Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c2a71431-e6bb-3201-bb53-2da1937c5487.roa
File: c2a71431-e6bb-3201-bb53-2da1937c5487.roa (raw, json)
Hash identifier: sWMNsbkmJud65GtNFOFGcdAK4r9pPpzwqQGo+2KcoeQ=
Subject key identifier: 60:D0:3A:51:20:78:A9:6E:36:BD:35:35:28:90:59:52:71:4A:83:80
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F432858491D7187B5B2CFEA23BC099D00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c2a71431-e6bb-3201-bb53-2da1937c5487.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 6461
IP address blocks: 216.235.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:87:b5:b2:cf:ea:23:bc:09:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=c9d48666-5c39-4e81-9b65-f95b132745ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ab:41:cf:61:19:31:67:a4:3d:44:6d:40:14:
f7:c7:04:3f:f2:f0:58:41:ba:03:7e:f7:1a:49:a5:
b6:07:46:cc:76:89:08:4e:b1:50:6d:ba:28:ee:32:
76:cc:35:52:d6:e7:36:04:00:83:26:74:5e:9c:d1:
dd:2c:e3:9a:b4:c8:9f:1f:aa:71:4b:19:30:35:1c:
04:0a:2c:91:09:52:b7:af:56:d5:4f:95:ee:53:41:
b5:08:fc:92:8f:65:43:01:05:a6:e2:ed:60:52:8b:
15:0c:7a:50:ee:01:22:8d:a1:aa:00:03:7f:28:da:
bf:4b:eb:76:9b:1f:45:04:5e:3d:aa:f1:f5:cb:9c:
3b:a0:50:b2:54:66:b0:f4:7f:8e:3a:0b:38:e4:0b:
e3:69:ed:9b:6d:a1:fb:2a:0b:7d:4a:58:73:12:f4:
b1:e6:cd:30:fe:ae:4b:18:7b:ac:43:39:81:75:c1:
e3:c5:6c:bd:a5:06:e4:52:89:c1:ff:19:15:22:a5:
28:4d:f4:4d:1f:a6:46:77:68:9c:fe:6c:c8:6f:b3:
a8:81:32:5c:65:a6:c6:2f:7e:87:46:d0:17:26:e2:
46:11:29:fc:ae:1e:f4:53:a6:30:28:bd:ce:6f:dc:
60:f6:2b:94:20:86:66:1a:c6:9b:c6:e5:37:56:c1:
a0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D0:3A:51:20:78:A9:6E:36:BD:35:35:28:90:59:52:71:4A:83:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c2a71431-e6bb-3201-bb53-2da1937c5487.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
216.235.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:6e:72:a8:3a:02:a4:7b:08:bd:f1:63:81:49:a1:41:59:83:
c7:18:9e:a2:83:a5:55:7b:17:44:d5:d9:d5:af:34:05:59:18:
e3:a4:09:8f:77:71:ef:ab:80:1b:a7:6d:d3:ae:5c:56:a5:8b:
d6:4b:7e:bd:ed:d6:af:9a:bd:ed:d4:2a:13:9f:c9:a6:eb:66:
7f:47:e1:e9:3d:fc:42:0a:64:ca:af:cd:2a:6f:53:ff:fb:b3:
52:ba:8c:88:3c:60:35:88:6d:c2:5b:cd:75:73:14:fe:b9:44:
aa:c8:0e:61:c9:60:4c:91:b0:f5:94:06:ec:d7:4b:b1:7b:ed:
38:49:83:6d:cf:dd:44:07:ff:59:ed:49:e3:39:e7:7d:7c:73:
8c:ff:a8:9e:29:f2:22:14:c4:be:08:07:07:71:69:d5:2b:85:
ab:db:d8:53:d3:13:c4:3e:dd:28:40:58:45:d3:96:1f:27:da:
34:6c:67:09:63:bd:f6:33:b7:54:34:b4:ed:47:c6:f5:91:4c:
05:76:c2:b0:ef:5a:37:97:37:f7:01:8c:17:68:9c:8d:e5:67:
3c:39:b7:70:6d:e5:9a:da:e3:82:92:7e:5e:e2:a2:60:3a:1e:
52:75:b2:e5:08:22:2f:e8:63:ab:e5:10:8f:f9:5a:ab:6b:24:
25:c3:5b:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcYe1ss/qI7wJnQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk
YzlkNDg2NjYtNWMzOS00ZTgxLTliNjUtZjk1YjEzMjc0NWJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKtBz2EZMWekPURtQBT3xwQ/8vBYQboDfvca
SaW2B0bMdokITrFQbboo7jJ2zDVS1uc2BACDJnRenNHdLOOatMifH6pxSxkwNRwE
CiyRCVK3r1bVT5XuU0G1CPySj2VDAQWm4u1gUosVDHpQ7gEijaGqAAN/KNq/S+t2
mx9FBF49qvH1y5w7oFCyVGaw9H+OOgs45Avjae2bbaH7Kgt9SlhzEvSx5s0w/q5L
GHusQzmBdcHjxWy9pQbkUonB/xkVIqUoTfRNH6ZGd2ic/mzIb7OogTJcZabGL36H
RtAXJuJGESn8rh70U6YwKL3Ob9xg9iuUIIZmGsabxuU3VsGgFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGDQOlEgeKluNr01NSiQWVJxSoOAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvYzJhNzE0MzEtZTZiYi0z
MjAxLWJiNTMtMmRhMTkzN2M1NDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2OuAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALtucqg6AqR7CL3xY4FJoUFZg8cYnqKDpVV7F0TV2dWvNAVZGOOkCY93
ce+rgBunbdOuXFali9ZLfr3t1q+ave3UKhOfyabrZn9H4ek9/EIKZMqvzSpvU//7
s1K6jIg8YDWIbcJbzXVzFP65RKrIDmHJYEyRsPWUBuzXS7F77ThJg23P3UQH/1nt
SeM55318c4z/qJ4p8iIUxL4IBwdxadUrhavb2FPTE8Q+3ShAWEXTlh8n2jRsZwlj
vfYzt1Q0tO1HxvWRTAV2wrDvWjeXN/cBjBdonI3lZzw5t3Bt5Zra44KSfl7iomA6
HlJ1suUIIi/oY6vlEI/5WqtrJCXDW0o=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:40:00 2025 by rpki-client