Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/8465acbb-141f-32cb-bf36-567b501bdefb.roa
File: 8465acbb-141f-32cb-bf36-567b501bdefb.roa (raw, json)
Hash identifier: oOD8BN8AUljXfYI3HBZI4aVotpsWKHA+BU/MZBY/8X0=
Subject key identifier: 0F:40:98:EF:E0:A5:E0:81:F7:D6:68:17:2C:A9:3A:87:00:64:BB:BE
Certificate issuer: /CN=3daec053-17f8-47be-a17c-d2007ce5700c
Certificate serial: 010D0C9F43285848F65BECB0F20E65C6C7268780
Authority key identifier: EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/8465acbb-141f-32cb-bf36-567b501bdefb.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 2386
IP address blocks: 167.253.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:ec:b0:f2:0e:65:c6:c7:26:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3daec053-17f8-47be-a17c-d2007ce5700c
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=e7d5a97c-5de2-4c69-85da-d6cefa3c7248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f7:d7:b9:15:2b:e6:e3:68:e6:5b:37:89:4b:
52:06:a6:16:9a:d5:e7:33:b6:8b:91:b5:a5:85:37:
f9:0e:4c:08:6f:6c:51:32:22:84:d0:d8:92:53:09:
3d:ad:86:a7:83:a1:fa:f7:5c:2f:39:ee:40:13:a5:
32:e9:fb:0f:83:2b:1d:9e:1e:f4:bd:bf:a3:fc:81:
41:f4:d6:ec:c0:df:49:c1:4b:2f:b2:6a:3a:f7:3b:
1a:66:9b:67:89:c5:d3:79:3a:61:95:df:49:fd:4a:
d0:21:69:8c:c0:70:68:77:a1:df:12:10:73:84:46:
cd:2f:50:57:5a:8c:f9:21:ff:d7:b4:fd:5f:24:9a:
7c:12:44:e5:bd:ef:c3:87:59:b6:8d:e8:9e:21:16:
5d:17:aa:53:f4:4c:19:ed:05:b2:6e:a1:48:98:43:
fb:6d:0c:0e:81:13:ee:a7:e0:5a:27:b7:85:8f:d2:
63:27:6e:05:80:a4:26:49:1c:93:19:fb:00:df:7d:
7c:1d:f6:fc:8a:f2:79:01:0b:97:06:ee:3a:1e:34:
68:8e:14:4a:a4:77:96:db:ef:a7:40:26:ab:30:93:
a6:6d:db:dd:14:9a:6e:92:c5:9b:80:ae:41:1e:b0:
94:af:ca:d4:8e:b1:40:25:10:60:3d:b6:1c:16:7f:
5d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:40:98:EF:E0:A5:E0:81:F7:D6:68:17:2C:A9:3A:87:00:64:BB:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/8465acbb-141f-32cb-bf36-567b501bdefb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl
X509v3 Authority Key Identifier:
keyid:EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer
sbgp-ipAddrBlock: critical
IPv4:
167.253.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:2a:f1:5c:4a:b2:57:1a:37:0d:14:59:c6:48:b9:b8:19:a1:
d4:f4:be:93:35:5f:cd:b2:2b:f4:49:ed:9e:8a:b6:68:77:0d:
82:86:13:e8:e7:ef:49:27:e7:8b:55:24:5e:51:c7:4a:1a:2f:
58:5b:b9:fc:3a:41:3f:7c:41:d0:71:e0:ad:54:79:42:11:22:
b7:bc:a9:3d:8e:a7:da:33:0c:03:8e:ac:38:13:52:32:d1:67:
32:f7:59:49:e6:0c:a2:42:aa:96:b2:5f:8b:bd:d5:d9:67:a5:
8a:f8:85:e5:61:18:2c:ac:92:e1:97:fd:ed:88:9c:21:a8:8c:
79:5a:44:6b:66:61:58:c9:21:01:dc:d1:ac:6e:cc:19:98:cd:
fe:bd:1a:84:de:73:e2:b0:1f:43:a4:f9:f1:6b:40:1d:7c:30:
1c:76:7f:a7:78:53:f6:15:ca:35:73:5f:89:62:91:0c:5c:c6:
a6:99:3f:6f:5e:2e:92:a0:4a:c1:1b:2f:45:d2:f2:70:7e:f3:
cc:8c:16:33:23:a4:aa:e1:5b:8e:65:21:7b:40:a2:50:67:5a:
06:67:d2:a7:4f:54:f2:f6:2c:56:bf:6a:a8:ed:ca:1f:93:49:
97:b5:00:7e:4c:f1:f6:80:0d:68:14:29:20:9c:c1:13:2c:e8:
97:56:43:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+yw8g5lxscmh4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2RhZWMwNTMtMTdmOC00N2JlLWExN2MtZDIwMDdjZTU3
MDBjMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk
ZTdkNWE5N2MtNWRlMi00YzY5LTg1ZGEtZDZjZWZhM2M3MjQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/fXuRUr5uNo5ls3iUtSBqYWmtXnM7aLkbWl
hTf5DkwIb2xRMiKE0NiSUwk9rYang6H691wvOe5AE6Uy6fsPgysdnh70vb+j/IFB
9NbswN9JwUsvsmo69zsaZptnicXTeTphld9J/UrQIWmMwHBod6HfEhBzhEbNL1BX
Woz5If/XtP1fJJp8EkTlve/Dh1m2jeieIRZdF6pT9EwZ7QWybqFImEP7bQwOgRPu
p+BaJ7eFj9JjJ24FgKQmSRyTGfsA3318Hfb8ivJ5AQuXBu46HjRojhRKpHeW2++n
QCarMJOmbdvdFJpuksWbgK5BHrCUr8rUjrFAJRBgPbYcFn9dXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA9AmO/gpeCB99ZoFyypOocAZLu+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZGFl
YzA1My0xN2Y4LTQ3YmUtYTE3Yy1kMjAwN2NlNTcwMGMvODQ2NWFjYmItMTQxZi0z
MmNiLWJmMzYtNTY3YjUwMWJkZWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2RhZWMwNTMtMTdmOC00N2JlLWEx
N2MtZDIwMDdjZTU3MDBjLzNkYWVjMDUzLTE3ZjgtNDdiZS1hMTdjLWQyMDA3Y2U1
NzAwYy5jcmwwHwYDVR0jBBgwFoAU6x9l3WHCUdbClAhoubNDqYU3t44wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zZGFlYzA1My0xN2Y4LTQ3YmUtYTE3Yy1kMjAw
N2NlNTcwMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/2QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD4q8VxKslcaNw0UWcZIubgZodT0vpM1X82yK/RJ7Z6Ktmh3DYKGE+jn
70kn54tVJF5Rx0oaL1hbufw6QT98QdBx4K1UeUIRIre8qT2Op9ozDAOOrDgTUjLR
ZzL3WUnmDKJCqpayX4u91dlnpYr4heVhGCyskuGX/e2InCGojHlaRGtmYVjJIQHc
0axuzBmYzf69GoTec+KwH0Ok+fFrQB18MBx2f6d4U/YVyjVzX4likQxcxqaZP29e
LpKgSsEbL0XS8nB+88yMFjMjpKrhW45lIXtAolBnWgZn0qdPVPL2LFa/aqjtyh+T
SZe1AH5M8faADWgUKSCcwRMs6JdWQxg=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:11:03 2025 by rpki-client