Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/56953d6b-5952-3cbf-b1c7-d2c8b3c8eca5.roa
File: 56953d6b-5952-3cbf-b1c7-d2c8b3c8eca5.roa (raw, json)
Hash identifier: mt/2G6VtOi8bqU8DGtp6nyX1b9p3cb2bQeYtxJQuEAo=
Subject key identifier: 4C:96:4A:03:C3:D6:D9:9E:3E:07:5B:9D:04:BF:3D:3A:C9:5D:6F:56
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D160AA7D0EF00D9680DB00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/56953d6b-5952-3cbf-b1c7-d2c8b3c8eca5.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 11955
IP address blocks: 47.231.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:60:aa:7d:0e:f0:0d:96:80:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=d210d291-afbf-40fc-9d19-78418a27e9af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bc:34:3d:3b:a5:e2:d4:62:ad:67:3e:41:7b:
80:b1:a0:cd:8e:fa:c1:5b:33:6e:71:cc:9c:1a:c6:
65:d3:a7:47:46:bf:0d:a7:50:96:3c:bf:b0:a6:ed:
ce:a2:84:32:4f:70:a4:e5:bb:85:48:d3:c6:77:c2:
94:9e:00:2e:40:42:d3:05:fa:15:10:bb:d4:fd:6f:
c1:9e:3b:1b:7e:fd:90:f4:b2:1c:0e:38:4f:a9:82:
9e:2a:f4:41:d0:45:5a:79:bb:24:e3:42:21:1d:1e:
22:7b:04:eb:f3:2e:af:ad:bf:a9:e5:e1:d5:7a:77:
11:92:93:4b:9b:0f:f5:d9:97:f5:79:a5:65:77:6e:
71:60:7e:36:45:12:30:ed:f3:a1:68:06:4e:29:e3:
8f:4c:e1:1d:4a:b2:21:c5:1a:64:e5:bc:21:c3:24:
6f:cf:a0:5f:02:ce:06:15:ea:31:0f:26:ef:0c:96:
e6:27:ed:5e:55:14:a1:55:2b:ca:7e:9a:b0:b2:51:
e8:ca:8a:5e:ab:dd:c3:f0:1a:6c:af:85:22:a0:e6:
94:28:02:0d:2f:f1:9f:cd:c8:cc:53:dc:d1:4e:c2:
fe:4d:67:bc:b6:8a:52:a1:58:59:42:05:99:29:2f:
67:b0:ca:d0:61:0d:e6:09:1a:69:61:b0:d1:8a:fa:
02:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:96:4A:03:C3:D6:D9:9E:3E:07:5B:9D:04:BF:3D:3A:C9:5D:6F:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/56953d6b-5952-3cbf-b1c7-d2c8b3c8eca5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
47.231.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d9:2e:81:1e:b8:ec:fc:0b:2e:11:d8:99:76:73:37:db:b7:c0:
86:77:51:58:ae:85:71:48:6e:1f:93:13:0f:22:ac:fd:2a:4b:
46:1a:ec:61:99:16:79:30:66:a6:49:43:53:15:74:57:f1:f0:
b5:5c:89:e5:4d:d0:c9:b0:88:6b:a3:37:64:48:5c:04:d8:3f:
b0:97:c7:c0:38:c9:96:c1:2e:e2:1c:6f:98:1a:db:14:a5:00:
2f:ac:49:f9:b8:de:4f:f7:4d:6e:e2:ed:84:90:63:1c:bb:b1:
f3:ff:e2:08:09:db:33:32:f4:b1:5a:63:e3:b7:cf:60:3b:68:
fe:31:d4:2b:0a:19:89:d5:cb:1f:0f:00:52:d4:93:47:91:4b:
a4:b8:dd:7d:f5:1c:55:2e:75:5c:a1:51:86:1b:34:dc:93:cf:
95:94:bf:bc:e9:b6:72:9f:d4:20:da:c5:ca:49:13:fc:70:c4:
eb:ce:c4:71:f9:55:ab:bd:e1:e0:61:10:d8:aa:d0:72:cb:7d:
6e:17:e1:ac:66:8d:2b:e2:71:0b:7e:8c:6a:64:e3:6d:05:85:
45:b7:ca:1c:4b:c5:8a:87:a9:06:5c:f4:6e:0d:54:4b:d2:37:
6a:5f:42:be:87:18:ff:00:3e:c7:d3:65:cb:9f:60:63:7b:40:
ca:ec:2d:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0WCqfQ7wDZaA2wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
ZDIxMGQyOTEtYWZiZi00MGZjLTlkMTktNzg0MThhMjdlOWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbw0PTul4tRirWc+QXuAsaDNjvrBWzNuccyc
GsZl06dHRr8Np1CWPL+wpu3OooQyT3Ck5buFSNPGd8KUngAuQELTBfoVELvU/W/B
njsbfv2Q9LIcDjhPqYKeKvRB0EVaebsk40IhHR4iewTr8y6vrb+p5eHVencRkpNL
mw/12Zf1eaVld25xYH42RRIw7fOhaAZOKeOPTOEdSrIhxRpk5bwhwyRvz6BfAs4G
FeoxDybvDJbmJ+1eVRShVSvKfpqwslHoyopeq93D8Bpsr4UioOaUKAINL/GfzcjM
U9zRTsL+TWe8topSoVhZQgWZKS9nsMrQYQ3mCRppYbDRivoCZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEyWSgPD1tmePgdbnQS/PTrJXW9WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNTY5NTNkNmItNTk1Mi0z
Y2JmLWIxYzctZDJjOGIzYzhlY2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDL+d4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANkugR647PwLLhHYmXZzN9u3wIZ3UViuhXFIbh+TEw8irP0qS0Ya7GGZ
FnkwZqZJQ1MVdFfx8LVcieVN0MmwiGujN2RIXATYP7CXx8A4yZbBLuIcb5ga2xSl
AC+sSfm43k/3TW7i7YSQYxy7sfP/4ggJ2zMy9LFaY+O3z2A7aP4x1CsKGYnVyx8P
AFLUk0eRS6S43X31HFUudVyhUYYbNNyTz5WUv7zptnKf1CDaxcpJE/xwxOvOxHH5
Vau94eBhENiq0HLLfW4X4axmjSvicQt+jGpk420FhUW3yhxLxYqHqQZc9G4NVEvS
N2pfQr6HGP8APsfTZcufYGN7QMrsLaM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:40:38 2025 by rpki-client