Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/2d9cf95f-92db-3d3a-8a04-c23e915bb1d8.roa
File: 2d9cf95f-92db-3d3a-8a04-c23e915bb1d8.roa (raw, json)
Hash identifier: UbPfO9uQlY+gKdQr7YFeHvf3S3g1g2DTry47ffZfQFw=
Subject key identifier: C9:23:E3:9B:0C:C9:6A:CF:B3:B3:CE:B1:E7:E9:5A:C8:F8:D9:00:4D
Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial: 010D0C9F43285848977090A239C9E58AA4656640
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/2d9cf95f-92db-3d3a-8a04-c23e915bb1d8.roa
Signing time: Sun 19 Jan 2025 02:00:39 +0000
ROA not before: Sun 19 Jan 2025 02:00:39 +0000
ROA not after: Sat 19 Apr 2025 01:00:39 +0000
asID: 13768
IP address blocks: 216.152.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:97:70:90:a2:39:c9:e5:8a:a4:65:66:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Validity
Not Before: Jan 19 02:00:39 2025 GMT
Not After : Apr 19 01:00:39 2025 GMT
Subject: CN=6543c5cd-4911-4950-a991-37731acb793b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:82:1b:54:6c:df:41:e3:6e:d7:fd:db:5e:94:
c4:0e:4f:55:4e:6f:1f:51:a3:aa:27:6f:b0:41:99:
27:bd:1f:39:9a:9d:c3:a7:31:76:96:06:e4:c1:e5:
9e:99:19:f5:74:f1:cc:87:bc:03:57:4f:a1:d8:08:
40:bb:29:9c:84:9c:0c:31:18:c8:63:af:61:3e:db:
96:f6:d2:e0:a4:8a:46:3e:62:f0:24:16:27:1f:cc:
21:40:68:ab:fc:91:55:d0:e5:12:7b:19:2f:bb:2c:
68:ac:88:50:13:f9:56:8f:5f:ef:91:e2:c5:58:70:
c8:bb:d1:db:56:1d:e3:74:12:d5:d9:0f:51:4b:13:
84:a1:5e:51:31:ec:04:66:88:2c:a2:80:a1:28:20:
36:0e:18:95:f2:7d:9b:a8:71:b1:71:e6:31:13:f2:
33:af:55:e0:3e:44:d5:2c:98:fd:df:e4:e5:e3:03:
0e:c2:ee:43:14:ae:69:f6:30:c8:04:bb:69:f3:e1:
16:09:b1:c5:b0:27:b2:09:b9:ca:32:a5:8a:c1:ab:
c1:09:1d:d3:3b:10:a1:02:03:6b:d1:c5:66:6d:43:
11:33:55:b6:77:2d:1c:fd:b1:dd:32:1e:32:2c:72:
e1:82:c9:6b:2f:f5:b9:9c:64:ac:a6:33:c8:f7:33:
d1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:23:E3:9B:0C:C9:6A:CF:B3:B3:CE:B1:E7:E9:5A:C8:F8:D9:00:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/2d9cf95f-92db-3d3a-8a04-c23e915bb1d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
X509v3 Authority Key Identifier:
keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
sbgp-ipAddrBlock: critical
IPv4:
216.152.143.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:c5:5b:ad:d2:c6:14:97:27:27:93:2b:79:6c:ab:3b:3a:7e:
46:52:f4:a1:cd:b6:02:ed:e3:07:98:9d:35:72:e9:a0:19:66:
ca:3b:be:6e:38:dc:87:ad:a4:74:f5:ff:9c:ce:1b:4c:be:f0:
45:51:5d:4f:6c:27:a3:fa:1a:d9:13:a4:22:af:b1:4e:9b:d8:
46:3a:9a:0f:66:08:7f:5c:4f:a8:27:27:97:07:c8:78:58:ba:
fc:bd:da:85:59:f4:1a:6f:79:90:aa:0c:80:20:4a:6d:63:44:
f3:f8:46:01:94:a3:5c:53:0f:35:c6:1b:b7:82:71:41:8c:63:
f0:be:83:28:96:04:5d:e6:1a:97:68:9f:a4:8d:75:3e:0c:8b:
29:26:37:d0:de:2d:50:2c:18:11:19:18:56:56:34:3a:36:e2:
ea:a1:1f:c2:05:90:5b:ef:ed:7e:c0:dc:c7:f3:91:a8:e9:a4:
dc:a8:d8:ec:30:ce:73:82:77:29:ef:4f:bf:57:2a:74:a5:fe:
be:ba:4c:52:d8:71:91:ac:09:5c:ed:39:a3:cb:d1:7c:6f:6b:
f5:05:26:a5:f2:c0:f0:00:cb:28:f9:d3:fd:ee:fb:48:69:26:
9e:15:e8:c0:3e:ce:c3:9f:d7:99:32:26:b3:34:09:b0:ed:e7:
d2:9a:c9:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiXcJCiOcnliqRlZkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk
YjEwMB4XDTI1MDExOTAyMDAzOVoXDTI1MDQxOTAxMDAzOVowLzEtMCsGA1UEAxMk
NjU0M2M1Y2QtNDkxMS00OTUwLWE5OTEtMzc3MzFhY2I3OTNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIIbVGzfQeNu1/3bXpTEDk9VTm8fUaOqJ2+w
QZknvR85mp3DpzF2lgbkweWemRn1dPHMh7wDV0+h2AhAuymchJwMMRjIY69hPtuW
9tLgpIpGPmLwJBYnH8whQGir/JFV0OUSexkvuyxorIhQE/lWj1/vkeLFWHDIu9Hb
Vh3jdBLV2Q9RSxOEoV5RMewEZogsooChKCA2DhiV8n2bqHGxceYxE/Izr1XgPkTV
LJj93+Tl4wMOwu5DFK5p9jDIBLtp8+EWCbHFsCeyCbnKMqWKwavBCR3TOxChAgNr
0cVmbUMRM1W2dy0c/bHdMh4yLHLhgslrL/W5nGSspjPI9zPREQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMkj45sMyWrPs7POsefpWsj42QBNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3
OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvMmQ5Y2Y5NWYtOTJkYi0z
ZDNhLThhMDQtYzIzZTkxNWJiMWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0
YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1
ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl
NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JiPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABrFW63SxhSXJyeTK3lsqzs6fkZS9KHNtgLt4weYnTVy6aAZZso7vm44
3IetpHT1/5zOG0y+8EVRXU9sJ6P6GtkTpCKvsU6b2EY6mg9mCH9cT6gnJ5cHyHhY
uvy92oVZ9BpveZCqDIAgSm1jRPP4RgGUo1xTDzXGG7eCcUGMY/C+gyiWBF3mGpdo
n6SNdT4MiykmN9DeLVAsGBEZGFZWNDo24uqhH8IFkFvv7X7A3MfzkajppNyo2Oww
znOCdynvT79XKnSl/r66TFLYcZGsCVztOaPL0Xxva/UFJqXywPAAyyj50/3u+0hp
Jp4V6MA+zsOf15kyJrM0CbDt59KayQY=
-----END CERTIFICATE-----
Generated at Fri Apr 4 15:57:28 2025 by rpki-client