Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/3532f2d1-a384-31f4-8652-ffe606421630.roa
File: 3532f2d1-a384-31f4-8652-ffe606421630.roa (raw, json)
Hash identifier: /Bnyqaq0OjjLSygGQu9/NmZeoT/wGoqZOzzWdfPwEdQ=
Subject key identifier: 4B:88:81:03:82:E4:90:27:7C:A3:C1:AB:36:63:F8:CC:7E:39:3F:3F
Certificate issuer: /CN=47c2a6e6-9681-4930-9d85-167ea7f611c2
Certificate serial: 010D0C9F432858489340AFDA5AB06FDB5CE2E400
Authority key identifier: 09:B2:1E:6E:92:30:BC:66:84:26:F0:0C:C7:DB:C5:91:5A:AA:E9:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/3532f2d1-a384-31f4-8652-ffe606421630.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 19782
IP address blocks: 159.28.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:af:da:5a:b0:6f:db:5c:e2:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c2a6e6-9681-4930-9d85-167ea7f611c2
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=e18f8413-4df9-4dc2-9b03-5c51588ab62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a4:94:89:0e:9a:58:24:df:64:d2:6b:b2:6e:
0b:02:9e:c0:81:45:b7:47:7d:de:1c:43:5a:0f:4a:
fc:11:f6:c7:3d:25:cd:06:15:e6:2d:f0:28:45:49:
76:36:36:63:25:88:09:7f:06:c4:77:df:c5:74:bc:
63:b9:1e:08:f8:d5:9e:c7:58:02:1b:3d:9a:e0:62:
37:57:0d:ae:02:aa:61:9e:bf:10:21:db:50:76:a1:
e3:f3:3c:61:be:13:2e:58:42:a0:4b:4b:9f:8c:fe:
45:d0:26:fe:95:06:45:ab:fc:6b:cc:f5:cf:c2:e8:
59:a8:33:b6:8b:a8:55:0f:3c:da:0a:6d:e5:74:33:
78:62:b0:8e:21:34:75:45:39:9a:4c:d8:38:1b:c2:
10:91:60:a0:7f:a9:23:5c:ef:a2:ea:bc:7a:09:a9:
e2:44:d1:6c:99:8a:24:a0:d2:3e:21:91:a4:5d:17:
04:70:f2:e6:be:63:ca:12:24:30:26:37:70:1a:fd:
a9:09:cb:88:a3:3a:e8:12:a6:53:88:c7:8b:a1:e8:
ea:7f:81:2f:cc:bb:c6:75:e1:e9:af:96:f4:f1:ec:
23:54:b5:e6:58:00:4f:c8:03:81:40:d2:26:c7:29:
1b:94:31:ce:9b:4a:99:10:5d:c4:d2:47:3e:de:8d:
96:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:88:81:03:82:E4:90:27:7C:A3:C1:AB:36:63:F8:CC:7E:39:3F:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/3532f2d1-a384-31f4-8652-ffe606421630.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/47c2a6e6-9681-4930-9d85-167ea7f611c2.crl
X509v3 Authority Key Identifier:
keyid:09:B2:1E:6E:92:30:BC:66:84:26:F0:0C:C7:DB:C5:91:5A:AA:E9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2.cer
sbgp-ipAddrBlock: critical
IPv4:
159.28.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:03:81:64:ce:b0:5a:fb:f8:dc:09:7d:a1:2d:27:ce:38:a4:
bf:1c:30:42:e6:df:5a:16:8b:06:90:d8:e2:40:22:63:22:35:
