Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/9ecd13d5-3d61-344c-b909-f184cf77b07f.roa
File: 9ecd13d5-3d61-344c-b909-f184cf77b07f.roa (raw, json)
Hash identifier: tFt72YJnhA/G3AF2sufuv9Szgzh7KkCt4iXa6ibqKSU=
Subject key identifier: FD:EC:A2:2C:CE:EF:1F:11:40:7E:21:81:70:A8:34:40:1F:54:FC:F3
Certificate issuer: /CN=399fbcba-412a-4e4c-8856-d893d23bdd7b
Certificate serial: 010D0C9F43285847ED24BC18F411B700A085A940
Authority key identifier: 57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/9ecd13d5-3d61-344c-b909-f184cf77b07f.roa
Signing time: Tue 19 Nov 2024 02:00:27 +0000
ROA not before: Tue 19 Nov 2024 02:00:27 +0000
ROA not after: Mon 17 Feb 2025 02:00:27 +0000
asID: 16729
IP address blocks: 159.55.213.0/24 maxlen: 24
159.55.214.0/23 maxlen: 24
159.55.216.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ed:24:bc:18:f4:11:b7:00:a0:85:a9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399fbcba-412a-4e4c-8856-d893d23bdd7b
Validity
Not Before: Nov 19 02:00:27 2024 GMT
Not After : Feb 17 02:00:27 2025 GMT
Subject: CN=5b6c860b-8b59-4df8-bf21-b1e8a0305159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d5:b9:d8:87:1b:22:0c:8a:7c:2f:80:19:a2:
b4:e9:9f:a9:ea:35:b5:4e:ed:bb:93:f0:4d:3e:4b:
4a:08:55:36:29:04:8d:a5:ee:73:42:ce:81:bf:13:
e4:04:90:09:c8:4f:5a:55:94:21:63:f1:a7:ab:37:
9d:fd:de:71:e4:eb:69:1a:7f:26:65:c2:c0:5a:7c:
09:8e:e3:11:7d:22:d7:27:47:df:de:4b:e3:ac:03:
c3:02:a6:13:a1:1c:b0:5b:f5:a0:cc:99:94:13:b0:
94:b1:b1:8a:e0:1b:3b:22:48:6c:a2:d6:38:e6:ca:
14:57:05:17:ed:bc:5c:a0:f0:00:82:57:96:82:9b:
16:f1:5b:34:a1:39:0c:e5:86:7e:48:7e:b0:72:b0:
a8:8b:9e:f6:7c:94:ce:a8:9b:dd:b8:6b:f2:67:f3:
08:14:d6:78:23:9b:d9:dc:aa:3b:fe:51:d1:88:0e:
4b:3d:a6:05:34:49:1c:35:17:bb:c8:10:29:c8:4c:
2e:8c:b3:a2:e1:fd:77:b0:b2:b8:ab:df:92:03:0f:
1c:8c:a4:75:8b:2c:f6:7e:ca:f4:4a:a6:10:2d:17:
e2:e7:e5:cf:5c:bc:35:45:da:ac:a2:b8:67:1c:99:
f6:cb:5a:62:85:43:5a:de:e6:cc:2d:90:66:d5:fc:
6b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EC:A2:2C:CE:EF:1F:11:40:7E:21:81:70:A8:34:40:1F:54:FC:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/9ecd13d5-3d61-344c-b909-f184cf77b07f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.crl
X509v3 Authority Key Identifier:
keyid:57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer
sbgp-ipAddrBlock: critical
IPv4:
159.55.213.0-159.55.223.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:30:5a:c3:8e:40:13:53:74:3e:40:68:32:51:22:3b:f5:7a:
e8:f7:a1:c9:0c:57:b3:fa:84:7f:66:ac:1f:7b:52:48:ab:95:
57:ac:0f:67:a8:ba:02:d9:a3:3b:72:c1:3f:96:af:4c:0c:f6:
ff:10:8f:82:24:19:4e:f7:15:7b:22:bd:33:71:0c:7e:3c:f6:
31:0a:6d:ac:91:fb:b3:68:2f:5e:bc:38:ff:99:c1:43:94:51:
98:98:a8:87:3f:9d:67:ea:5a:72:3e:2e:13:fb:0c:ea:5f:61:
df:2c:c3:41:c1:b6:ec:97:6e:00:7e:a4:bb:f0:4c:a7:31:df:
0a:df:45:4a:10:ef:75:32:dd:72:1a:1e:ea:f3:05:4e:88:3b:
ff:4d:9d:fb:00:34:bc:d1:01:04:46:4d:42:9f:f1:0a:08:5f:
88:b3:75:08:52:6f:d3:ad:a0:76:40:40:59:a9:45:97:6f:0c:
0c:cf:d9:aa:25:8c:17:db:08:34:ec:c7:be:e6:fb:1e:4e:48:
3b:e3:08:dc:be:08:f4:62:8f:93:68:00:85:33:58:fc:66:84:
56:fb:ed:83:b0:b9:0d:9e:e6:3d:9b:e9:56:0a:35:d3:3b:e0:
80:c3:78:d9:e9:e6:e0:55:e1:61:1f:ea:1e:ae:0b:56:ba:c5:
4a:1a:84:74
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEftJLwY9BG3AKCFqUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk5ZmJjYmEtNDEyYS00ZTRjLTg4NTYtZDg5M2QyM2Jk
ZDdiMB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk
NWI2Yzg2MGItOGI1OS00ZGY4LWJmMjEtYjFlOGEwMzA1MTU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldW52IcbIgyKfC+AGaK06Z+p6jW1Tu27k/BN
PktKCFU2KQSNpe5zQs6BvxPkBJAJyE9aVZQhY/Gnqzed/d5x5OtpGn8mZcLAWnwJ
juMRfSLXJ0ff3kvjrAPDAqYToRywW/WgzJmUE7CUsbGK4Bs7IkhsotY45soUVwUX
7bxcoPAAgleWgpsW8Vs0oTkM5YZ+SH6wcrCoi572fJTOqJvduGvyZ/MIFNZ4I5vZ
3Ko7/lHRiA5LPaYFNEkcNRe7yBApyEwujLOi4f13sLK4q9+SAw8cjKR1iyz2fsr0
SqYQLRfi5+XPXLw1RdqsorhnHJn2y1pihUNa3ubMLZBm1fxrKwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFP3soizO7x8RQH4hgXCoNEAfVPzzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOTlm
YmNiYS00MTJhLTRlNGMtODg1Ni1kODkzZDIzYmRkN2IvOWVjZDEzZDUtM2Q2MS0z
NDRjLWI5MDktZjE4NGNmNzdiMDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzk5ZmJjYmEtNDEyYS00ZTRjLTg4
NTYtZDg5M2QyM2JkZDdiLzM5OWZiY2JhLTQxMmEtNGU0Yy04ODU2LWQ4OTNkMjNi
ZGQ3Yi5jcmwwHwYDVR0jBBgwFoAUVz4KYNYW+YnJpeiTWBr5Aj0g5uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zOTlmYmNiYS00MTJhLTRlNGMtODg1Ni1kODkz
ZDIzYmRkN2IuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACfN9UD
BAWfN8AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAazBaw45AE1N0PkBoMlEiO/V66PehyQxXs/qEf2asH3tS
SKuVV6wPZ6i6AtmjO3LBP5avTAz2/xCPgiQZTvcVeyK9M3EMfjz2MQptrJH7s2gv
Xrw4/5nBQ5RRmJiohz+dZ+pacj4uE/sM6l9h3yzDQcG27JduAH6ku/BMpzHfCt9F
ShDvdTLdchoe6vMFTog7/02d+wA0vNEBBEZNQp/xCghfiLN1CFJv062gdkBAWalF
l28MDM/ZqiWMF9sINOzHvub7Hk5IO+MI3L4I9GKPk2gAhTNY/GaEVvvtg7C5DZ7m
PZvpVgo10zvggMN42enm4FXhYR/qHq4LVrrFShqEdA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:24:32 2025 by rpki-client