Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/86de01fa-9f63-306f-8dd1-489d0d28672c.roa
File: 86de01fa-9f63-306f-8dd1-489d0d28672c.roa (raw, json)
Hash identifier: rPjhhvaWXwZYBZwgDTV7i2ebz3mnT8wnVmx+ui7SrLc=
Subject key identifier: 99:A1:8A:0C:88:32:AB:48:C9:3B:A4:70:4E:B9:7D:91:4A:2C:2C:B7
Certificate issuer: /CN=2d00478e-6a9e-4570-970a-f0a5baefc323
Certificate serial: 010D0C9F43285847B1016A52430D272A0A52ED80
Authority key identifier: 43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/86de01fa-9f63-306f-8dd1-489d0d28672c.roa
Signing time: Mon 28 Oct 2024 13:00:40 +0000
ROA not before: Mon 28 Oct 2024 13:00:40 +0000
ROA not after: Sun 26 Jan 2025 14:00:40 +0000
asID: 7850
IP address blocks: 216.234.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:b1:01:6a:52:43:0d:27:2a:0a:52:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d00478e-6a9e-4570-970a-f0a5baefc323
Validity
Not Before: Oct 28 13:00:40 2024 GMT
Not After : Jan 26 14:00:40 2025 GMT
Subject: CN=673c2f6e-fcbd-422d-85a6-edbbcc7811b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:be:a8:85:de:72:1c:55:4e:7e:a7:a2:ed:5c:
54:3b:1e:94:c5:e5:85:d6:32:5a:32:6e:83:27:d6:
dc:f7:66:e5:70:a9:86:a7:47:7f:32:a2:1e:cd:95:
dc:e0:c6:fa:3a:29:bd:da:15:41:ff:7e:bd:ad:b1:
e0:ea:6e:a7:af:2c:44:5b:4f:61:77:c1:bc:b8:fd:
68:4d:3c:01:54:d7:2e:ca:a8:b3:1f:cb:33:f8:f5:
32:6c:47:b9:96:c3:62:0a:07:e7:bd:6f:3b:f2:a8:
1c:a4:39:df:6d:af:b8:98:51:3d:ee:12:59:98:87:
ec:89:df:af:d0:49:67:a3:9e:cc:3a:59:04:47:7f:
92:05:d4:5b:3f:a8:e7:9b:d2:f9:13:33:ed:3f:66:
87:f4:59:12:0c:3b:72:ec:24:fc:d8:44:94:1e:6c:
15:da:e1:27:36:fd:ab:ec:24:2c:dd:c6:e1:bd:a4:
5c:04:53:a3:aa:5f:61:8d:c3:e2:6c:06:c1:71:10:
85:6e:5b:d6:ca:d0:d1:4a:d6:ea:7a:6b:64:6e:91:
8b:ea:c7:2e:5c:e7:10:6f:f9:43:ec:19:4d:ab:3d:
c6:dd:24:ca:1d:0e:28:d9:c7:56:84:45:af:cf:e9:
25:52:5b:ae:f8:2f:c8:76:bf:d6:e3:33:75:4c:0e:
35:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A1:8A:0C:88:32:AB:48:C9:3B:A4:70:4E:B9:7D:91:4A:2C:2C:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/86de01fa-9f63-306f-8dd1-489d0d28672c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl
X509v3 Authority Key Identifier:
keyid:43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer
sbgp-ipAddrBlock: critical
IPv4:
216.234.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:19:d4:2d:15:1a:03:64:48:df:8d:bd:7c:a4:35:0b:2e:0d:
c3:39:ab:a3:ee:7a:93:e1:a9:52:14:38:97:29:16:49:ac:4f:
