Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/2f4d68a2-02ee-3b78-97bd-f8cdbd0f6232.roa
File: 2f4d68a2-02ee-3b78-97bd-f8cdbd0f6232.roa (raw, json)
Hash identifier: uR7ytvBUoHn541HBIBcLk32Lg3w/WvkggzpvcCvVT1c=
Subject key identifier: 3E:31:48:0E:BD:4A:EE:1F:28:72:83:14:2E:AF:84:A2:F2:7E:85:0E
Certificate issuer: /CN=397724ba-b516-4bac-893a-fcaae9e60f35
Certificate serial: 010D0C9F43285849244E8132FEA77ECBBA654CA0
Authority key identifier: 1D:42:77:C5:31:A9:37:CC:E7:05:AD:CF:2B:3B:6B:3F:B7:EA:2C:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/2f4d68a2-02ee-3b78-97bd-f8cdbd0f6232.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 11686
IP address blocks: 96.4.0.0/15 maxlen: 32
207.191.176.0/20 maxlen: 32
2610:128::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:81:32:fe:a7:7e:cb:ba:65:4c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397724ba-b516-4bac-893a-fcaae9e60f35
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=e6320b5b-a795-4dd1-aa69-cc62408a5c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d5:83:09:98:00:ae:42:0d:49:80:f0:77:c2:
63:89:bf:4b:f8:27:9d:d1:da:1b:d6:c4:3e:d6:87:
ab:98:cf:29:13:d1:a6:49:1a:b0:49:94:62:18:4e:
e9:94:48:76:07:45:6c:58:04:91:3f:da:f8:fe:cb:
95:36:f1:d5:d7:9c:5c:a0:de:7b:05:e2:d8:1d:22:
59:80:72:85:98:fd:be:63:37:4e:ba:39:c3:2a:ca:
20:de:b7:6d:41:2a:e6:8f:ee:cc:24:72:0e:7b:2e:
89:d2:e2:e8:41:7d:94:03:18:23:14:24:a1:e4:fc:
1a:c9:45:bc:22:96:39:d2:76:c0:0b:48:c9:c9:db:
05:e8:fe:47:41:9f:bf:09:d2:e4:8d:14:20:9c:ec:
04:09:97:2b:67:d4:12:33:ee:d9:a8:0a:b5:4c:c8:
1e:f5:53:60:7e:6e:9f:7f:ca:bf:1f:02:6f:64:42:
79:54:6d:ac:c2:da:f7:0a:43:33:24:25:f1:23:eb:
71:d0:3a:3c:82:6d:f2:4d:08:cf:03:ad:87:2b:be:
8d:f8:e7:28:35:c9:8b:79:52:c1:cd:3c:33:8a:8e:
67:70:14:41:0d:77:e8:fb:e1:43:5c:f6:9b:5c:7a:
33:40:09:75:2a:e7:a0:1f:10:4b:f1:e9:ac:af:cc:
4a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:31:48:0E:BD:4A:EE:1F:28:72:83:14:2E:AF:84:A2:F2:7E:85:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/2f4d68a2-02ee-3b78-97bd-f8cdbd0f6232.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/397724ba-b516-4bac-893a-fcaae9e60f35.crl
X509v3 Authority Key Identifier:
keyid:1D:42:77:C5:31:A9:37:CC:E7:05:AD:CF:2B:3B:6B:3F:B7:EA:2C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35.cer
sbgp-ipAddrBlock: critical
IPv4:
96.4.0.0/15
207.191.176.0/20
IPv6:
2610:128::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:c2:8a:20:e6:49:82:33:d8:48:d3:34:78:7c:c7:38:01:df:
f5:17:17:dc:3f:7c:4a:38:aa:68:66:d8:67:2f:0f:1d:c9:05:
7b:3a:7c:3b:11:3c:94:92:0a:6d:d2:af:ed:be:d3:fd:0b:be:
f7:ee:d7:63:e0:b9:2d:d0:fc:16:16:90:11:c5:50:13:ad:25:
e9:1e:84:8c:ee:38:74:bd:8b:6a:16:7d:d9:7b:c8:b7:8e:8d:
88:cf:fa:e9:83:c7:c0:67:d5:a0:ca:ec:9d:a1:0d:2f:6e:47:
56:ca:66:7c:bd:7b:40:66:04:0c:34:66:7a:72:a7:01:87:05:
cd:18:6e:36:f9:1d:f5:a4:74:03:fd:b5:76:4f:d8:68:30:b6:
af:f9:5b:e4:10:d6:2a:bd:62:71:1a:f1:b6:2a:03:6f:62:40:
2b:5f:5c:6b:d5:40:cf:27:86:f0:dc:2b:3c:67:53:db:2b:e1:
aa:6c:19:72:ec:75:96:22:b3:37:9c:ea:7d:cd:18:37:dc:70:
a4:f0:79:15:e7:08:96:b9:e9:53:e2:2d:90:29:ed:d6:8a:d7:
43:6a:80:f1:e0:48:27:b5:77:a1:c4:23:ac:af:3a:2b:97:f3:
a3:53:96:6c:53:03:ce:61:c4:21:2c:e8:da:96:d9:b6:a4:d7:
bc:53:44:d4
-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEkkToEy/qd+y7plTKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk3NzI0YmEtYjUxNi00YmFjLTg5M2EtZmNhYWU5ZTYw
ZjM1MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk
ZTYzMjBiNWItYTc5NS00ZGQxLWFhNjktY2M2MjQwOGE1YzAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdWDCZgArkINSYDwd8Jjib9L+Ced0dob1sQ+
1oermM8pE9GmSRqwSZRiGE7plEh2B0VsWASRP9r4/suVNvHV15xcoN57BeLYHSJZ
gHKFmP2+YzdOujnDKsog3rdtQSrmj+7MJHIOey6J0uLoQX2UAxgjFCSh5PwayUW8
IpY50nbAC0jJydsF6P5HQZ+/CdLkjRQgnOwECZcrZ9QSM+7ZqAq1TMge9VNgfm6f
f8q/HwJvZEJ5VG2swtr3CkMzJCXxI+tx0Do8gm3yTQjPA62HK76N+OcoNcmLeVLB
zTwzio5ncBRBDXfo++FDXPabXHozQAl1KuegHxBL8emsr8xKHwIDAQABo4IDaTCC
A2UwHQYDVR0OBBYEFD4xSA69Su4fKHKDFC6vhKLyfoUOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTc3
MjRiYS1iNTE2LTRiYWMtODkzYS1mY2FhZTllNjBmMzUvMmY0ZDY4YTItMDJlZS0z
Yjc4LTk3YmQtZjhjZGJkMGY2MjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk3NzI0YmEtYjUxNi00YmFjLTg5
M2EtZmNhYWU5ZTYwZjM1LzM5NzcyNGJhLWI1MTYtNGJhYy04OTNhLWZjYWFlOWU2
MGYzNS5jcmwwHwYDVR0jBBgwFoAUHUJ3xTGpN8znBa3PKztrP7fqLJowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTc3MjRiYS1iNTE2LTRiYWMtODkzYS1mY2Fh
ZTllNjBmMzUuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjARBAIAATALAwMBYAQDBATP
v7AwDQQCAAIwBwMFACYQASgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAV8KKIOZJgjPYSNM0eHzHOAHf9RcX
3D98SjiqaGbYZy8PHckFezp8OxE8lJIKbdKv7b7T/Qu+9+7XY+C5LdD8FhaQEcVQ
E60l6R6EjO44dL2LahZ92XvIt46NiM/66YPHwGfVoMrsnaENL25HVspmfL17QGYE
DDRmenKnAYcFzRhuNvkd9aR0A/21dk/YaDC2r/lb5BDWKr1icRrxtioDb2JAK19c
a9VAzyeG8NwrPGdT2yvhqmwZcux1liKzN5zqfc0YN9xwpPB5FecIlrnpU+ItkCnt
1orXQ2qA8eBIJ7V3ocQjrK86K5fzo1OWbFMDzmHEISzo2pbZtqTXvFNE1A==
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:52 2025 by rpki-client on console.sobornost.net