Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/c3cfbabb-4055-3d8f-87e9-339a22f4631c.roa
File: c3cfbabb-4055-3d8f-87e9-339a22f4631c.roa (raw, json)
Hash identifier: /al1Fje5+U64mkDamuW9S38/FFJTcRPiy0lsU0voOTE=
Subject key identifier: C2:97:CD:E6:E4:CE:B1:A0:CB:BA:96:B2:A1:59:E2:0D:BE:04:86:7E
Certificate issuer: /CN=71d08692-7de1-4973-b7ae-5a0397e6b60c
Certificate serial: 010D0C9F4328584840E558F2C380F604A93EF380
Authority key identifier: B1:8E:91:C4:9C:F2:47:68:BE:22:AA:7E:ED:92:C0:91:4E:BD:F7:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/c3cfbabb-4055-3d8f-87e9-339a22f4631c.roa
Signing time: Thu 19 Dec 2024 02:00:39 +0000
ROA not before: Thu 19 Dec 2024 02:00:39 +0000
ROA not after: Wed 19 Mar 2025 01:00:39 +0000
asID: 398803
IP address blocks: 136.175.44.0/22 maxlen: 24
2602:fd08::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:e5:58:f2:c3:80:f6:04:a9:3e:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d08692-7de1-4973-b7ae-5a0397e6b60c
Validity
Not Before: Dec 19 02:00:39 2024 GMT
Not After : Mar 19 01:00:39 2025 GMT
Subject: CN=1eaa4300-8e8c-4018-a58c-4bec0877de64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3c:74:a9:ec:b8:5a:5a:68:7c:d7:f1:15:e6:
f8:29:6b:ec:bb:ec:0e:1f:cf:ec:02:25:e9:10:3f:
cd:5f:be:17:85:f1:2f:1c:d0:40:ae:75:32:99:34:
19:72:ca:d1:e9:96:f6:8e:d1:48:85:4a:d6:f1:02:
17:31:e8:c8:8b:38:74:80:c4:0b:19:66:9c:91:85:
40:d1:32:97:41:1a:e0:44:ad:14:dd:93:e8:06:7e:
32:be:98:8c:41:4b:da:55:49:ab:3b:ae:89:74:72:
03:53:9b:7a:bb:ab:4c:36:b2:cb:e4:95:d9:77:05:
90:fc:4f:29:7b:e7:ce:35:88:08:99:16:3b:00:77:
d5:fb:f5:f2:a4:92:6d:d7:9a:fb:fd:c5:ae:93:6e:
1f:95:8d:32:48:35:d7:f1:9c:9b:d4:d6:91:dc:5c:
8c:b7:4f:1d:85:a7:43:c9:a4:3e:bf:ed:8e:9b:28:
64:28:85:69:a5:17:88:5c:8a:a8:34:f8:22:66:95:
44:79:8e:89:55:12:65:94:6b:74:64:9f:0d:d5:b2:
57:4c:a8:e7:ff:9f:bd:8a:2e:6d:a8:40:bf:3f:a4:
e6:eb:07:71:0b:6f:54:78:b6:bc:0a:bd:5d:4d:da:
bd:ab:5a:40:b4:80:1e:ef:b2:9a:56:e3:c5:95:ec:
71:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:97:CD:E6:E4:CE:B1:A0:CB:BA:96:B2:A1:59:E2:0D:BE:04:86:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/c3cfbabb-4055-3d8f-87e9-339a22f4631c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/71d08692-7de1-4973-b7ae-5a0397e6b60c.crl
X509v3 Authority Key Identifier:
keyid:B1:8E:91:C4:9C:F2:47:68:BE:22:AA:7E:ED:92:C0:91:4E:BD:F7:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c.cer
sbgp-ipAddrBlock: critical
IPv4:
136.175.44.0/22
IPv6:
2602:fd08::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:07:0c:41:e9:51:12:37:7d:93:b8:9b:76:f1:fa:de:e2:7d:
