Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdad4e25-1640-42d4-a6d5-7071e13f7632/1eb7f7eb-1ab8-3b7b-8c20-8a3902398e40.roa
File: 1eb7f7eb-1ab8-3b7b-8c20-8a3902398e40.roa (raw, json)
Hash identifier: OLxFClwu3vhLtTYu07Pse1C1p4fxYzjOgUA6i8ASGJY=
Subject key identifier: 07:56:AA:A4:24:1D:10:E2:9A:8A:F2:43:C9:60:CA:EE:41:34:79:C1
Certificate issuer: /CN=fdad4e25-1640-42d4-a6d5-7071e13f7632
Certificate serial: 010D0C9F4328584706B5AFC744181511E96A5E40
Authority key identifier: 01:A1:24:D4:8B:FF:F7:FE:61:52:E9:27:57:FF:F0:79:5C:41:CE:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdad4e25-1640-42d4-a6d5-7071e13f7632.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdad4e25-1640-42d4-a6d5-7071e13f7632/1eb7f7eb-1ab8-3b7b-8c20-8a3902398e40.roa
Signing time: Wed 28 Aug 2024 13:00:42 +0000
ROA not before: Wed 28 Aug 2024 13:00:42 +0000
ROA not after: Tue 26 Nov 2024 14:00:42 +0000
asID: 5377
IP address blocks: 216.9.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:06:b5:af:c7:44:18:15:11:e9:6a:5e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdad4e25-1640-42d4-a6d5-7071e13f7632
Validity
Not Before: Aug 28 13:00:42 2024 GMT
Not After : Nov 26 14:00:42 2024 GMT
Subject: CN=d7f8a38a-7d48-4bd0-ae1a-a4f8b2d05efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:44:b2:e2:14:57:9d:ca:32:cc:83:24:47:6d:
92:64:e9:b2:58:44:78:57:bb:c0:ba:81:9b:e8:13:
46:52:3f:7c:4f:2f:15:41:12:a7:4c:56:55:22:e4:
8e:ea:64:eb:13:b9:cd:f4:47:62:63:16:e1:6b:9c:
f2:08:0b:07:1c:59:86:b5:e6:81:4a:59:14:e0:56:
52:d5:34:96:d0:84:71:77:ae:8d:07:9a:56:57:62:
1e:00:c4:dd:31:cb:5e:94:22:5e:aa:bb:01:69:1c:
33:7f:cb:1c:29:cd:8f:14:74:4f:2f:d2:2f:13:db:
53:33:0a:6a:a2:29:34:b6:03:27:55:28:57:6f:9c:
4c:c0:d4:a7:93:fe:07:be:0e:90:20:14:a9:f1:8a:
23:90:11:f6:88:07:e7:96:07:79:16:e6:cf:d7:7d:
8b:0b:41:81:ca:ea:8a:e6:aa:64:3f:09:b6:bf:3e:
68:82:25:bf:36:25:ba:88:53:84:23:f5:65:35:9c:
bc:fa:f8:18:a0:2d:b1:9e:16:fc:ec:28:8d:24:57:
22:4f:b5:9f:1d:53:db:33:6e:9e:49:c3:92:f9:bf:
cd:3a:ad:d1:39:04:e8:b0:99:05:99:a8:a0:46:0d:
dc:49:0c:27:3f:b4:04:24:53:52:19:8f:bc:9d:96:
42:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:56:AA:A4:24:1D:10:E2:9A:8A:F2:43:C9:60:CA:EE:41:34:79:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdad4e25-1640-42d4-a6d5-7071e13f7632/1eb7f7eb-1ab8-3b7b-8c20-8a3902398e40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdad4e25-1640-42d4-a6d5-7071e13f7632/fdad4e25-1640-42d4-a6d5-7071e13f7632.crl
X509v3 Authority Key Identifier:
keyid:01:A1:24:D4:8B:FF:F7:FE:61:52:E9:27:57:FF:F0:79:5C:41:CE:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdad4e25-1640-42d4-a6d5-7071e13f7632.cer
