Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/fb2d1c26-78b3-3b15-8e79-7db1d1c5bd5f.roa
File: fb2d1c26-78b3-3b15-8e79-7db1d1c5bd5f.roa (raw, json)
Hash identifier: khVZLU0WEzA8M/xWaW+lamUanbpqxKOqh2TK+DhFBHg=
Subject key identifier: 02:AC:3C:DA:39:5F:2C:5B:BC:99:14:55:DD:F6:43:29:E1:61:35:2E
Certificate issuer: /CN=e0647553-32ca-48b6-be58-d6c7f475e654
Certificate serial: 010D0C9F432858487A208B3ACF2541F9FF317180
Authority key identifier: 3D:EA:87:2B:EB:A8:27:88:90:FC:5A:63:64:0F:CA:8F:10:C0:FE:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/fb2d1c26-78b3-3b15-8e79-7db1d1c5bd5f.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 7784
IP address blocks: 65.79.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:8b:3a:cf:25:41:f9:ff:31:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0647553-32ca-48b6-be58-d6c7f475e654
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=2ccb7d6e-76f0-4d47-9e21-e65637ecc966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:88:33:b4:a4:ea:e2:00:60:87:b3:18:72:60:
cd:5f:9c:68:c6:60:79:9b:e1:bb:ad:5c:de:81:09:
da:c6:73:4a:ac:f8:0c:0e:d2:e4:44:91:82:74:13:
57:2e:66:7e:39:f4:2e:41:f4:97:c0:bc:37:06:98:
88:e6:d9:7d:0d:1a:3e:f1:85:cc:fc:76:7d:56:d0:
04:4d:37:c9:85:de:79:5f:9f:4a:ff:1f:99:1c:b7:
78:e9:fb:3d:c9:b2:09:aa:72:40:5a:60:f6:ad:1e:
be:23:90:45:fc:53:de:e8:28:02:62:7c:bc:08:dd:
b1:b5:86:cd:8c:2e:9e:cb:da:5b:3c:8d:a8:50:6d:
f9:33:69:d7:60:d2:09:c0:e8:b9:e1:e5:13:fc:98:
88:fd:08:fd:d1:e0:fa:a3:89:61:a6:e8:e5:63:73:
73:1b:28:b5:41:10:29:51:40:aa:96:73:22:b8:33:
61:ec:25:fb:ce:9b:d7:3a:9b:33:0c:4a:3d:1b:11:
83:a9:0a:e9:49:57:cb:c0:a4:57:ee:63:d0:05:81:
56:b2:82:85:85:53:ae:eb:12:20:75:8c:b8:65:ee:
71:b6:17:ad:48:ba:8c:af:98:94:32:4c:29:ca:7c:
b6:4d:74:6b:d5:ec:1d:b5:25:07:e5:e7:f1:d3:c4:
87:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AC:3C:DA:39:5F:2C:5B:BC:99:14:55:DD:F6:43:29:E1:61:35:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/fb2d1c26-78b3-3b15-8e79-7db1d1c5bd5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/e0647553-32ca-48b6-be58-d6c7f475e654.crl
X509v3 Authority Key Identifier:
keyid:3D:EA:87:2B:EB:A8:27:88:90:FC:5A:63:64:0F:CA:8F:10:C0:FE:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654.cer
sbgp-ipAddrBlock: critical
IPv4:
65.79.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:5c:13:0d:e6:e6:c4:ee:ae:27:26:5f:78:5d:0c:84:f7:af:
9e:75:f0:ee:b6:61:3c:5c:1e:80:6c:44:9c:a8:91:05:6c:97:
