Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/18ad96a5-77d4-39de-9e60-6bdffaaa8de2.roa
File: 18ad96a5-77d4-39de-9e60-6bdffaaa8de2.roa (raw, json)
Hash identifier: HB0PqDpMl3TRz7dsN7kP85XgbCHNK7Zr3FsrKXZ1SSg=
Subject key identifier: 2E:FD:DA:E9:87:63:12:BA:98:AC:62:FA:F8:C7:C9:C4:E1:82:1C:35
Certificate issuer: /CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
Certificate serial: 010D0C9F432858478026504C2ABB8BEFA367D580
Authority key identifier: E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/18ad96a5-77d4-39de-9e60-6bdffaaa8de2.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 398395
IP address blocks: 199.253.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:50:4c:2a:bb:8b:ef:a3:67:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=8e3d0853-20d2-407f-9355-5714d880a5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:81:23:12:99:07:2e:10:19:5b:2b:d6:ad:c4:
35:a5:b7:99:b1:af:9b:8d:bd:39:fe:65:71:43:c6:
c1:a1:f6:bc:39:12:3d:de:32:25:46:d0:d1:38:82:
d5:bf:bb:b6:7d:b7:0b:d1:a3:a3:e1:28:c6:42:5b:
ab:ab:f6:9b:55:e8:2b:a9:27:c7:95:2d:09:e2:3f:
25:07:8c:8d:6d:ac:8b:14:03:06:b3:e0:e2:a5:61:
d5:25:ca:82:b1:23:dc:42:88:ba:08:f0:8f:5d:57:
d9:e8:07:d2:19:34:10:3e:34:ca:e0:8f:17:5a:a8:
e0:d1:f5:77:f7:c0:ca:50:8a:d0:ff:35:1a:4f:2e:
f8:98:77:46:96:9c:93:4a:a5:43:c7:08:bd:49:ee:
8b:f2:ae:0b:66:43:6b:64:a2:7e:e8:28:e7:d4:b8:
a8:04:bb:30:26:f7:ac:fd:a6:88:7e:ac:41:11:88:
e2:1e:8d:45:a3:bc:22:a2:c3:cf:08:c5:13:b0:6c:
7f:03:50:c6:a9:7c:5a:99:e5:d6:d3:1f:e0:c7:d8:
64:85:ed:2e:64:d0:17:33:b7:44:1b:16:09:11:5c:
af:2e:0e:a9:03:0d:ee:29:09:50:02:81:cf:20:40:
15:0c:15:a9:05:bd:c3:37:43:b1:32:48:9b:9f:68:
2d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FD:DA:E9:87:63:12:BA:98:AC:62:FA:F8:C7:C9:C4:E1:82:1C:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/18ad96a5-77d4-39de-9e60-6bdffaaa8de2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl
X509v3 Authority Key Identifier:
keyid:E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
sbgp-ipAddrBlock: critical
IPv4:
199.253.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:28:79:1f:05:ac:38:64:96:34:bc:af:bf:b5:6e:37:48:a0:
0c:fc:37:9b:4c:2b:27:f1:8d:30:2f:a4:28:0b:01:07:4c:70:
da:2b:63:fb:64:b1:f9:fb:fb:f2:0c:6e:be:36:1b:7c:43:f7:
50:ca:e2:f4:6b:22:98:3b:a5:2d:4c:d7:08:20:6c:74:5f:20:
58:51:58:18:ad:04:46:1b:ce:e8:2a:63:5a:6b:b1:32:ae:2b:
ce:26:68:cc:30:4d:eb:a4:7e:06:ec:3a:9c:6b:d5:0c:ef:7c:
b1:43:51:38:4b:a3:94:81:59:b5:bc:19:20:03:b0:ca:c3:01:
07:75:d3:cc:fa:a1:c7:18:f8:e2:a1:7e:0a:c2:49:51:4f:54:
84:25:5f:0b:24:97:d6:d5:64:b1:77:1e:be:de:36:95:29:c4:
8b:eb:29:a5:f5:69:4c:9e:01:a2:fc:05:a6:8d:92:71:ad:e1:
41:88:04:7a:74:be:74:50:28:a3:62:cd:4d:7f:81:47:88:a3:
c2:54:a3:21:15:c2:13:56:c1:a2:da:da:fb:4e:6a:d6:d9:2c:
c4:bd:33:34:56:f0:fa:9c:a1:75:be:72:2a:0c:d0:dc:4a:86:
b9:62:76:0f:29:83:c9:b6:ab:d7:b0:bf:e4:b8:ed:fe:5f:d2:
2f:e0:c8:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeAJlBMKruL76Nn1YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmNjZWY3YTYtYjhkYi00NzUzLWI3MWYtZGQyZTQwZDU4
MDgxMB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk
OGUzZDA4NTMtMjBkMi00MDdmLTkzNTUtNTcxNGQ4ODBhNWNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIEjEpkHLhAZWyvWrcQ1pbeZsa+bjb05/mVx
Q8bBofa8ORI93jIlRtDROILVv7u2fbcL0aOj4SjGQlurq/abVegrqSfHlS0J4j8l
B4yNbayLFAMGs+DipWHVJcqCsSPcQoi6CPCPXVfZ6AfSGTQQPjTK4I8XWqjg0fV3
98DKUIrQ/zUaTy74mHdGlpyTSqVDxwi9Se6L8q4LZkNrZKJ+6Cjn1LioBLswJves
/aaIfqxBEYjiHo1Fo7wiosPPCMUTsGx/A1DGqXxameXW0x/gx9hkhe0uZNAXM7dE
GxYJEVyvLg6pAw3uKQlQAoHPIEAVDBWpBb3DN0OxMkibn2gttQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC792umHYxK6mKxi+vjHycThghw1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yY2Nl
ZjdhNi1iOGRiLTQ3NTMtYjcxZi1kZDJlNDBkNTgwODEvMThhZDk2YTUtNzdkNC0z
OWRlLTllNjAtNmJkZmZhYWE4ZGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmNjZWY3YTYtYjhkYi00NzUzLWI3
MWYtZGQyZTQwZDU4MDgxLzJjY2VmN2E2LWI4ZGItNDc1My1iNzFmLWRkMmU0MGQ1
ODA4MS5jcmwwHwYDVR0jBBgwFoAU4sLPhJNqy7R9ZhIEXBOI5yPj8J0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yY2NlZjdhNi1iOGRiLTQ3NTMtYjcxZi1kZDJl
NDBkNTgwODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx/0cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABMoeR8FrDhkljS8r7+1bjdIoAz8N5tMKyfxjTAvpCgLAQdMcNorY/tk
sfn7+/IMbr42G3xD91DK4vRrIpg7pS1M1wggbHRfIFhRWBitBEYbzugqY1prsTKu
K84maMwwTeukfgbsOpxr1QzvfLFDUThLo5SBWbW8GSADsMrDAQd108z6occY+OKh
fgrCSVFPVIQlXwskl9bVZLF3Hr7eNpUpxIvrKaX1aUyeAaL8BaaNknGt4UGIBHp0
vnRQKKNizU1/gUeIo8JUoyEVwhNWwaLa2vtOatbZLMS9MzRW8PqcoXW+cioM0NxK
hrlidg8pg8m2q9ewv+S47f5f0i/gyF8=
-----END CERTIFICATE-----
Generated at Wed Dec 25 19:04:17 2024 by rpki-client on console.sobornost.net