Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/efab38d0-a94a-30bc-941d-a17b07a670e3.roa
File: efab38d0-a94a-30bc-941d-a17b07a670e3.roa (raw, json)
Hash identifier: /s4TARaCKsytiS/GjGVqcypv63ZtF3B3h3LH2JSD2Zc=
Subject key identifier: C1:89:CC:D7:B5:B4:E1:35:16:F2:4F:09:76:54:A3:80:D7:C3:61:D0
Certificate issuer: /CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Certificate serial: 010D0C9F4328584902EC2A471734B901C2E38C80
Authority key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/efab38d0-a94a-30bc-941d-a17b07a670e3.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 10929
IP address blocks: 208.82.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:2a:47:17:34:b9:01:c2:e3:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=67cb9c3b-8c1f-4ceb-a6f3-7a5d5e57d424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:67:72:e5:c9:40:28:61:84:91:cd:ff:e1:a7:
3f:b7:49:12:65:2d:6d:81:1e:74:24:31:9f:cf:45:
62:f2:d9:98:58:6d:b9:53:50:22:ad:eb:cc:2f:48:
1b:af:43:37:21:24:50:40:5a:f3:bf:9b:52:a9:9e:
c0:ae:33:cb:d7:90:28:f4:d3:d2:ac:eb:4f:b9:6f:
f9:b3:c1:3a:11:b9:1a:c3:6d:9a:3b:31:a7:ac:6f:
89:46:c7:a0:a5:7e:f7:45:57:86:20:59:e2:f0:91:
9b:2c:e3:da:3d:f0:21:b0:f8:ce:e3:ae:59:ff:eb:
f3:a3:36:d3:cd:65:6f:64:d1:95:c6:84:ec:09:56:
dd:50:e2:0d:f6:b2:da:3a:91:96:ea:f8:b9:7a:14:
2b:14:1a:3c:b8:be:3f:10:63:f9:4c:26:48:66:df:
ea:fd:c8:87:c6:22:a1:c0:90:6f:90:f6:77:29:09:
80:4d:d0:84:18:0a:68:f7:e1:37:87:e9:ca:51:cd:
ac:c1:a4:16:80:af:80:7e:83:47:4a:37:18:4e:04:
b1:1a:9b:e5:ea:fc:6a:a1:ea:92:d6:20:91:cd:16:
d1:74:4b:cd:ec:85:5b:33:4a:7d:79:80:de:41:9e:
2c:bb:8f:34:8a:f1:8d:1c:0a:10:b5:87:50:42:97:
74:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:89:CC:D7:B5:B4:E1:35:16:F2:4F:09:76:54:A3:80:D7:C3:61:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/efab38d0-a94a-30bc-941d-a17b07a670e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl
X509v3 Authority Key Identifier:
keyid:DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
sbgp-ipAddrBlock: critical
IPv4:
208.82.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:2a:b5:16:41:3e:25:63:c2:da:ee:a8:10:d0:1d:03:c3:84:
1a:2a:21:d4:98:38:d9:58:03:09:7b:e5:fa:77:06:fa:98:df:
f2:04:f2:9e:6d:0b:57:52:e1:5a:cd:30:b0:61:95:35:09:7e:
ff:72:4f:6c:9c:64:58:aa:4b:2a:79:e5:64:66:c6:3b:01:dd:
19:43:5c:17:4a:7c:ae:a8:35:dc:c7:18:35:6e:31:94:46:25:
43:c1:ae:21:7e:d7:b4:89:8f:ac:97:2a:36:b5:80:dd:61:6a:
21:f4:6d:32:dd:61:74:f4:d6:85:61:99:08:f6:fe:af:c2:f7:
81:79:8f:42:2e:59:f9:9a:b6:15:1a:8e:33:20:8c:ea:da:c5:
31:ea:9b:a0:12:21:b7:33:ec:7e:55:ea:1f:d7:82:10:79:47:
2f:ff:49:cd:b9:07:17:47:05:de:56:fe:bb:8c:08:a3:76:d2:
ab:eb:6f:b3:a8:fa:89:85:f6:b5:2f:e1:09:19:4e:e4:f4:c0:
6b:02:b5:c3:75:76:46:0d:86:31:86:f5:37:9b:51:48:9d:3c:
41:f4:9d:00:11:fb:df:25:a1:bf:0a:7b:f9:18:56:18:64:c3:
e8:c9:ac:53:f1:9e:04:88:ec:9c:0a:56:89:b8:db:98:d3:79:
42:d8:5c:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7CpHFzS5AcLjjIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjI2N2Q4MzItY2IwNS00YzY4LWE1Y2UtYmE0NjQ1ZGIz
NWUwMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
NjdjYjljM2ItOGMxZi00Y2ViLWE2ZjMtN2E1ZDVlNTdkNDI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWdy5clAKGGEkc3/4ac/t0kSZS1tgR50JDGf
z0Vi8tmYWG25U1AirevML0gbr0M3ISRQQFrzv5tSqZ7ArjPL15Ao9NPSrOtPuW/5
s8E6Ebkaw22aOzGnrG+JRsegpX73RVeGIFni8JGbLOPaPfAhsPjO465Z/+vzozbT
zWVvZNGVxoTsCVbdUOIN9rLaOpGW6vi5ehQrFBo8uL4/EGP5TCZIZt/q/ciHxiKh
wJBvkPZ3KQmATdCEGApo9+E3h+nKUc2swaQWgK+AfoNHSjcYTgSxGpvl6vxqoeqS
1iCRzRbRdEvN7IVbM0p9eYDeQZ4su480ivGNHAoQtYdQQpd0QQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMGJzNe1tOE1FvJPCXZUo4DXw2HQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMjY3
ZDgzMi1jYjA1LTRjNjgtYTVjZS1iYTQ2NDVkYjM1ZTAvZWZhYjM4ZDAtYTk0YS0z
MGJjLTk0MWQtYTE3YjA3YTY3MGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjI2N2Q4MzItY2IwNS00YzY4LWE1
Y2UtYmE0NjQ1ZGIzNWUwL2IyNjdkODMyLWNiMDUtNGM2OC1hNWNlLWJhNDY0NWRi
MzVlMC5jcmwwHwYDVR0jBBgwFoAU2rliA1hIhy/TMsdQmyxxCC9eqCYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iMjY3ZDgzMi1jYjA1LTRjNjgtYTVjZS1iYTQ2
NDVkYjM1ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FJ4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALYqtRZBPiVjwtruqBDQHQPDhBoqIdSYONlYAwl75fp3BvqY3/IE8p5t
C1dS4VrNMLBhlTUJfv9yT2ycZFiqSyp55WRmxjsB3RlDXBdKfK6oNdzHGDVuMZRG
JUPBriF+17SJj6yXKja1gN1haiH0bTLdYXT01oVhmQj2/q/C94F5j0IuWfmathUa
jjMgjOraxTHqm6ASIbcz7H5V6h/XghB5Ry//Sc25BxdHBd5W/ruMCKN20qvrb7Oo
+omF9rUv4QkZTuT0wGsCtcN1dkYNhjGG9TebUUidPEH0nQAR+98lob8Ke/kYVhhk
w+jJrFPxngSI7JwKVom425jTeULYXIc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:24:55 2025 by rpki-client