Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c28acd5f-5fa6-3c28-9b81-d888c1e73830.roa
File: c28acd5f-5fa6-3c28-9b81-d888c1e73830.roa (raw, json)
Hash identifier: /jrZey8uKOx/55hceQYsEZzXLk7S6wLUHrzx2q2v7x0=
Subject key identifier: 43:C9:DB:D6:49:7D:20:98:CE:27:10:F1:DF:AE:B7:32:C5:E5:32:B9
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F4328584953C42D2D16E0C32AF2E08600
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c28acd5f-5fa6-3c28-9b81-d888c1e73830.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 54113
IP address blocks: 140.248.253.128/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:2d:2d:16:e0:c3:2a:f2:e0:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=a37dc340-0260-48be-aaac-d7ad52152347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ba:94:f9:67:38:3e:4f:1b:36:c7:ad:0d:71:
63:8e:9a:b4:7e:cc:38:9d:4a:5e:cc:15:a1:05:33:
81:f2:24:5f:97:4a:08:d8:32:2e:18:a6:a5:8e:ee:
62:4a:34:bd:26:ff:eb:50:01:63:2a:75:ce:6f:89:
a4:2f:2b:19:e3:d5:23:c1:ab:c0:01:44:1b:16:16:
ca:0e:43:69:f1:ff:9d:01:79:ec:09:c4:ed:1d:c7:
e9:94:48:3b:95:1f:26:95:9d:a4:a6:ec:52:c9:92:
c7:32:70:64:22:e7:62:fc:7d:05:1a:32:40:15:1d:
7d:b4:b0:6f:26:77:4c:26:31:bc:82:3f:29:a2:bb:
66:1c:29:f6:a7:68:99:81:e6:e8:a5:81:12:15:2a:
b2:0b:74:bf:14:1c:41:6e:58:60:4c:a4:89:4e:e2:
44:1d:77:1a:3c:b7:32:cf:0a:88:39:3b:5d:85:59:
1f:00:43:56:53:95:65:40:c5:4a:87:4b:47:c4:04:
10:d0:c1:28:1c:ca:83:35:3a:d4:8d:5d:b5:5e:a9:
02:b4:52:a7:af:1f:3c:f9:34:f2:0b:a1:45:22:34:
ab:33:54:60:71:02:1e:c0:49:cb:b5:6c:8b:89:d2:
81:0a:79:e1:41:07:3a:9d:d2:10:c3:d6:02:e9:5d:
37:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C9:DB:D6:49:7D:20:98:CE:27:10:F1:DF:AE:B7:32:C5:E5:32:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c28acd5f-5fa6-3c28-9b81-d888c1e73830.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
140.248.253.128/26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:4d:8a:05:df:54:c6:3c:2e:33:65:59:1b:ff:3d:6f:0a:a0:
9d:1e:09:32:ea:f0:f4:9a:e3:c9:71:b4:68:95:b4:9c:2a:5d:
5b:ad:37:af:4c:c2:45:f1:91:40:ff:16:fd:2f:84:29:1b:de:
42:63:04:32:3a:e6:0a:9e:5f:aa:54:4d:ef:7c:1a:08:bb:28:
f6:da:7b:0f:7c:ac:78:bc:5a:60:17:84:2d:b8:1f:16:9c:f7:
da:9b:09:fd:85:fa:30:1b:fc:72:d1:a1:16:80:d0:62:00:43:
40:85:d2:6b:01:46:70:db:4a:98:81:97:c5:07:b7:01:27:3f:
71:bc:9b:51:d5:ed:34:d4:4c:c9:89:36:31:3c:dc:60:47:f4:
78:cd:96:a8:7a:fd:de:e1:7d:94:11:4c:b9:20:3e:91:19:f7:
b3:9a:19:16:34:8a:67:96:a9:3c:69:6a:75:6a:60:a0:a3:c8:
f8:76:ac:e1:2f:89:0a:13:2f:aa:5a:16:d1:cb:6f:7d:71:57:
0c:fd:44:c2:52:32:a9:73:80:a0:34:a3:42:55:69:37:d5:28:
5d:8d:9f:3c:44:74:77:9f:3d:89:c0:e9:54:b5:46:af:01:2c:
81:20:ef:2a:97:be:b1:60:6c:9f:a4:75:08:44:7f:89:b5:2d:
8e:19:0a:d9
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElTxC0tFuDDKvLghgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
YTM3ZGMzNDAtMDI2MC00OGJlLWFhYWMtZDdhZDUyMTUyMzQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bqU+Wc4Pk8bNsetDXFjjpq0fsw4nUpezBWh
BTOB8iRfl0oI2DIuGKalju5iSjS9Jv/rUAFjKnXOb4mkLysZ49UjwavAAUQbFhbK
DkNp8f+dAXnsCcTtHcfplEg7lR8mlZ2kpuxSyZLHMnBkIudi/H0FGjJAFR19tLBv
JndMJjG8gj8portmHCn2p2iZgebopYESFSqyC3S/FBxBblhgTKSJTuJEHXcaPLcy
zwqIOTtdhVkfAENWU5VlQMVKh0tHxAQQ0MEoHMqDNTrUjV21XqkCtFKnrx88+TTy
C6FFIjSrM1RgcQIewEnLtWyLidKBCnnhQQc6ndIQw9YC6V03uwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEPJ29ZJfSCYzicQ8d+utzLF5TK5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYzI4YWNkNWYtNWZhNi0z
YzI4LTliODEtZDg4OGMxZTczODMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGjPj9gDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQABTYoF31TGPC4zZVkb/z1vCqCdHgky6vD0muPJcbRolbScKl1brTev
TMJF8ZFA/xb9L4QpG95CYwQyOuYKnl+qVE3vfBoIuyj22nsPfKx4vFpgF4QtuB8W
nPfamwn9hfowG/xy0aEWgNBiAENAhdJrAUZw20qYgZfFB7cBJz9xvJtR1e001EzJ
iTYxPNxgR/R4zZaoev3e4X2UEUy5ID6RGfezmhkWNIpnlqk8aWp1amCgo8j4dqzh
L4kKEy+qWhbRy299cVcM/UTCUjKpc4CgNKNCVWk31ShdjZ88RHR3nz2JwOlUtUav
ASyBIO8ql76xYGyfpHUIRH+JtS2OGQrZ
-----END CERTIFICATE-----
Generated at Thu Apr 3 02:55:12 2025 by rpki-client