDnk=
Subject key identifier: 86:B2:1E:0C:4F:D4:1D:8E:58:85:8D:39:AF:89:0B:C4:0B:A8:60:21
Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial: 010D0C9F43285848E16BE7ED6260EE0961207640
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/ba968438-1dc4-3db1-a0a1-e4360c977088.roa
Signing time: Fri 14 Feb 2025 14:00:52 +0000
ROA not before: Fri 14 Feb 2025 14:00:52 +0000
ROA not after: Thu 15 May 2025 13:00:52 +0000
asID: 52129
IP address blocks: 208.84.64.0/24 maxlen: 24
208.86.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:6b:e7:ed:62:60:ee:09:61:20:76:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Validity
Not Before: Feb 14 14:00:52 2025 GMT
Not After : May 15 13:00:52 2025 GMT
Subject: CN=191e2ce3-60bc-4ab2-a6e5-1b295005c740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e0:ae:8b:b1:88:dc:52:a5:a7:44:ce:f6:fe:
c0:c5:7f:bb:73:5a:e6:a7:30:fd:e3:fe:1b:51:fc:
3f:a3:53:57:46:96:e8:b2:cd:8c:29:d2:aa:be:9b:
bd:f5:5c:91:e2:3f:39:e5:f5:14:11:ba:83:98:ae:
d0:1a:6e:6a:e0:47:b8:d1:bb:4a:ae:d9:02:c0:8c:
4e:ed:06:e0:5b:5f:fc:7b:35:13:4d:62:a8:0d:17:
3a:9a:da:58:d7:7a:ac:43:c4:61:49:d7:ac:46:94:
39:18:42:c2:8c:73:c4:42:83:12:bd:3f:0c:09:f1:
e1:c5:34:70:78:3e:f4:aa:bf:3e:4e:e6:cf:ca:56:
20:7c:cf:82:9e:d1:de:47:31:bd:89:60:a0:b9:a2:
7b:d2:48:48:3d:04:9d:3d:3f:70:9f:3e:11:97:40:
7e:4a:f0:4b:19:85:bf:33:2c:32:1c:91:e9:db:ab:
12:f2:01:d8:f0:8b:f6:b8:0b:79:f7:2b:97:25:8a:
6e:82:3f:69:55:4e:51:1b:20:79:e2:4a:5f:f0:26:
7e:0e:35:90:1b:1f:e1:5e:8c:bf:fa:dd:f4:64:4f:
69:ad:f9:4a:93:a2:47:56:25:63:fe:c9:c4:ba:c3:
fc:c0:e1:8c:e7:05:09:48:15:f9:c8:ea:94:91:7a:
e4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B2:1E:0C:4F:D4:1D:8E:58:85:8D:39:AF:89:0B:C4:0B:A8:60:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/ba968438-1dc4-3db1-a0a1-e4360c977088.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
X509v3 Authority Key Identifier:
keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
sbgp-ipAddrBlock: critical
IPv4:
208.84.64.0/24
208.86.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:00:81:1d:38:06:ed:d9:78:b6:f6:c3:e3:4f:35:ad:37:a6:
8f:94:a3:2b:45:d0:f9:69:5d:ea:ef:36:7a:79:15:cf:be:46:
fe:92:8a:25:0e:a6:35:e1:32:56:1e:9d:91:1a:20:96:e4:d1:
6c:a7:4f:b2:b6:ba:be:1c:08:1c:81:64:1b:8e:63:a6:2a:33:
0c:1f:44:66:3d:6e:ad:6a:69:9a:32:06:2e:6a:6e:9a:b2:fb:
fb:ff:0a:34:aa:8b:dd:f4:b1:70:ce:0a:d7:3b:9e:5d:f0:e5:
e4:ff:32:f1:86:27:35:f2:42:80:a9:e8:80:63:c1:03:01:58:
e9:a0:9e:56:16:b2:15:5e:f9:bb:00:b5:8d:ea:ea:f6:b4:f9:
e3:73:9e:6b:2a:8a:6b:29:21:e4:12:8d:51:88:dd:0c:ef:fb:
54:02:24:26:6e:e4:b2:63:96:2b:b8:0b:76:9b:4a:a3:55:73:
48:f1:1b:f2:59:6b:73:55:e1:45:f3:8c:d9:11:c5:6b:0b:f5:
8f:d9:2b:a1:5d:17:a4:9e:37:da:c5:5c:f2:9e:da:1d:2e:dc:
c2:ee:1c:bb:42:c8:fe:49:72:ae:3c:7c:10:8e:44:1d:fc:32:
e7:5c:64:0c:aa:fe:34:72:b0:c1:c7:a0:96:fe:30:93:22:a9:
1b:7c:2a:f8
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEjha+ftYmDuCWEgdkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk
N2M2MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk
MTkxZTJjZTMtNjBiYy00YWIyLWE2ZTUtMWIyOTUwMDVjNzQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+Cui7GI3FKlp0TO9v7AxX+7c1rmpzD94/4b
Ufw/o1NXRpboss2MKdKqvpu99VyR4j855fUUEbqDmK7QGm5q4Ee40btKrtkCwIxO
7QbgW1/8ezUTTWKoDRc6mtpY13qsQ8RhSdesRpQ5GELCjHPEQoMSvT8MCfHhxTRw
eD70qr8+TubPylYgfM+CntHeRzG9iWCguaJ70khIPQSdPT9wnz4Rl0B+SvBLGYW/
MywyHJHp26sS8gHY8Iv2uAt59yuXJYpugj9pVU5RGyB54kpf8CZ+DjWQGx/hXoy/
+t30ZE9prflKk6JHViVj/snEusP8wOGM5wUJSBX5yOqUkXrk9wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFIayHgxP1B2OWIWNOa+JC8QLqGAhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj
NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvYmE5Njg0MzgtMWRjNC0z
ZGIxLWEwYTEtZTQzNjBjOTc3MDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw
MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz
ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz
MjM2M2Q3YzYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA0FRAAwQA
0FbIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAJIAgR04Bu3ZeLb2w+NPNa03po+UoytF0PlpXervNnp5Fc++
Rv6SiiUOpjXhMlYenZEaIJbk0WynT7K2ur4cCByBZBuOY6YqMwwfRGY9bq1qaZoy
Bi5qbpqy+/v/CjSqi930sXDOCtc7nl3w5eT/MvGGJzXyQoCp6IBjwQMBWOmgnlYW
shVe+bsAtY3q6va0+eNznmsqimspIeQSjVGI3Qzv+1QCJCZu5LJjliu4C3abSqNV
c0jxG/JZa3NV4UXzjNkRxWsL9Y/ZK6FdF6SeN9rFXPKe2h0u3MLuHLtCyP5Jcq48
fBCORB38MudcZAyq/jRysMHHoJb+MJMiqRt8Kvg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:33:23 2025 by rpki-client