Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/afaed4c9-2c63-3911-91f1-a89e1481c69a.roa
File: afaed4c9-2c63-3911-91f1-a89e1481c69a.roa (raw, json)
Hash identifier: TBEb28vWPS3VzBsNhbWCn1hpd07Z5Am7YfyoPX1jIkg=
Subject key identifier: AF:8D:58:6A:02:6E:F4:64:F8:C9:57:45:9B:37:F0:67:7E:D9:5C:01
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F43285847FB1A276DB02278F173E45480
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/afaed4c9-2c63-3911-91f1-a89e1481c69a.roa
Signing time: Sun 24 Nov 2024 02:00:27 +0000
ROA not before: Sun 24 Nov 2024 02:00:27 +0000
ROA not after: Sat 22 Feb 2025 02:00:27 +0000
asID: 64286
IP address blocks: 173.239.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:1a:27:6d:b0:22:78:f1:73:e4:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Nov 24 02:00:27 2024 GMT
Not After : Feb 22 02:00:27 2025 GMT
Subject: CN=6bd2e3f0-8589-4624-a019-704363d7ed8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3f:19:66:af:84:40:d7:73:69:ca:26:97:d7:
0d:c8:e7:70:82:32:96:59:f3:c4:4e:b0:b5:85:e9:
52:61:bc:91:77:fc:6f:b9:17:01:f3:71:0b:46:2e:
e1:b1:81:db:95:14:d9:54:6f:21:61:af:00:75:19:
b8:57:54:1c:2a:05:2f:bf:54:05:84:f0:2c:02:24:
dd:0b:54:55:6f:a9:84:33:49:8e:e1:8c:8a:3c:40:
3e:d1:a6:54:9a:73:38:1b:27:04:41:4d:4b:2a:13:
71:07:2c:b9:85:c0:e3:56:28:4d:91:58:14:37:fa:
c7:e2:e2:79:9f:5d:0c:fc:85:9f:d1:13:24:99:b3:
3a:09:6d:fc:1a:69:9c:3d:f2:f0:9f:e4:be:b2:7b:
b0:ec:bd:c9:a3:37:d8:7a:07:11:b9:fa:19:99:d7:
86:c1:3c:0c:ca:d0:ec:b4:d3:71:59:88:03:96:42:
f6:77:11:91:af:3a:8b:4e:38:a6:94:5d:ac:40:4f:
40:7c:7b:27:b9:39:09:40:82:2a:f7:e1:9a:ae:dc:
bd:93:be:d9:b5:26:4a:e2:fb:9a:82:86:b4:f0:8a:
89:c4:44:e2:59:7f:f2:9c:63:8f:af:1b:7c:67:75:
d1:cf:43:21:26:1a:57:38:d4:2e:5b:0e:dc:40:03:
57:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8D:58:6A:02:6E:F4:64:F8:C9:57:45:9B:37:F0:67:7E:D9:5C:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/afaed4c9-2c63-3911-91f1-a89e1481c69a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv4:
173.239.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:ed:b0:46:6d:2d:af:a3:f4:3d:34:01:48:a5:82:c0:20:83:
35:82:14:cf:f3:42:dc:de:9e:24:38:40:d9:9f:c1:2f:8f:24:
66:7d:b0:af:01:63:bb:83:54:9c:5c:e4:d5:04:36:5f:8c:23:
51:50:b8:a9:25:2f:3a:83:a5:ca:9e:9f:f9:cc:b8:76:9c:29:
17:5a:40:e4:e7:3e:9c:95:e0:62:a5:c3:2d:52:cb:28:a9:6f:
0c:9d:f4:06:9f:24:b3:97:a7:1e:51:83:70:26:b1:18:d4:f5:
52:0f:4d:6c:e7:4f:0c:54:07:25:df:16:73:60:d7:bb:c5:1b:
14:de:42:60:26:f6:7f:59:e1:8b:90:75:95:c6:dd:09:30:de:
d4:7a:10:53:3e:cb:56:38:48:fb:81:59:c3:97:3a:a4:60:e4:
d9:30:c2:6d:9b:4b:14:8d:38:c6:19:d7:48:8b:74:c1:24:37:
38:b1:a7:65:90:db:1a:92:12:bc:f7:75:8f:cb:3e:3b:23:26:
77:b5:96:c2:ae:af:f6:52:38:d8:eb:1e:83:cd:fe:27:44:11:
31:f3:0c:3e:65:d7:00:58:42:38:2d:f8:3d:38:38:65:35:08:
15:1e:3b:6b:6d:3c:f3:d2:24:8b:b9:5f:84:a7:51:27:78:cd:
81:58:a4:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf7GidtsCJ48XPkVIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx
NzNhMB4XDTI0MTEyNDAyMDAyN1oXDTI1MDIyMjAyMDAyN1owLzEtMCsGA1UEAxMk
NmJkMmUzZjAtODU4OS00NjI0LWEwMTktNzA0MzYzZDdlZDhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhT8ZZq+EQNdzacoml9cNyOdwgjKWWfPETrC1
helSYbyRd/xvuRcB83ELRi7hsYHblRTZVG8hYa8AdRm4V1QcKgUvv1QFhPAsAiTd
C1RVb6mEM0mO4YyKPEA+0aZUmnM4GycEQU1LKhNxByy5hcDjVihNkVgUN/rH4uJ5
n10M/IWf0RMkmbM6CW38GmmcPfLwn+S+snuw7L3JozfYegcRufoZmdeGwTwMytDs
tNNxWYgDlkL2dxGRrzqLTjimlF2sQE9AfHsnuTkJQIIq9+Garty9k77ZtSZK4vua
goa08IqJxETiWX/ynGOPrxt8Z3XRz0MhJhpXONQuWw7cQANXvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK+NWGoCbvRk+MlXRZs38Gd+2VwBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx
ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvYWZhZWQ0YzktMmM2My0z
OTExLTkxZjEtYTg5ZTE0ODFjNjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh
M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm
MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk
MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAELtsEZtLa+j9D00AUilgsAggzWCFM/zQtzeniQ4QNmfwS+PJGZ9sK8B
Y7uDVJxc5NUENl+MI1FQuKklLzqDpcqen/nMuHacKRdaQOTnPpyV4GKlwy1Syyip
bwyd9AafJLOXpx5Rg3AmsRjU9VIPTWznTwxUByXfFnNg17vFGxTeQmAm9n9Z4YuQ
dZXG3Qkw3tR6EFM+y1Y4SPuBWcOXOqRg5Nkwwm2bSxSNOMYZ10iLdMEkNzixp2WQ
2xqSErz3dY/LPjsjJne1lsKur/ZSONjrHoPN/idEETHzDD5l1wBYQjgt+D04OGU1
CBUeO2ttPPPSJIu5X4SnUSd4zYFYpFY=
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:07:19 2025 by rpki-client