b0:99:3e:17:32:e1:c5:eb:56:df:c5:60:e3:96:f0:22:53:ef:
59:1f:62:2d:1f:40:78:c7:05:ba:8e:7b:b9:50:ac:df:d3:94:
fc:ec:a1:da:43:ba:3a:05:4f:52:e4:95:8c:e0:5f:72:d8:03:
ae:73:c6:4e:4f:4f:fa:04:a8:19:11:df:e0:02:a5:8a:47:a4:
4d:cf:a7:38:53:07:39:cf:64:d6:d6:1d:6c:29:83:20:af:b8:
ae:02:f4:34:46:8c:a7:41:27:74:85:52:6a:b5:84:d3:20:ed:
af:8d:b0:51:ae:6a:db:d6:eb:24:42:20:46:12:51:c0:ca:7a:
b2:f6:b3:04:cc:9a:0e:16:43:1f:1b:5f:09:b2:62:05:26:46:
f4:2d:9c:45:2a:08:74:69:d5:5e:f3:f4:30:84:57:1d:e0:a3:
f8:35:9f:7d:c5:f2:8c:4f:e0:a6:9b:07:11:18:82:87:8d:f5:
e2:ad:c8:36:d4:3c:fc:ea:10:f8:c4:ed:b2:7e:49:c9:95:89:
28:b7:62:aa:12:15:02:38:0a:16:15:d9:d3:9a:8c:dc:a2:50:
f7:61:a7:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6IIs6zyVB+f8xcYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTA2NDc1NTMtMzJjYS00OGI2LWJlNTgtZDZjN2Y0NzVl
NjU0MB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk
MmNjYjdkNmUtNzZmMC00ZDQ3LTllMjEtZTY1NjM3ZWNjOTY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YgztKTq4gBgh7MYcmDNX5xoxmB5m+G7rVze
gQnaxnNKrPgMDtLkRJGCdBNXLmZ+OfQuQfSXwLw3BpiI5tl9DRo+8YXM/HZ9VtAE
TTfJhd55X59K/x+ZHLd46fs9ybIJqnJAWmD2rR6+I5BF/FPe6CgCYny8CN2xtYbN
jC6ey9pbPI2oUG35M2nXYNIJwOi54eUT/JiI/Qj90eD6o4lhpujlY3NzGyi1QRAp
UUCqlnMiuDNh7CX7zpvXOpszDEo9GxGDqQrpSVfLwKRX7mPQBYFWsoKFhVOu6xIg
dYy4Ze5xthetSLqMr5iUMkwpyny2TXRr1ewdtSUH5efx08SHxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAKsPNo5XyxbvJkUVd32QynhYTUuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMDY0
NzU1My0zMmNhLTQ4YjYtYmU1OC1kNmM3ZjQ3NWU2NTQvZmIyZDFjMjYtNzhiMy0z
YjE1LThlNzktN2RiMWQxYzViZDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTA2NDc1NTMtMzJjYS00OGI2LWJl
NTgtZDZjN2Y0NzVlNjU0L2UwNjQ3NTUzLTMyY2EtNDhiNi1iZTU4LWQ2YzdmNDc1
ZTY1NC5jcmwwHwYDVR0jBBgwFoAUPeqHK+uoJ4iQ/FpjZA/KjxDA/kcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lMDY0NzU1My0zMmNhLTQ4YjYtYmU1OC1kNmM3
ZjQ3NWU2NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQU/sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAChcEw3m5sTuricmX3hdDIT3r5518O62YTxcHoBsRJyokQVsl7CZPhcy
4cXrVt/FYOOW8CJT71kfYi0fQHjHBbqOe7lQrN/TlPzsodpDujoFT1LklYzgX3LY
A65zxk5PT/oEqBkR3+ACpYpHpE3PpzhTBznPZNbWHWwpgyCvuK4C9DRGjKdBJ3SF
Umq1hNMg7a+NsFGuatvW6yRCIEYSUcDKerL2swTMmg4WQx8bXwmyYgUmRvQtnEUq
CHRp1V7z9DCEVx3go/g1n33F8oxP4KabBxEYgoeN9eKtyDbUPPzqEPjE7bJ+ScmV
iSi3YqoSFQI4ChYV2dOajNyiUPdhpx8=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:17:40 2025 by rpki-client