Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/272d1f02-6a95-3ca3-9a83-9f3475287dfd.roa
File: 272d1f02-6a95-3ca3-9a83-9f3475287dfd.roa (raw, json)
Hash identifier: isG0wiroiXaxIo0aKNvNaFT8oR8evzHRtFwrH604/Io=
Subject key identifier: 01:FD:F5:A5:98:75:C6:40:65:D3:9D:61:C6:0A:C7:07:F3:74:87:20
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285848AAFB589A79595D6399758E40
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/272d1f02-6a95-3ca3-9a83-9f3475287dfd.roa
Signing time: Sun 26 Jan 2025 02:00:38 +0000
ROA not before: Sun 26 Jan 2025 02:00:38 +0000
ROA not after: Sat 26 Apr 2025 01:00:38 +0000
asID: 203
IP address blocks: 192.85.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:aa:fb:58:9a:79:59:5d:63:99:75:8e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Jan 26 02:00:38 2025 GMT
Not After : Apr 26 01:00:38 2025 GMT
Subject: CN=55e982aa-1d77-4174-8593-5303d387a15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:75:61:90:60:6c:b3:af:af:0e:85:5e:b8:
c0:16:71:47:46:8f:9a:45:6d:58:db:69:f8:b6:63:
26:04:53:5e:19:aa:a4:45:b9:34:99:39:c5:14:4f:
02:b7:72:16:77:95:83:97:66:87:46:2d:7a:34:a0:
f1:c9:e0:c0:ac:b8:91:09:3c:80:ad:5f:32:56:81:
3d:60:8b:e1:29:a0:45:4e:5a:61:11:e9:b2:f4:3f:
18:09:f2:6f:ec:8b:a6:b2:a5:38:83:12:e4:36:e2:
c5:23:57:a0:eb:3a:cb:85:fe:67:13:aa:ca:a7:68:
ca:cf:09:c3:cc:a7:ca:58:15:dc:19:0a:90:8c:8f:
71:40:c1:8c:67:ab:d6:a7:7b:b4:15:c6:06:58:b0:
7e:6a:93:17:c0:40:95:54:ae:9d:d1:aa:c5:8c:54:
a7:fa:e3:79:e9:23:0e:f8:a8:72:cf:03:10:d4:33:
e8:92:57:bb:67:98:aa:c3:4f:09:90:29:49:ab:6d:
25:e8:cf:70:f9:ef:1b:f1:a8:a4:be:71:f6:ab:10:
9e:b1:d8:2c:90:28:55:24:d4:78:e4:a4:fb:7c:84:
cd:b1:b2:c9:a7:d3:30:28:c7:83:af:3a:ca:cd:f7:
e1:58:10:57:54:19:18:e5:ca:35:54:e3:7d:10:9e:
dd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FD:F5:A5:98:75:C6:40:65:D3:9D:61:C6:0A:C7:07:F3:74:87:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/272d1f02-6a95-3ca3-9a83-9f3475287dfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
192.85.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:e6:a1:42:d3:a8:eb:4a:7d:c0:fd:e8:23:82:06:47:47:31:
f7:4a:f0:55:b8:f7:1c:15:b5:6b:5f:8c:b7:50:37:b5:0b:b2:
28:a7:9c:99:34:39:47:09:16:d1:23:b2:bd:f4:44:70:c2:c0:
e9:bb:8f:54:95:98:73:23:e5:4f:46:c4:c7:48:e7:0c:53:e4:
2a:b6:dd:59:dc:22:d6:29:30:64:ac:f8:03:fe:43:5d:f0:79:
b6:60:94:38:9c:4b:82:c0:85:68:a9:39:ed:1b:19:8a:5d:6c:
39:b4:dc:6f:1e:93:eb:db:bf:b9:58:d1:a4:68:70:8f:df:3f:
34:da:50:be:0f:6d:0f:87:fa:8f:92:5d:9c:33:a1:90:a4:f4:
be:da:28:92:ad:5c:19:86:ea:02:15:ac:e2:a2:a9:51:60:c7:
82:8b:10:59:a9:35:ff:c3:51:d5:40:0a:e0:de:45:fb:85:75:
25:1b:c6:23:f0:b7:0e:a3:2b:30:7f:42:f0:12:8d:7b:56:39:
54:6e:75:45:9e:df:7b:13:bd:29:bd:a8:a1:5a:61:43:e3:20:
dc:5d:e0:de:2e:42:d8:e6:66:69:52:da:89:c4:5f:8a:b6:08:
9c:d7:e6:5d:39:c0:4f:b7:43:5c:98:88:45:58:fa:f0:30:ac:
17:34:0d:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+1iaeVldY5l1jkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk
NTVlOTgyYWEtMWQ3Ny00MTc0LTg1OTMtNTMwM2QzODdhMTVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0p1YZBgbLOvrw6FXrjAFnFHRo+aRW1Y22n4
tmMmBFNeGaqkRbk0mTnFFE8Ct3IWd5WDl2aHRi16NKDxyeDArLiRCTyArV8yVoE9
YIvhKaBFTlphEemy9D8YCfJv7IumsqU4gxLkNuLFI1eg6zrLhf5nE6rKp2jKzwnD
zKfKWBXcGQqQjI9xQMGMZ6vWp3u0FcYGWLB+apMXwECVVK6d0arFjFSn+uN56SMO
+KhyzwMQ1DPokle7Z5iqw08JkClJq20l6M9w+e8b8aikvnH2qxCesdgskChVJNR4
5KT7fITNsbLJp9MwKMeDrzrKzffhWBBXVBkY5co1VON9EJ7dwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAH99aWYdcZAZdOdYcYKxwfzdIcgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjcyZDFmMDItNmE5NS0z
Y2EzLTlhODMtOWYzNDc1Mjg3ZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFVZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIrmoULTqOtKfcD96COCBkdHMfdK8FW49xwVtWtfjLdQN7ULsiinnJk0
OUcJFtEjsr30RHDCwOm7j1SVmHMj5U9GxMdI5wxT5Cq23VncItYpMGSs+AP+Q13w
ebZglDicS4LAhWipOe0bGYpdbDm03G8ek+vbv7lY0aRocI/fPzTaUL4PbQ+H+o+S
XZwzoZCk9L7aKJKtXBmG6gIVrOKiqVFgx4KLEFmpNf/DUdVACuDeRfuFdSUbxiPw
tw6jKzB/QvASjXtWOVRudUWe33sTvSm9qKFaYUPjINxd4N4uQtjmZmlS2onEX4q2
CJzX5l05wE+3Q1yYiEVY+vAwrBc0Dd0=
-----END CERTIFICATE-----
Generated at Thu Apr 10 08:57:57 2025 by rpki-client