Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/8996dad6-7ce1-3a35-8d75-51a7259238b7.roa
File: 8996dad6-7ce1-3a35-8d75-51a7259238b7.roa (raw, json)
Hash identifier: LS5cY4EmnRF/Z7+xb4Y+4SNQFvXlxWpa8xQjsHxerXc=
Subject key identifier: F6:1A:8C:2A:7A:1B:D3:01:75:F8:E1:7B:D4:BD:DE:C9:25:A6:2E:97
Certificate issuer: /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial: 010D0C9F432858486D905C7980C53C5513BDA200
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/8996dad6-7ce1-3a35-8d75-51a7259238b7.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 48842
IP address blocks: 173.199.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:5c:79:80:c5:3c:55:13:bd:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=a7ab18f1-4a35-46ae-a6f6-a4960bc2fed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c7:bd:15:18:5b:fd:da:42:9b:41:0e:a4:0b:
76:c5:e5:56:fe:d1:fa:8e:2a:fa:f7:80:76:75:ac:
86:aa:15:d5:b1:53:b9:e3:5d:03:ee:2d:f5:af:db:
43:c4:e4:1d:a6:b5:27:3a:92:50:75:97:5e:8b:53:
03:36:f5:6f:6d:17:fb:58:94:d9:93:1f:9e:31:18:
73:16:97:37:1d:17:3f:0a:50:28:e3:aa:ae:b7:73:
ab:a1:79:0c:2e:1c:4c:8a:2e:f9:4e:80:12:24:49:
60:ac:5a:4c:89:27:e8:42:c7:3d:bf:f7:8b:0b:50:
c3:7e:5a:36:8a:94:89:65:0e:e6:48:ac:f8:3e:4a:
4f:4f:ef:d2:7f:53:13:54:1c:8e:ca:f4:87:4b:b4:
56:2c:9c:94:97:ea:2f:69:3c:57:e8:49:4b:d2:7b:
87:a2:fb:f5:35:2f:27:e3:38:dd:bc:a3:d6:c5:15:
90:a3:21:14:f5:a4:e0:8b:81:e4:56:b5:2e:31:67:
41:86:a2:fe:96:c5:cf:99:c5:ee:05:7d:9f:0f:16:
21:96:fd:13:27:6c:ba:e8:f7:d1:81:9e:8b:14:ce:
08:9c:42:bd:d4:fc:ab:90:55:0d:a6:92:24:1c:05:
4a:f8:aa:d8:a1:83:6c:73:36:f8:c5:e6:3c:ef:0f:
da:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1A:8C:2A:7A:1B:D3:01:75:F8:E1:7B:D4:BD:DE:C9:25:A6:2E:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/8996dad6-7ce1-3a35-8d75-51a7259238b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
X509v3 Authority Key Identifier:
keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
sbgp-ipAddrBlock: critical
IPv4:
173.199.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:76:f5:b2:2a:41:c9:d2:b2:6a:fb:b9:2e:60:f4:80:25:8c:
61:e4:63:f9:da:ee:c9:d2:8d:9e:b7:24:0a:33:76:e7:52:f0:
67:b9:73:da:99:ee:ce:27:b3:c0:2b:7e:8a:1b:f0:6c:9b:08:
42:94:bd:c0:0e:37:3a:37:fa:7f:b3:8f:c0:7d:7e:2b:a4:82:
28:82:a3:ad:c8:61:2c:11:09:f6:fc:53:b9:54:dc:d2:32:16:
66:03:5e:ac:72:de:8b:cb:56:2f:39:0d:6b:42:6d:7a:8e:96:
04:36:db:af:93:23:6a:f3:13:fa:a1:0f:fc:89:9e:2d:78:4a:
64:84:31:31:f3:a8:bc:d8:2d:af:d2:d7:4c:bc:63:fe:11:17:
7c:20:a5:41:86:5d:b5:31:2c:ab:20:bf:1d:e1:03:b9:88:a1:
75:f3:6a:5a:39:a2:6a:ed:df:b8:58:2b:62:66:39:6a:21:42:
94:36:a0:b5:46:9c:82:07:a5:9d:91:d1:73:fa:1c:4c:ba:7b:
d4:bb:b1:48:34:4f:72:e1:d2:52:66:9f:1e:75:73:01:f6:84:
a6:93:54:4a:fb:32:76:4e:ac:53:99:6f:59:05:7e:04:9f:a2:
fd:75:b8:fe:40:aa:c0:fc:e3:fa:e1:53:e5:9c:c5:a1:c3:b0:
d2:03:7c:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkFx5gMU8VRO9ogAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjM4MTc3MzYtN2U1ZS00NzQwLThlZTEtYWM2ZjIzMTdm
MDhkMB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk
YTdhYjE4ZjEtNGEzNS00NmFlLWE2ZjYtYTQ5NjBiYzJmZWQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8e9FRhb/dpCm0EOpAt2xeVW/tH6jir694B2
dayGqhXVsVO5410D7i31r9tDxOQdprUnOpJQdZdei1MDNvVvbRf7WJTZkx+eMRhz
Fpc3HRc/ClAo46qut3OroXkMLhxMii75ToASJElgrFpMiSfoQsc9v/eLC1DDflo2
ipSJZQ7mSKz4PkpPT+/Sf1MTVByOyvSHS7RWLJyUl+ovaTxX6ElL0nuHovv1NS8n
4zjdvKPWxRWQoyEU9aTgi4HkVrUuMWdBhqL+lsXPmcXuBX2fDxYhlv0TJ2y66PfR
gZ6LFM4InEK91PyrkFUNppIkHAVK+KrYoYNsczb4xeY87w/aOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPYajCp6G9MBdfjhe9S93sklpi6XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82Mzgx
NzczNi03ZTVlLTQ3NDAtOGVlMS1hYzZmMjMxN2YwOGQvODk5NmRhZDYtN2NlMS0z
YTM1LThkNzUtNTFhNzI1OTIzOGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjM4MTc3MzYtN2U1ZS00NzQwLThl
ZTEtYWM2ZjIzMTdmMDhkLzYzODE3NzM2LTdlNWUtNDc0MC04ZWUxLWFjNmYyMzE3
ZjA4ZC5jcmwwHwYDVR0jBBgwFoAUtfT/gcvgoCb1EjWns0Rz0IlP/HcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82MzgxNzczNi03ZTVlLTQ3NDAtOGVlMS1hYzZm
MjMxN2YwOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcdDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI129bIqQcnSsmr7uS5g9IAljGHkY/na7snSjZ63JAozdudS8Ge5c9qZ
7s4ns8Arfoob8GybCEKUvcAONzo3+n+zj8B9fiukgiiCo63IYSwRCfb8U7lU3NIy
FmYDXqxy3ovLVi85DWtCbXqOlgQ226+TI2rzE/qhD/yJni14SmSEMTHzqLzYLa/S
10y8Y/4RF3wgpUGGXbUxLKsgvx3hA7mIoXXzalo5omrt37hYK2JmOWohQpQ2oLVG
nIIHpZ2R0XP6HEy6e9S7sUg0T3Lh0lJmnx51cwH2hKaTVEr7MnZOrFOZb1kFfgSf
ov11uP5AqsD84/rhU+WcxaHDsNIDfLk=
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:19:23 2025 by rpki-client