72:b2:27:d7:17:a0:10:83:03:15:b0:03:d4:4a:7f:a5:a7:f7:
9a:0a:f5:2c:8f:15:68:45:bb:ec:5a:28:ae:32:2d:e8:4d:06:
bd:61:84:a2:db:41:73:e3:93:70:b6:84:54:39:0e:a5:2b:dd:
71:90:79:7c:12:82:e4:64:cf:6d:b8:54:f1:fb:93:5d:48:38:
46:44:66:ea:29:36:a7:ee:a4:eb:df:48:19:57:41:82:4a:75:
d2:2d:5a:52:98:1a:94:e9:a2:d4:96:15:58:e5:87:23:6c:20:
13:42:65:0f:52:81:99:95:61:52:9b:9a:36:1d:4c:b5:e7:4c:
6c:65:1f:bc:e3:fa:3d:03:7c:f1:a3:0c:7f:ed:7d:32:52:12:
9b:84:d1:72:6e:6c:c1:3f:a1:f8:7d:ce:ed:76:af:4d:84:11:
98:bc:6c:76:6b:31:15:04:fa:e3:12:d3:e0:37:20:9d:93:47:
f6:60:d2:20:b6:30:1e:1a:a9:46:30:39:55:e2:a0:23:57:d9:
b8:7c:a6:f9:58:8e:05:22:75:9d:57:c6:2f:af:e8:01:92:73:
23:70:c5:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEexAWpSQw0nKgpS7YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmQwMDQ3OGUtNmE5ZS00NTcwLTk3MGEtZjBhNWJhZWZj
MzIzMB4XDTI0MTAyODEzMDA0MFoXDTI1MDEyNjE0MDA0MFowLzEtMCsGA1UEAxMk
NjczYzJmNmUtZmNiZC00MjJkLTg1YTYtZWRiYmNjNzgxMWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr6ohd5yHFVOfqei7VxUOx6UxeWF1jJaMm6D
J9bc92blcKmGp0d/MqIezZXc4Mb6Oim92hVB/369rbHg6m6nryxEW09hd8G8uP1o
TTwBVNcuyqizH8sz+PUybEe5lsNiCgfnvW878qgcpDnfba+4mFE97hJZmIfsid+v
0Elno57MOlkER3+SBdRbP6jnm9L5EzPtP2aH9FkSDDty7CT82ESUHmwV2uEnNv2r
7CQs3cbhvaRcBFOjql9hjcPibAbBcRCFblvWytDRStbqemtkbpGL6scuXOcQb/lD
7BlNqz3G3STKHQ4o2cdWhEWvz+klUluu+C/Idr/W4zN1TA41uwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJmhigyIMqtIyTukcE65fZFKLCy3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZDAw
NDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1YmFlZmMzMjMvODZkZTAxZmEtOWY2My0z
MDZmLThkZDEtNDg5ZDBkMjg2NzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmQwMDQ3OGUtNmE5ZS00NTcwLTk3
MGEtZjBhNWJhZWZjMzIzLzJkMDA0NzhlLTZhOWUtNDU3MC05NzBhLWYwYTViYWVm
YzMyMy5jcmwwHwYDVR0jBBgwFoAUQwIxL+ZnSBE6D2CkA5HZ1QFmQPgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8yZDAwNDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1
YmFlZmMzMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2OrAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEcZ1C0VGgNkSN+NvXykNQsuDcM5q6PuepPhqVIUOJcpFkmsT3KyJ9cX
oBCDAxWwA9RKf6Wn95oK9SyPFWhFu+xaKK4yLehNBr1hhKLbQXPjk3C2hFQ5DqUr
3XGQeXwSguRkz224VPH7k11IOEZEZuopNqfupOvfSBlXQYJKddItWlKYGpTpotSW
FVjlhyNsIBNCZQ9SgZmVYVKbmjYdTLXnTGxlH7zj+j0DfPGjDH/tfTJSEpuE0XJu
bME/ofh9zu12r02EEZi8bHZrMRUE+uMS0+A3IJ2TR/Zg0iC2MB4aqUYwOVXioCNX
2bh8pvlYjgUidZ1Xxi+v6AGScyNwxe4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:27 2025 by rpki-client