sbgp-ipAddrBlock: critical
IPv4:
216.9.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:d8:24:a6:19:2e:df:10:ba:43:79:d9:b0:24:ac:61:fe:83:
f3:12:c2:c1:a5:5d:d5:a0:4d:51:d7:47:5e:5f:5d:78:23:6f:
bf:ce:6f:a2:e0:25:4b:48:a4:ad:1e:5b:0d:43:14:90:6e:f4:
e9:b5:bc:5f:70:d2:62:f8:4c:4e:07:f4:b8:7c:aa:6a:41:ac:
36:18:13:fc:b2:0c:80:18:1d:a4:cb:9a:b0:8e:9a:dc:7d:78:
6a:a9:0c:12:49:f5:06:d9:81:f0:28:9b:08:a3:b0:27:36:14:
2e:57:6b:8f:4c:47:c7:f5:aa:05:12:68:bb:c4:40:ce:a5:98:
cd:70:99:cc:c2:ba:68:e1:6b:93:3e:d0:51:8d:33:ab:3b:df:
ec:07:1c:de:56:e0:d4:ed:4e:b4:5e:47:82:11:8e:d8:fb:06:
86:10:db:d0:97:9e:d9:5d:11:68:ca:46:14:21:8e:3e:c0:ba:
25:b8:7e:18:57:c5:4d:83:ef:d5:74:59:01:de:f2:4d:49:12:
df:00:93:af:94:f2:d4:a0:da:6e:f5:e0:03:dc:c6:e0:e0:60:
37:f1:9a:bf:00:60:bd:35:38:49:31:98:cf:be:bf:66:14:15:
2a:ba:7a:47:7b:13:b8:ec:df:d3:19:ba:cb:f4:fa:ed:4f:ba:
3d:39:5a:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcGta/HRBgVEelqXkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmRhZDRlMjUtMTY0MC00MmQ0LWE2ZDUtNzA3MWUxM2Y3
NjMyMB4XDTI0MDgyODEzMDA0MloXDTI0MTEyNjE0MDA0MlowLzEtMCsGA1UEAxMk
ZDdmOGEzOGEtN2Q0OC00YmQwLWFlMWEtYTRmOGIyZDA1ZWZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnESy4hRXncoyzIMkR22SZOmyWER4V7vAuoGb
6BNGUj98Ty8VQRKnTFZVIuSO6mTrE7nN9EdiYxbha5zyCAsHHFmGteaBSlkU4FZS
1TSW0IRxd66NB5pWV2IeAMTdMctelCJeqrsBaRwzf8scKc2PFHRPL9IvE9tTMwpq
oik0tgMnVShXb5xMwNSnk/4Hvg6QIBSp8YojkBH2iAfnlgd5FubP132LC0GByuqK
5qpkPwm2vz5ogiW/NiW6iFOEI/VlNZy8+vgYoC2xnhb87CiNJFciT7WfHVPbM26e
ScOS+b/NOq3ROQTosJkFmaigRg3cSQwnP7QEJFNSGY+8nZZCLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAdWqqQkHRDimoryQ8lgyu5BNHnBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mZGFk
NGUyNS0xNjQwLTQyZDQtYTZkNS03MDcxZTEzZjc2MzIvMWViN2Y3ZWItMWFiOC0z
YjdiLThjMjAtOGEzOTAyMzk4ZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmRhZDRlMjUtMTY0MC00MmQ0LWE2
ZDUtNzA3MWUxM2Y3NjMyL2ZkYWQ0ZTI1LTE2NDAtNDJkNC1hNmQ1LTcwNzFlMTNm
NzYzMi5jcmwwHwYDVR0jBBgwFoAUAaEk1Iv/9/5hUuknV//weVxBzqcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mZGFkNGUyNS0xNjQwLTQyZDQtYTZkNS03MDcx
ZTEzZjc2MzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2AnkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAETYJKYZLt8QukN52bAkrGH+g/MSwsGlXdWgTVHXR15fXXgjb7/Ob6Lg
JUtIpK0eWw1DFJBu9Om1vF9w0mL4TE4H9Lh8qmpBrDYYE/yyDIAYHaTLmrCOmtx9
eGqpDBJJ9QbZgfAomwijsCc2FC5Xa49MR8f1qgUSaLvEQM6lmM1wmczCumjha5M+
0FGNM6s73+wHHN5W4NTtTrReR4IRjtj7BoYQ29CXntldEWjKRhQhjj7AuiW4fhhX
xU2D79V0WQHe8k1JEt8Ak6+U8tSg2m714APcxuDgYDfxmr8AYL01OEkxmM++v2YU
FSq6ekd7E7js39MZusv0+u1Puj05Wn4=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:46 2025 by rpki-client