Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6653704b-dbc1-4715-bba6-8fb7a6c4d910/8ff1655e-292d-3e62-ad6a-dbc6eaa1a8eb.roa
File: 8ff1655e-292d-3e62-ad6a-dbc6eaa1a8eb.roa (raw, json)
Hash identifier: B49HpC6dqACEBSVjhEC5SAm/ffmOgxqivUo1gQUPQKQ=
Subject key identifier: 9E:D3:6B:B8:B2:00:82:82:97:D4:99:D5:D7:80:6F:85:43:9F:96:82
Certificate issuer: /CN=6653704b-dbc1-4715-bba6-8fb7a6c4d910
Certificate serial: 010D0C9F432858487325B4746BA3A1528D166D00
Authority key identifier: 53:08:3B:83:C5:0C:C7:18:C1:2D:0A:A0:BB:A1:53:5E:A2:69:05:A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6653704b-dbc1-4715-bba6-8fb7a6c4d910.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6653704b-dbc1-4715-bba6-8fb7a6c4d910/8ff1655e-292d-3e62-ad6a-dbc6eaa1a8eb.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 18474
IP address blocks: 207.90.248.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:b4:74:6b:a3:a1:52:8d:16:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6653704b-dbc1-4715-bba6-8fb7a6c4d910
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=5ed29c88-0725-495f-aadb-ee4c46a323f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:66:59:de:1b:67:92:ef:1a:0d:a5:78:89:b2:
9e:7f:24:48:17:02:09:ac:0b:cb:11:95:07:8f:1b:
74:1a:e3:5f:d4:90:e0:a4:38:b7:e9:6a:7f:a4:a3:
a4:e4:91:54:d3:bc:a2:be:1b:f2:69:8d:42:d1:3f:
f3:29:ff:44:b0:a8:be:4c:92:0b:99:ab:5a:e0:94:
3f:a3:83:b9:8e:fb:84:45:82:ac:a6:25:58:f5:f2:
ff:c7:98:c7:8d:95:09:cb:32:b6:1f:e0:5f:9f:50:
f3:91:a4:0c:e5:9e:7f:bf:75:20:15:93:7c:74:33:
ff:dd:68:44:f9:c8:a9:50:28:9b:5b:4f:2c:cc:61:
e8:38:a7:e6:f2:6b:5a:4a:4c:d2:11:94:38:d3:f5:
8f:8a:52:8b:91:47:88:d3:29:86:fc:e2:9d:9a:54:
e1:53:f1:dc:ba:09:5e:67:a5:5c:52:46:51:6b:7f:
8a:f7:16:e8:4c:2a:bf:39:48:53:12:0d:d5:ba:7d:
1e:e0:93:22:41:1e:ec:47:85:1a:95:bb:34:37:a1:
d8:59:74:85:08:b0:26:2a:ea:9b:ac:f2:96:d2:b2:
99:eb:34:68:6e:66:c6:b3:f9:ca:95:fd:21:b8:53:
45:4d:f3:d3:e9:ff:7a:12:16:81:cb:11:21:7e:e6:
4d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D3:6B:B8:B2:00:82:82:97:D4:99:D5:D7:80:6F:85:43:9F:96:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6653704b-dbc1-4715-bba6-8fb7a6c4d910/8ff1655e-292d-3e62-ad6a-dbc6eaa1a8eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6653704b-dbc1-4715-bba6-8fb7a6c4d910/6653704b-dbc1-4715-bba6-8fb7a6c4d910.crl
X509v3 Authority Key Identifier:
keyid:53:08:3B:83:C5:0C:C7:18:C1:2D:0A:A0:BB:A1:53:5E:A2:69:05:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6653704b-dbc1-4715-bba6-8fb7a6c4d910.cer
sbgp-ipAddrBlock: critical
IPv4:
207.90.248.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:f4:9d:b0:ef:66:d6:ff:c0:8c:2a:31:7b:bc:a4:e5:e8:a4:
7e:75:21:c1:5e:24:e2:46:3c:2f:d9:54:77:1c:d2:63:40:e1:
1c:8b:20:c3:a0:96:7a:dd:9b:b5:d9:72:18:03:ec:19:3a:9b:
21:78:5d:26:0a:57:90:34:64:ac:1b:02:f3:4b:b5:1e:4d:c5:
ae:a0:c6:dc:11:32:f8:8e:52:fc:cb:e2:20:3c:a5:a8:2b:35:
75:ff:66:6d:98:f0:73:9b:ac:eb:ba:0c:7d:d6:dd:56:83:e8:
c3:4f:65:d5:0d:2a:cf:4b:40:5a:98:72:0b:8d:06:d7:a6:4b:
8e:bb:3f:a8:9d:42:55:66:37:81:4c:c3:f7:2a:15:3b:f3:9a:
4b:c9:c4:2f:8f:4c:62:8b:e8:71:0e:67:fa:f5:81:4a:ff:00:
9c:c8:e7:86:24:ac:f5:b9:f3:bd:97:49:cc:5a:82:0f:75:90:
53:28:37:24:61:e2:73:ff:b6:1e:74:66:53:7b:d6:0a:ce:79:
e7:42:ed:cb:1d:1b:bc:29:6d:72:c6:47:17:30:53:ef:06:09:
60:01:15:0b:bc:bf:74:ce:b4:df:69:68:89:b9:f4:c9:53:e2:
cf:bd:4e:81:94:24:7b:4c:02:54:02:f7:89:8a:6f:8e:3d:25:
b8:68:f0:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhzJbR0a6OhUo0WbQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjY1MzcwNGItZGJjMS00NzE1LWJiYTYtOGZiN2E2YzRk
OTEwMB4XDTI1MDEwNjAyMDA0MFoXDTI1MDQwNjAxMDA0MFowLzEtMCsGA1UEAxMk
NWVkMjljODgtMDcyNS00OTVmLWFhZGItZWU0YzQ2YTMyM2Y3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2ZZ3htnku8aDaV4ibKefyRIFwIJrAvLEZUH
jxt0GuNf1JDgpDi36Wp/pKOk5JFU07yivhvyaY1C0T/zKf9EsKi+TJILmata4JQ/
o4O5jvuERYKspiVY9fL/x5jHjZUJyzK2H+Bfn1DzkaQM5Z5/v3UgFZN8dDP/3WhE
+cipUCibW08szGHoOKfm8mtaSkzSEZQ40/WPilKLkUeI0ymG/OKdmlThU/Hcugle
Z6VcUkZRa3+K9xboTCq/OUhTEg3Vun0e4JMiQR7sR4Ualbs0N6HYWXSFCLAmKuqb
rPKW0rKZ6zRobmbGs/nKlf0huFNFTfPT6f96EhaByxEhfuZNiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ7Ta7iyAIKCl9SZ1deAb4VDn5aCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NjUz
NzA0Yi1kYmMxLTQ3MTUtYmJhNi04ZmI3YTZjNGQ5MTAvOGZmMTY1NWUtMjkyZC0z
ZTYyLWFkNmEtZGJjNmVhYTFhOGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjY1MzcwNGItZGJjMS00NzE1LWJi
YTYtOGZiN2E2YzRkOTEwLzY2NTM3MDRiLWRiYzEtNDcxNS1iYmE2LThmYjdhNmM0
ZDkxMC5jcmwwHwYDVR0jBBgwFoAUUwg7g8UMxxjBLQqgu6FTXqJpBaEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82NjUzNzA0Yi1kYmMxLTQ3MTUtYmJhNi04ZmI3
YTZjNGQ5MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz1r4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABr0nbDvZtb/wIwqMXu8pOXopH51IcFeJOJGPC/ZVHcc0mNA4RyLIMOg
lnrdm7XZchgD7Bk6myF4XSYKV5A0ZKwbAvNLtR5Nxa6gxtwRMviOUvzL4iA8pagr
NXX/Zm2Y8HObrOu6DH3W3VaD6MNPZdUNKs9LQFqYcguNBtemS467P6idQlVmN4FM
w/cqFTvzmkvJxC+PTGKL6HEOZ/r1gUr/AJzI54YkrPW5872XScxagg91kFMoNyRh
4nP/th50ZlN71grOeedC7csdG7wpbXLGRxcwU+8GCWABFQu8v3TOtN9paIm59MlT
4s+9ToGUJHtMAlQC94mKb449Jbho8JU=
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:41 2025 by rpki-client