05:50:f5:38:50:4b:00:73:84:47:9c:00:b8:ba:75:f9:ca:12:
95:06:88:9d:ca:c7:7f:ce:19:65:e9:d5:e9:02:7b:59:c8:13:
97:e8:cd:ea:a0:11:21:dd:19:e8:51:15:aa:29:84:b7:31:13:
47:74:69:28:79:38:05:77:46:2c:2a:cf:1e:05:cf:e5:62:e0:
82:c6:f9:d2:8a:d9:d4:ab:e5:50:fc:5f:78:23:41:65:4c:c0:
64:ae:10:14:f9:61:34:b1:9d:08:ba:35:95:39:fa:84:f2:b5:
8d:20:9e:65:00:76:ec:c7:54:04:79:1d:21:b8:68:1a:c2:dc:
ac:82:af:32:be:22:2b:28:31:31:29:bf:12:af:c4:93:ed:80:
5a:28:83:17:fa:f3:4a:59:6e:55:68:51:d0:b9:45:4f:cc:7e:
88:22:d5:b7:4d:ed:d3:75:2d:4d:7d:0e:86:c6:0e:36:f5:17:
91:57:91:b2:0d:e9:a1:36:9c:cb:df:51:01:da:e1:64:91:e5:
58:2f:5d:c0:af:4c:20:bd:fc:c1:78:35:be:e6:22:10:1f:49:
ee:ed:dc:06:c3:86:7b:3a:c0:90:43:dc:98:03:02:f3:c8:4d:
1c:1d:b2:42
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEhA5Vjyw4D2BKk+84AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzFkMDg2OTItN2RlMS00OTczLWI3YWUtNWEwMzk3ZTZi
NjBjMB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk
MWVhYTQzMDAtOGU4Yy00MDE4LWE1OGMtNGJlYzA4NzdkZTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzx0qey4WlpofNfxFeb4KWvsu+wOH8/sAiXp
ED/NX74XhfEvHNBArnUymTQZcsrR6Zb2jtFIhUrW8QIXMejIizh0gMQLGWackYVA
0TKXQRrgRK0U3ZPoBn4yvpiMQUvaVUmrO66JdHIDU5t6u6tMNrLL5JXZdwWQ/E8p
e+fONYgImRY7AHfV+/XypJJt15r7/cWuk24flY0ySDXX8Zyb1NaR3FyMt08dhadD
yaQ+v+2OmyhkKIVppReIXIqoNPgiZpVEeY6JVRJllGt0ZJ8N1bJXTKjn/5+9ii5t
qEC/P6Tm6wdxC29UeLa8Cr1dTdq9q1pAtIAe77KaVuPFlexxvwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFMKXzebkzrGgy7qWsqFZ4g2+BIZ+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83MWQw
ODY5Mi03ZGUxLTQ5NzMtYjdhZS01YTAzOTdlNmI2MGMvYzNjZmJhYmItNDA1NS0z
ZDhmLTg3ZTktMzM5YTIyZjQ2MzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzFkMDg2OTItN2RlMS00OTczLWI3
YWUtNWEwMzk3ZTZiNjBjLzcxZDA4NjkyLTdkZTEtNDk3My1iN2FlLTVhMDM5N2U2
YjYwYy5jcmwwHwYDVR0jBBgwFoAUsY6RxJzyR2i+Iqp+7ZLAkU6999swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83MWQwODY5Mi03ZGUxLTQ5NzMtYjdhZS01YTAz
OTdlNmI2MGMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCiK8sMA4E
AgACMAgDBgQmAv0IADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBwBwxB6VESN32TuJt28fre4n0FUPU4UEsA
c4RHnAC4unX5yhKVBoidysd/zhll6dXpAntZyBOX6M3qoBEh3RnoURWqKYS3MRNH
dGkoeTgFd0YsKs8eBc/lYuCCxvnSitnUq+VQ/F94I0FlTMBkrhAU+WE0sZ0IujWV
OfqE8rWNIJ5lAHbsx1QEeR0huGgawtysgq8yviIrKDExKb8Sr8ST7YBaKIMX+vNK
WW5VaFHQuUVPzH6IItW3Te3TdS1NfQ6Gxg429ReRV5GyDemhNpzL31EB2uFkkeVY
L13Ar0wgvfzBeDW+5iIQH0nu7dwGw4Z7OsCQQ9yYAwLzyE0cHbJC
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:41:03 2025 by rpki-client