7b:37:43:00:85:f6:06:73:e1:b1:eb:53:ea:0b:35:97:9f:a8:
e7:1a:78:42:3d:35:ee:01:b5:83:fb:4a:09:dd:52:21:c3:ab:
29:22:22:cd:1e:b3:f3:31:5d:82:1b:8d:67:bd:9b:ec:6a:a9:
aa:3e:84:f0:c2:e6:04:f9:73:75:f5:52:c2:3b:0b:81:81:4f:
f9:9f:50:f8:46:86:4a:51:b7:70:a3:ca:18:e4:76:7a:57:c6:
9e:93:f3:52:88:d9:98:85:f3:d1:55:fd:ef:8c:94:20:26:b7:
a8:c4:eb:8c:25:b6:03:11:4f:56:af:d1:14:91:bb:80:55:e4:
fb:d8:57:c1:f2:72:a0:1a:99:3b:b2:6d:a9:71:f8:70:c3:48:
ad:4b:b3:e3:a1:f0:c5:32:95:3e:53:47:42:ea:e6:8b:61:e2:
61:2b:38:a2:04:c5:43:ac:62:d9:6b:86:45:e5:07:69:08:e0:
f5:b7:2f:5d:6d:89:49:6d:b9:b0:87:97:b3:37:17:d5:40:66:
e2:b0:18:ac:57:77:97:16:b4:38:9c:74:4c:bc:50:8e:96:28:
48:d5:a8:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQK/aWrBv21zi5AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDdjMmE2ZTYtOTY4MS00OTMwLTlkODUtMTY3ZWE3ZjYx
MWMyMB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk
ZTE4Zjg0MTMtNGRmOS00ZGMyLTliMDMtNWM1MTU4OGFiNjJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaSUiQ6aWCTfZNJrsm4LAp7AgUW3R33eHENa
D0r8EfbHPSXNBhXmLfAoRUl2NjZjJYgJfwbEd9/FdLxjuR4I+NWex1gCGz2a4GI3
Vw2uAqphnr8QIdtQdqHj8zxhvhMuWEKgS0ufjP5F0Cb+lQZFq/xrzPXPwuhZqDO2
i6hVDzzaCm3ldDN4YrCOITR1RTmaTNg4G8IQkWCgf6kjXO+i6rx6CaniRNFsmYok
oNI+IZGkXRcEcPLmvmPKEiQwJjdwGv2pCcuIozroEqZTiMeLoejqf4EvzLvGdeHp
r5b08ewjVLXmWABPyAOBQNImxykblDHOm0qZEF3E0kc+3o2W2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEuIgQOC5JAnfKPBqzZj+Mx+OT8/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80N2My
YTZlNi05NjgxLTQ5MzAtOWQ4NS0xNjdlYTdmNjExYzIvMzUzMmYyZDEtYTM4NC0z
MWY0LTg2NTItZmZlNjA2NDIxNjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDdjMmE2ZTYtOTY4MS00OTMwLTlk
ODUtMTY3ZWE3ZjYxMWMyLzQ3YzJhNmU2LTk2ODEtNDkzMC05ZDg1LTE2N2VhN2Y2
MTFjMi5jcmwwHwYDVR0jBBgwFoAUCbIebpIwvGaEJvAMx9vFkVqq6SgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80N2MyYTZlNi05NjgxLTQ5MzAtOWQ4NS0xNjdl
YTdmNjExYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGnxwAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACADgWTOsFr7+NwJfaEtJ844pL8cMELm31oWiwaQ2OJAImMiNXs3QwCF
9gZz4bHrU+oLNZefqOcaeEI9Ne4BtYP7SgndUiHDqykiIs0es/MxXYIbjWe9m+xq
qao+hPDC5gT5c3X1UsI7C4GBT/mfUPhGhkpRt3CjyhjkdnpXxp6T81KI2ZiF89FV
/e+MlCAmt6jE64wltgMRT1av0RSRu4BV5PvYV8HycqAamTuybalx+HDDSK1Ls+Oh
8MUylT5TR0Lq5oth4mErOKIExUOsYtlrhkXlB2kI4PW3L11tiUltubCHl7M3F9VA
ZuKwGKxXd5cWtDicdEy8UI6WKEjVqPU=
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:31:46 2025 by rpki-client