Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/cd516a63-a4fd-3564-b30c-4202f4d3bb48.roa
File: cd516a63-a4fd-3564-b30c-4202f4d3bb48.roa (raw, json)
Hash identifier: iVLR6QuDCw7NE5Lvb47KNpeqQBN2m4k6NIbeN9aDW3E=
Subject key identifier: E4:45:29:8D:9B:B4:BC:C2:E3:6D:82:5D:45:18:5A:52:2E:E4:B6:25
Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial: 010D0C9F4328584950F96C9AAA8543A0C6580720
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/cd516a63-a4fd-3564-b30c-4202f4d3bb48.roa
Signing time: Wed 26 Mar 2025 13:00:53 +0000
ROA not before: Wed 26 Mar 2025 13:00:53 +0000
ROA not after: Tue 24 Jun 2025 13:00:53 +0000
asID: 11290
IP address blocks: 205.151.68.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:50:f9:6c:9a:aa:85:43:a0:c6:58:07:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Validity
Not Before: Mar 26 13:00:53 2025 GMT
Not After : Jun 24 13:00:53 2025 GMT
Subject: CN=bfe14db5-7a73-41e8-87bf-3879251384e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f8:1d:31:8a:c7:5d:09:c0:88:a0:89:71:af:
5c:68:63:21:0d:77:cf:5e:8d:54:41:e8:16:7a:c7:
f5:eb:bf:bb:6d:34:90:fa:51:b9:dd:d5:51:f2:f0:
1e:7c:2c:ee:2e:4a:33:40:b1:d9:90:9f:d4:60:17:
92:e1:14:c4:16:1d:e5:b4:9f:29:ef:7a:07:6a:e5:
58:84:68:66:7e:2a:d3:01:07:b7:f4:c7:a4:bc:81:
2e:1b:59:a4:83:2a:0c:1a:72:91:f1:93:ca:95:d7:
84:5e:57:c1:b8:eb:1b:ec:4e:ce:e9:cd:5c:8e:6b:
a4:8f:0a:66:f9:e2:6b:8f:93:53:51:74:4e:9c:ab:
52:5a:7d:56:7a:1f:b4:d8:34:44:62:be:6c:e6:7e:
72:65:7c:32:3f:46:b8:62:cb:bf:c0:13:6d:52:e7:
ad:d6:cb:db:a2:13:b7:f1:47:be:84:4e:a9:b4:ff:
db:7e:7d:dd:2d:fe:54:39:0b:fe:9e:52:da:ea:41:
1e:6e:16:2d:f2:f5:31:a9:59:91:3c:e0:7a:b0:f5:
85:56:7f:7b:78:2f:95:21:49:5c:5f:70:19:8b:9c:
b8:43:cc:04:85:ae:5a:f0:94:a2:d1:83:5d:26:11:
2a:4c:f5:43:63:15:cc:fd:4c:c1:a6:b8:49:ca:e1:
b7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:45:29:8D:9B:B4:BC:C2:E3:6D:82:5D:45:18:5A:52:2E:E4:B6:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/cd516a63-a4fd-3564-b30c-4202f4d3bb48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
X509v3 Authority Key Identifier:
keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
sbgp-ipAddrBlock: critical
IPv4:
205.151.68.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:9b:39:bd:5b:ca:f1:63:dd:43:e8:97:41:85:8b:f6:e1:0c:
8c:d3:0a:48:9f:bc:85:db:e6:a5:5f:62:ed:9c:7b:dd:0c:5b:
89:e8:d8:d7:f6:98:26:a4:93:36:9f:b8:2b:d9:cd:46:3e:d2:
85:30:be:ff:32:33:b8:b1:59:1f:29:04:2a:cd:03:be:c5:07:
e7:c8:ca:41:36:f2:87:15:38:8f:fe:ef:91:da:00:02:20:e4:
b6:e6:7c:5b:3a:16:11:dc:71:08:5d:ed:77:66:83:bf:a2:90:
85:da:3d:42:a3:d7:bc:6c:a0:87:b0:16:69:65:f1:5b:ad:32:
24:bb:d6:94:9e:37:9b:9d:9a:3e:1e:9a:8d:5f:e8:6a:a7:6f:
56:07:d9:b2:8b:89:ad:16:71:f6:b4:d5:37:1b:9d:34:5f:34:
21:0e:76:ae:51:d5:f9:8a:68:25:6b:91:fe:53:25:c8:fc:ab:
73:eb:b2:f9:06:1a:b0:3e:58:42:23:53:41:e8:d1:7d:da:62:
62:30:5d:65:b6:7f:a2:b4:62:ba:53:f7:5c:b6:d2:9c:32:a5:
0f:2d:d8:e3:30:e4:74:0e:8d:54:b1:be:47:ec:57:e5:98:8f:
b3:94:08:93:5a:ae:f6:52:80:d3:33:5f:24:93:2f:76:64:35:
15:5c:81:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElQ+WyaqoVDoMZYByAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5
MDVmMB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk
YmZlMTRkYjUtN2E3My00MWU4LTg3YmYtMzg3OTI1MTM4NGUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PgdMYrHXQnAiKCJca9caGMhDXfPXo1UQegW
esf167+7bTSQ+lG53dVR8vAefCzuLkozQLHZkJ/UYBeS4RTEFh3ltJ8p73oHauVY
hGhmfirTAQe39MekvIEuG1mkgyoMGnKR8ZPKldeEXlfBuOsb7E7O6c1cjmukjwpm
+eJrj5NTUXROnKtSWn1Weh+02DREYr5s5n5yZXwyP0a4Ysu/wBNtUuet1svbohO3
8Ue+hE6ptP/bfn3dLf5UOQv+nlLa6kEebhYt8vUxqVmRPOB6sPWFVn97eC+VIUlc
X3AZi5y4Q8wEha5a8JSi0YNdJhEqTPVDYxXM/UzBprhJyuG3PQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFORFKY2btLzC422CXUUYWlIu5LYlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz
YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvY2Q1MTZhNjMtYTRmZC0z
NTY0LWIzMGMtNDIwMmY0ZDNiYjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl
YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz
OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj
ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzZdEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHmbOb1byvFj3UPol0GFi/bhDIzTCkifvIXb5qVfYu2ce90MW4no2Nf2
mCakkzafuCvZzUY+0oUwvv8yM7ixWR8pBCrNA77FB+fIykE28ocVOI/+75HaAAIg
5LbmfFs6FhHccQhd7Xdmg7+ikIXaPUKj17xsoIewFmll8VutMiS71pSeN5udmj4e
mo1f6Gqnb1YH2bKLia0Wcfa01TcbnTRfNCEOdq5R1fmKaCVrkf5TJcj8q3PrsvkG
GrA+WEIjU0Ho0X3aYmIwXWW2f6K0YrpT91y20pwypQ8t2OMw5HQOjVSxvkfsV+WY
j7OUCJNarvZSgNMzXySTL3ZkNRVcgaM=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:23 2025 by rpki-client