Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad/934160e5-55a7-33a4-be6b-7aad090ddddc.roa
File: 934160e5-55a7-33a4-be6b-7aad090ddddc.roa (raw, json)
Hash identifier: U4PYHNgustfOybA8Lmwa2cuePMeSMbcvCo5hsTRyWZo=
Subject key identifier: 80:06:45:30:95:45:8E:8E:92:2F:81:08:9C:BF:C6:24:38:95:BA:A0
Certificate issuer: /CN=fcafd4be-2865-4c0e-8cf0-831bdd0ecaad
Certificate serial: 010D0C9F43285848D21141FBB4EAEFBCDF65B900
Authority key identifier: 27:30:F6:19:D6:E3:7B:08:E5:F5:22:6A:12:8F:21:C6:56:81:C2:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad/934160e5-55a7-33a4-be6b-7aad090ddddc.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 54196
IP address blocks: 65.38.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:41:fb:b4:ea:ef:bc:df:65:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcafd4be-2865-4c0e-8cf0-831bdd0ecaad
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=be5a8b4d-e863-4469-b60c-bf5190fd34c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:14:f5:21:26:aa:49:de:b5:77:f8:98:fd:36:
a2:2f:46:ec:26:ee:84:97:ea:48:52:6c:1f:0e:d9:
43:2d:9f:b1:f6:2a:fb:58:53:5a:2f:64:ae:bb:96:
0e:28:cd:95:f6:79:c5:9d:90:99:3d:21:ad:84:76:
72:35:8e:01:45:33:c5:3e:2d:f5:92:45:2d:75:8e:
6b:ef:1a:f9:52:64:f5:f7:5f:7e:a6:48:cc:54:2e:
e6:5a:b8:4a:39:8e:c6:47:81:07:4e:84:83:c6:21:
8b:a0:d7:35:e9:59:40:45:cc:f3:0c:d0:95:a2:c1:
49:95:86:69:86:0a:b1:de:b9:31:ef:19:43:98:e1:
94:dc:01:ea:32:9a:85:48:a6:2e:94:85:d6:6f:5c:
a7:5d:9c:c7:4b:c5:5d:4e:d4:54:62:1a:8c:ce:ee:
c6:51:c9:e3:36:e0:fa:4a:68:60:88:0e:09:44:cd:
83:2a:e2:99:86:38:1a:19:e6:6f:db:6d:50:69:ea:
26:3d:78:9a:73:40:e2:fb:bb:f6:85:61:05:ef:39:
e6:67:18:12:c0:5e:e2:44:03:7d:12:83:52:5b:88:
15:02:88:4c:05:74:db:72:4e:e7:01:1f:b7:39:0c:
08:2d:33:e1:c8:dd:30:2a:94:cd:38:9b:f8:6e:1a:
00:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:06:45:30:95:45:8E:8E:92:2F:81:08:9C:BF:C6:24:38:95:BA:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad/934160e5-55a7-33a4-be6b-7aad090ddddc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad.crl
X509v3 Authority Key Identifier:
keyid:27:30:F6:19:D6:E3:7B:08:E5:F5:22:6A:12:8F:21:C6:56:81:C2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad.cer
sbgp-ipAddrBlock: critical
IPv4:
65.38.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:d3:49:8c:60:4d:ff:94:82:04:a2:75:85:47:bb:3d:8e:f4:
4a:a2:fd:5f:f2:a7:ab:f6:eb:e1:7b:f4:61:e1:84:ac:5d:03:
dd:61:52:ef:a5:b4:3d:50:16:c7:41:12:31:55:5f:3a:3a:36:
4e:3d:df:f7:2b:80:76:58:1a:0b:2f:c7:62:86:fb:4e:f3:b4:
16:64:2c:c1:c9:e1:3f:ed:b2:2a:2a:d5:9a:75:9d:ab:13:7b:
06:23:98:e6:31:c4:3c:53:5a:9f:8a:8e:59:2e:51:2b:a5:8a:
21:82:84:48:c4:68:e9:97:d7:be:29:05:f5:d2:ec:a2:54:c7:
72:12:fd:38:3e:6d:23:2f:42:11:c8:a3:52:d4:8c:b1:79:81:
20:ca:e4:ca:4e:54:b2:be:52:bc:0d:76:8d:5d:fa:be:17:8e:
ed:df:51:96:df:64:b7:7e:21:68:2e:ed:79:ea:59:87:92:70:
8b:c1:a9:77:08:70:84:cd:9d:34:75:9d:bb:b8:d0:79:e1:1b:
f8:09:ea:f3:da:4c:4c:1d:1d:9c:7e:8a:06:71:e8:ae:31:b5:
3f:da:6a:94:4e:b9:74:06:47:0d:66:f0:c9:a0:98:59:a1:c4:
12:c0:e8:19:23:d8:47:fb:d0:f6:93:ef:c9:c8:b9:09:f4:dd:
be:1a:b0:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEUH7tOrvvN9luQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmNhZmQ0YmUtMjg2NS00YzBlLThjZjAtODMxYmRkMGVj
YWFkMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk
YmU1YThiNGQtZTg2My00NDY5LWI2MGMtYmY1MTkwZmQzNGM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxT1ISaqSd61d/iY/TaiL0bsJu6El+pIUmwf
DtlDLZ+x9ir7WFNaL2Suu5YOKM2V9nnFnZCZPSGthHZyNY4BRTPFPi31kkUtdY5r
7xr5UmT1919+pkjMVC7mWrhKOY7GR4EHToSDxiGLoNc16VlARczzDNCVosFJlYZp
hgqx3rkx7xlDmOGU3AHqMpqFSKYulIXWb1ynXZzHS8VdTtRUYhqMzu7GUcnjNuD6
SmhgiA4JRM2DKuKZhjgaGeZv221QaeomPXiac0Di+7v2hWEF7znmZxgSwF7iRAN9
EoNSW4gVAohMBXTbck7nAR+3OQwILTPhyN0wKpTNOJv4bhoAZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIAGRTCVRY6Oki+BCJy/xiQ4lbqgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mY2Fm
ZDRiZS0yODY1LTRjMGUtOGNmMC04MzFiZGQwZWNhYWQvOTM0MTYwZTUtNTVhNy0z
M2E0LWJlNmItN2FhZDA5MGRkZGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZmNhZmQ0YmUtMjg2NS00YzBlLThj
ZjAtODMxYmRkMGVjYWFkL2ZjYWZkNGJlLTI4NjUtNGMwZS04Y2YwLTgzMWJkZDBl
Y2FhZC5jcmwwHwYDVR0jBBgwFoAUJzD2Gdbjewjl9SJqEo8hxlaBwk4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9mY2FmZDRiZS0yODY1LTRjMGUtOGNmMC04MzFi
ZGQwZWNhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQSZqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHnTSYxgTf+UggSidYVHuz2O9Eqi/V/yp6v26+F79GHhhKxdA91hUu+l
tD1QFsdBEjFVXzo6Nk493/crgHZYGgsvx2KG+07ztBZkLMHJ4T/tsioq1Zp1nasT
ewYjmOYxxDxTWp+KjlkuUSuliiGChEjEaOmX174pBfXS7KJUx3IS/Tg+bSMvQhHI
o1LUjLF5gSDK5MpOVLK+UrwNdo1d+r4Xju3fUZbfZLd+IWgu7XnqWYeScIvBqXcI
cITNnTR1nbu40HnhG/gJ6vPaTEwdHZx+igZx6K4xtT/aapROuXQGRw1m8MmgmFmh
xBLA6Bkj2Ef70PaT78nIuQn03b4asLY=
-----END CERTIFICATE-----
Generated at Wed Apr 9 20:25:04 2025 by rpki-client