Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1edd64f9-6df2-361b-95a3-5950813a437b.roa
File: 1edd64f9-6df2-361b-95a3-5950813a437b.roa (raw, json)
Hash identifier: pSWhHmuxJOmmQ/lNnPClVAa4fV5P+Q+Hk7gz8fi7LNw=
Subject key identifier: AB:A2:8E:E1:3A:BA:A8:E7:81:67:9D:8C:CA:5E:35:14:A4:2A:33:5E
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584937D93F82BF88FCF14CFBDB80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1edd64f9-6df2-361b-95a3-5950813a437b.roa
Signing time: Mon 17 Mar 2025 13:00:52 +0000
ROA not before: Mon 17 Mar 2025 13:00:52 +0000
ROA not after: Sun 15 Jun 2025 13:00:52 +0000
asID: 6939
IP address blocks: 65.19.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:37:d9:3f:82:bf:88:fc:f1:4c:fb:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 17 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=610b63eb-ad56-441a-9820-d89f273433c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:73:ce:ca:d6:63:7b:4b:c0:92:82:68:3d:57:
bb:e0:a6:56:bb:7e:3a:9b:27:08:03:77:e5:52:60:
3b:5f:cc:4c:df:0f:57:d8:6a:cc:cc:b8:00:14:3e:
a3:25:11:13:50:c9:3b:7c:a8:af:ab:d3:c8:2a:9e:
97:25:8e:e3:bb:b1:31:6e:5d:09:53:5c:43:31:fe:
48:fc:4c:84:16:5b:55:5c:bf:36:8d:fa:01:c7:48:
3a:fe:b5:90:30:ff:f3:e8:d2:dd:6f:cd:2f:8a:eb:
92:6d:f6:65:cf:e5:e8:8a:bd:42:4d:ea:b5:5f:e1:
a4:87:1a:d0:80:48:6d:70:03:25:0f:b7:4f:3d:11:
1a:ff:84:4f:6e:3d:9f:9d:f9:1c:27:93:76:48:64:
3e:79:9e:7e:27:20:75:a4:70:93:3f:b5:87:9d:9f:
a3:68:46:95:8b:ab:b7:59:9c:14:36:b1:ce:48:22:
8e:4b:de:ad:67:09:b5:a9:95:ac:d6:fb:4c:c1:9a:
a8:f4:81:ca:bf:26:da:fd:29:f4:5e:78:e4:36:dc:
ed:fa:72:64:67:d9:42:cc:65:23:30:94:98:4a:e5:
f4:30:13:c4:c8:1b:4b:4c:4a:26:61:76:7d:80:b6:
1a:f9:79:e5:4a:67:84:30:13:f3:39:94:2d:a4:d2:
3a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A2:8E:E1:3A:BA:A8:E7:81:67:9D:8C:CA:5E:35:14:A4:2A:33:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1edd64f9-6df2-361b-95a3-5950813a437b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.19.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:f9:33:88:87:09:1c:a2:db:82:1d:26:31:b6:66:ab:d6:cb:
7b:d9:ef:dc:1a:1c:f1:b9:45:04:bf:8a:39:f6:c7:08:af:90:
4a:2d:b6:f4:11:0e:ff:df:be:dc:65:15:f6:d0:0b:ea:26:e6:
4b:ed:03:c9:2f:25:fa:2a:49:5c:bc:34:4b:16:8d:78:32:4b:
3f:d7:41:bc:8b:ce:2c:44:49:a0:ac:11:80:51:2b:3d:31:08:
4c:96:f0:f7:f0:47:66:d0:b4:61:e6:f3:1f:21:38:f3:8e:37:
27:5a:54:13:eb:d6:0e:8c:c1:8e:cc:a3:cb:bd:9b:26:24:07:
4d:e5:a0:fd:21:34:1a:20:48:1e:90:1f:e5:ad:ee:9a:55:41:
0c:76:9d:24:05:9d:c4:7a:3c:1a:52:0a:2c:08:c3:9a:2b:2a:
2c:b1:ac:43:db:54:d1:9e:c1:02:bc:22:4b:2d:41:cb:9b:ae:
8c:b0:e0:c6:3d:8d:64:18:0a:96:a6:f5:cd:72:1a:a2:40:d2:
15:6b:0d:96:77:cf:37:08:bd:a4:b7:c7:7c:94:33:21:96:5c:
72:d0:50:c5:cc:7c:ea:d4:68:ba:55:52:e4:3e:5b:12:6f:e1:
14:9c:e5:a4:10:d5:51:e2:68:25:22:2a:b9:32:fd:2c:cd:7b:
32:85:d2:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk32T+Cv4j88Uz724AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk
NjEwYjYzZWItYWQ1Ni00NDFhLTk4MjAtZDg5ZjI3MzQzM2M1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XPOytZje0vAkoJoPVe74KZWu346mycIA3fl
UmA7X8xM3w9X2GrMzLgAFD6jJRETUMk7fKivq9PIKp6XJY7ju7Exbl0JU1xDMf5I
/EyEFltVXL82jfoBx0g6/rWQMP/z6NLdb80viuuSbfZlz+Xoir1CTeq1X+GkhxrQ
gEhtcAMlD7dPPREa/4RPbj2fnfkcJ5N2SGQ+eZ5+JyB1pHCTP7WHnZ+jaEaVi6u3
WZwUNrHOSCKOS96tZwm1qZWs1vtMwZqo9IHKvyba/Sn0XnjkNtzt+nJkZ9lCzGUj
MJSYSuX0MBPEyBtLTEomYXZ9gLYa+XnlSmeEMBPzOZQtpNI6hQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKuijuE6uqjngWedjMpeNRSkKjNeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWVkZDY0ZjktNmRmMi0z
NjFiLTk1YTMtNTk1MDgxM2E0MzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQROAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACT5M4iHCRyi24IdJjG2ZqvWy3vZ79waHPG5RQS/ijn2xwivkEottvQR
Dv/fvtxlFfbQC+om5kvtA8kvJfoqSVy8NEsWjXgySz/XQbyLzixESaCsEYBRKz0x
CEyW8PfwR2bQtGHm8x8hOPOONydaVBPr1g6MwY7Mo8u9myYkB03loP0hNBogSB6Q
H+Wt7ppVQQx2nSQFncR6PBpSCiwIw5orKiyxrEPbVNGewQK8IkstQcubroyw4MY9
jWQYCpam9c1yGqJA0hVrDZZ3zzcIvaS3x3yUMyGWXHLQUMXMfOrUaLpVUuQ+WxJv
4RSc5aQQ1VHiaCUiKrky/SzNezKF0oE=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:56:43 2025 by rpki-client