Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/b864f624-fc3e-3a9d-ac37-a2dee4565c20.roa
File: b864f624-fc3e-3a9d-ac37-a2dee4565c20.roa (raw, json)
Hash identifier: ALFkJ4jhkGFRaJN2w8pUjW3ezzhtg2CkYOdDCVViuBc=
Subject key identifier: BD:0E:2E:1B:51:23:3F:BD:E0:DA:48:76:D9:A5:B7:B4:BF:8C:F0:BC
Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial: 010D0C9F432858481F65340028393BD0A0C33F80
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/b864f624-fc3e-3a9d-ac37-a2dee4565c20.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 9009
IP address blocks: 173.245.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:34:00:28:39:3b:d0:a0:c3:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=07f8694f-775e-40ff-bb45-0d8b0020e8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c9:2c:45:de:55:d5:4b:6c:7f:38:16:df:ce:
bd:1d:8f:c1:a0:c6:fa:60:95:99:3a:c8:2e:87:56:
e6:e3:d9:f6:4e:a1:8e:e7:57:da:60:d2:d4:0a:61:
4d:dd:80:a6:07:ba:7c:2f:ad:82:be:59:89:15:ab:
03:3e:c1:b7:bf:11:8d:66:d0:cb:8e:04:ba:cf:a5:
76:50:48:c9:be:b6:51:68:ad:b3:93:b7:c4:97:1c:
08:78:96:40:08:11:57:be:cd:d1:73:53:b3:a5:e1:
5c:44:f9:a9:8e:66:59:12:a1:41:8d:34:0f:03:5c:
64:80:7c:17:ba:fa:70:8f:3b:51:3c:7b:0a:7b:ae:
75:37:21:7a:28:96:4d:71:ed:56:b1:54:66:97:8f:
45:79:d1:87:e6:20:48:70:69:8e:7d:23:db:e9:af:
09:03:02:d1:89:c5:f9:7c:17:8b:d5:de:50:3a:ff:
e1:a2:0e:1e:61:3b:bc:a4:f8:df:5a:74:dc:44:b4:
c6:79:7b:80:dd:f3:2e:6b:be:97:8d:68:66:ee:4c:
00:43:da:31:c0:87:eb:a6:ae:30:dd:d6:10:85:a7:
99:f6:fa:17:b2:20:b8:16:a7:c6:03:7c:b1:e8:5c:
5b:f5:09:b0:27:8b:3a:aa:13:26:c2:e8:59:2d:13:
09:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0E:2E:1B:51:23:3F:BD:E0:DA:48:76:D9:A5:B7:B4:BF:8C:F0:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/b864f624-fc3e-3a9d-ac37-a2dee4565c20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
X509v3 Authority Key Identifier:
keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
sbgp-ipAddrBlock: critical
IPv4:
173.245.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:02:4c:69:5f:11:16:43:6e:10:c1:95:0f:b2:e8:5c:5b:bf:
22:5b:19:4d:bb:c0:37:71:76:9a:fc:83:e9:71:c7:73:84:c3:
ec:e7:c9:f4:ec:28:23:c1:2c:33:17:6f:91:ac:74:2b:c4:0d:
14:2a:85:a2:00:16:ed:23:f4:ee:02:43:dd:97:f9:70:88:a1:
79:6b:ad:96:f6:9f:dd:fb:e8:5b:b5:fd:ed:94:ef:26:21:c2:
ab:b9:1e:6f:29:52:a0:fc:60:34:90:33:36:f6:e2:16:c7:9a:
3d:84:6b:c3:d6:11:52:78:65:4c:30:c8:0f:32:fe:9d:3b:b1:
f8:68:d6:6f:06:c3:e8:13:6e:4e:c7:d8:63:84:28:cd:1e:00:
0b:4f:32:f9:3c:43:40:3c:f1:28:62:12:59:b4:e2:d1:98:d6:
37:6a:64:23:c4:a9:f5:bb:1f:4d:fb:e3:2f:6d:0d:97:95:87:
d4:6c:53:34:9d:ca:54:95:c2:49:56:cd:06:8a:03:50:9a:f5:
4d:95:e6:a5:ab:5d:d5:4c:b3:9b:4a:d6:26:3a:3e:e8:64:e2:
c3:55:2d:05:37:92:b2:ee:34:e0:f8:42:3a:27:55:28:3b:6f:
fa:c9:49:be:d2:8c:48:f4:4d:f4:d8:b1:25:6d:dc:e6:4d:8d:
f0:b4:0d:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgfZTQAKDk70KDDP4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz
OGFhMB4XDTI0MTIwNzAyMDAzOVoXDTI1MDMwNzAyMDAzOVowLzEtMCsGA1UEAxMk
MDdmODY5NGYtNzc1ZS00MGZmLWJiNDUtMGQ4YjAwMjBlOGMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMksRd5V1UtsfzgW3869HY/BoMb6YJWZOsgu
h1bm49n2TqGO51faYNLUCmFN3YCmB7p8L62CvlmJFasDPsG3vxGNZtDLjgS6z6V2
UEjJvrZRaK2zk7fElxwIeJZACBFXvs3Rc1OzpeFcRPmpjmZZEqFBjTQPA1xkgHwX
uvpwjztRPHsKe651NyF6KJZNce1WsVRml49FedGH5iBIcGmOfSPb6a8JAwLRicX5
fBeL1d5QOv/hog4eYTu8pPjfWnTcRLTGeXuA3fMua76XjWhm7kwAQ9oxwIfrpq4w
3dYQhaeZ9voXsiC4FqfGA3yx6Fxb9QmwJ4s6qhMmwuhZLRMJzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL0OLhtRIz+94NpIdtmlt7S/jPC8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk
MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvYjg2NGY2MjQtZmMzZS0z
YTlkLWFjMzctYTJkZWU0NTY1YzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2
ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy
MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4
ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfXPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB4CTGlfERZDbhDBlQ+y6FxbvyJbGU27wDdxdpr8g+lxx3OEw+znyfTs
KCPBLDMXb5GsdCvEDRQqhaIAFu0j9O4CQ92X+XCIoXlrrZb2n9376Fu1/e2U7yYh
wqu5Hm8pUqD8YDSQMzb24hbHmj2Ea8PWEVJ4ZUwwyA8y/p07sfho1m8Gw+gTbk7H
2GOEKM0eAAtPMvk8Q0A88ShiElm04tGY1jdqZCPEqfW7H0374y9tDZeVh9RsUzSd
ylSVwklWzQaKA1Ca9U2V5qWrXdVMs5tK1iY6Puhk4sNVLQU3krLuNOD4QjonVSg7
b/rJSb7SjEj0TfTYsSVt3OZNjfC0DXw=
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:49:11 2025 by rpki-client