Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/aabf703f-1003-3b6b-bba0-fa82da3ddd33.roa
File: aabf703f-1003-3b6b-bba0-fa82da3ddd33.roa (raw, json)
Hash identifier: UVrtSBUtQSh/JC69u0QN3AF9zoMt/98mZJyPhGKsOjw=
Subject key identifier: 39:4F:28:10:9D:9F:2B:7A:77:DB:D6:81:88:F6:16:6A:20:C0:7C:82
Certificate issuer: /CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Certificate serial: 010D0C9F4328584902EC2A127B37C88F4570CD60
Authority key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/aabf703f-1003-3b6b-bba0-fa82da3ddd33.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 10929
IP address blocks: 184.170.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:2a:12:7b:37:c8:8f:45:70:cd:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=6809b788-2ac5-4d1d-8524-a037be84024e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:be:db:1f:ec:42:e0:a8:e7:c0:b6:5c:92:56:
36:55:8f:46:ce:8e:84:31:c4:33:87:7d:ee:92:cd:
f3:c4:dc:9b:6f:b1:bd:eb:bb:02:b3:f3:70:1a:7c:
f2:07:e9:ea:27:5e:6f:ee:b9:30:29:d0:03:7f:64:
16:6f:ef:2c:14:dc:98:45:02:6e:f5:47:17:85:2e:
1f:09:6f:a0:6a:8f:2e:52:35:bc:30:96:23:ae:8e:
d2:6e:6f:0e:14:7d:e3:7f:a5:8c:02:86:33:99:54:
eb:07:fd:22:0a:22:7f:09:28:82:73:9a:f1:32:ba:
e6:ae:10:7b:36:61:c1:57:5d:26:02:3d:fe:de:1f:
92:d9:56:b0:0e:aa:0a:af:88:97:e7:9a:e3:73:ce:
85:b7:62:f2:35:5a:0f:04:81:13:a6:bb:3b:3d:97:
fa:9d:56:ed:3a:28:b5:fc:d5:46:91:d9:3c:c9:0e:
65:90:3e:34:44:af:24:68:ba:41:03:89:0b:65:e3:
c0:57:84:27:32:54:71:65:2a:30:c0:d7:1e:32:9f:
1e:92:47:14:e4:97:3a:8f:dd:5c:f8:f9:84:f9:f6:
48:e1:42:dc:48:d8:2c:13:5b:0b:42:3e:b2:1f:0d:
86:30:34:36:c6:e5:a2:cd:37:71:11:fd:05:ad:2d:
bd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4F:28:10:9D:9F:2B:7A:77:DB:D6:81:88:F6:16:6A:20:C0:7C:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/aabf703f-1003-3b6b-bba0-fa82da3ddd33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl
X509v3 Authority Key Identifier:
keyid:DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
sbgp-ipAddrBlock: critical
IPv4:
184.170.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:3c:55:4a:ae:5e:13:3d:8e:ce:a2:e4:c3:78:31:4c:33:d0:
be:2b:e2:82:f5:af:f8:8f:19:2d:77:5d:dc:26:4e:c7:4e:1f:
ef:82:70:28:4d:db:5b:0a:02:09:f5:de:9e:2a:33:1c:fd:92:
04:52:1e:96:fb:ba:4a:06:24:a3:e4:5a:a5:82:f0:83:35:7f:
c3:52:58:ba:46:3d:ef:05:37:03:b5:b2:84:8a:27:d0:f7:0f:
9d:50:0f:c5:7e:9d:d6:75:f7:73:cd:60:94:80:e9:5e:e2:bc:
fa:9d:29:0e:0c:53:91:1e:85:3e:ed:0b:16:f1:74:b6:ae:81:
14:a0:b0:7d:f2:00:fe:eb:bb:ee:b2:5b:68:f6:0d:25:fd:a6:
82:92:7b:6e:24:a4:e1:08:6a:e8:ff:b0:a6:63:82:85:51:34:
e9:f2:ae:47:a8:e6:6a:c9:6b:a3:9c:bc:d0:eb:19:cf:f6:eb:
61:aa:47:f0:69:6f:af:9b:ae:50:5f:5e:63:bf:f7:ac:2e:df:
e4:2d:10:62:97:b5:42:e8:2a:d3:de:a4:25:e4:f6:84:98:f9:
96:5f:e1:82:05:f4:e4:bb:8a:ad:76:e9:5f:d2:b9:b4:d9:f1:
44:c9:cc:78:2a:54:99:be:ae:de:3f:cd:52:e1:df:e2:3b:52:
88:47:0e:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7CoSezfIj0VwzWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjI2N2Q4MzItY2IwNS00YzY4LWE1Y2UtYmE0NjQ1ZGIz
NWUwMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
NjgwOWI3ODgtMmFjNS00ZDFkLTg1MjQtYTAzN2JlODQwMjRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL7bH+xC4KjnwLZcklY2VY9Gzo6EMcQzh33u
ks3zxNybb7G967sCs/NwGnzyB+nqJ15v7rkwKdADf2QWb+8sFNyYRQJu9UcXhS4f
CW+gao8uUjW8MJYjro7Sbm8OFH3jf6WMAoYzmVTrB/0iCiJ/CSiCc5rxMrrmrhB7
NmHBV10mAj3+3h+S2VawDqoKr4iX55rjc86Ft2LyNVoPBIETprs7PZf6nVbtOii1
/NVGkdk8yQ5lkD40RK8kaLpBA4kLZePAV4QnMlRxZSowwNceMp8ekkcU5Jc6j91c
+PmE+fZI4ULcSNgsE1sLQj6yHw2GMDQ2xuWizTdxEf0FrS29QQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDlPKBCdnyt6d9vWgYj2FmogwHyCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMjY3
ZDgzMi1jYjA1LTRjNjgtYTVjZS1iYTQ2NDVkYjM1ZTAvYWFiZjcwM2YtMTAwMy0z
YjZiLWJiYTAtZmE4MmRhM2RkZDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjI2N2Q4MzItY2IwNS00YzY4LWE1
Y2UtYmE0NjQ1ZGIzNWUwL2IyNjdkODMyLWNiMDUtNGM2OC1hNWNlLWJhNDY0NWRi
MzVlMC5jcmwwHwYDVR0jBBgwFoAU2rliA1hIhy/TMsdQmyxxCC9eqCYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iMjY3ZDgzMi1jYjA1LTRjNjgtYTVjZS1iYTQ2
NDVkYjM1ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEuKqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGc8VUquXhM9js6i5MN4MUwz0L4r4oL1r/iPGS13XdwmTsdOH++CcChN
21sKAgn13p4qMxz9kgRSHpb7ukoGJKPkWqWC8IM1f8NSWLpGPe8FNwO1soSKJ9D3
D51QD8V+ndZ193PNYJSA6V7ivPqdKQ4MU5EehT7tCxbxdLaugRSgsH3yAP7ru+6y
W2j2DSX9poKSe24kpOEIauj/sKZjgoVRNOnyrkeo5mrJa6OcvNDrGc/262GqR/Bp
b6+brlBfXmO/96wu3+QtEGKXtULoKtPepCXk9oSY+ZZf4YIF9OS7iq126V/SubTZ
8UTJzHgqVJm+rt4/zVLh3+I7UohHDv4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:28:49 2025 by rpki-client