Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/0253e5ee-877d-38d4-a970-551d593f295d.roa
File: 0253e5ee-877d-38d4-a970-551d593f295d.roa (raw, json)
Hash identifier: 0XbKchtiywQG94gzdx1kBmc+ZTNEHcGB/LuSfBKuTaw=
Subject key identifier: 6F:76:8E:55:B8:6A:3B:29:45:2A:CE:4D:3F:B1:8A:8D:51:C9:67:6B
Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial: 010D0C9F432858483455689FBFB862FB1F2A0F00
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/0253e5ee-877d-38d4-a970-551d593f295d.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 6461
IP address blocks: 216.158.207.0/24 maxlen: 24
216.158.211.0/24 maxlen: 24
216.158.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:68:9f:bf:b8:62:fb:1f:2a:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=9b4f3e59-3624-47c8-9702-ae905876a20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:07:57:e3:a5:5b:75:cb:1f:7b:26:06:ec:10:
0c:77:1e:d0:c5:8f:c9:64:65:13:57:aa:cb:69:d7:
da:c9:f5:18:a8:d4:73:0a:cd:b9:7a:1c:bd:01:c9:
b9:ee:ad:2a:17:fb:ec:fa:ed:72:79:9c:47:80:f1:
7a:33:a9:a6:23:48:1e:e4:43:12:64:37:8f:aa:b7:
ef:40:02:a1:30:52:12:f0:d9:11:94:7a:6c:c0:6c:
9d:f2:47:54:0d:36:fa:93:21:bf:bf:e9:6f:60:a9:
bb:73:9d:30:38:ef:25:46:76:c8:a3:4d:71:8a:4a:
46:5a:91:89:4b:74:5d:2a:f2:87:88:13:74:a6:4d:
16:85:6d:3d:7c:58:d4:72:3a:a0:40:6b:fa:79:3d:
b6:77:83:de:aa:7d:4d:77:57:f7:b4:0b:8f:2e:df:
f0:f7:61:58:6a:c4:04:1a:e4:9a:9b:b4:4d:99:ef:
15:8a:94:dc:19:8a:ed:3b:24:d4:01:ad:c8:e8:5a:
c0:16:c9:83:f2:1f:55:9b:ea:9e:7d:97:95:80:d1:
82:dc:dc:a2:04:6b:60:23:84:51:15:a6:4e:bc:2a:
90:c5:19:65:12:a2:c4:ca:8e:82:a7:a6:eb:03:6f:
1b:bb:2c:39:6d:63:03:11:90:58:60:d4:97:65:1b:
2e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:76:8E:55:B8:6A:3B:29:45:2A:CE:4D:3F:B1:8A:8D:51:C9:67:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/0253e5ee-877d-38d4-a970-551d593f295d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
X509v3 Authority Key Identifier:
keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
sbgp-ipAddrBlock: critical
IPv4:
216.158.207.0/24
216.158.211.0/24
216.158.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:3d:df:92:b1:3d:39:8c:94:ff:ed:b2:6b:ad:6d:26:fa:96:
e7:c8:74:5b:82:ca:0c:05:b7:bb:a4:97:d7:d8:11:d9:6f:35:
16:2f:6a:b9:73:6e:49:8c:07:67:56:ab:42:7f:5d:e6:65:7a:
e6:38:63:0c:31:f1:33:e5:84:49:d1:96:50:8d:24:19:2a:21:
d4:b1:67:32:77:40:3a:99:e0:ab:f0:a0:9a:ab:a1:86:9e:ee:
7a:ed:e5:2b:37:f4:9f:94:51:36:85:a8:be:88:e0:fa:f4:91:
68:3c:b0:06:31:42:24:74:a9:31:a7:c2:79:f4:b5:10:a2:b5:
3f:d2:8c:c2:72:cb:c0:d2:22:0e:8f:da:fa:20:0a:ab:b3:b3:
7d:07:ae:ee:e9:1c:d3:1b:2a:94:02:82:28:38:9a:94:fb:0f:
d5:e9:fa:3a:2f:a6:8a:f5:da:40:1a:b4:56:1e:c6:5e:44:30:
b0:e3:fb:55:8f:2a:1d:c2:e1:4d:45:40:12:d0:b8:bc:b6:ea:
6d:84:66:af:68:8e:c0:2a:50:5e:d6:29:47:f4:41:e1:47:a2:
04:1b:6a:8a:ec:2f:45:d9:40:f1:12:4b:04:70:e2:f6:a9:5d:
ff:12:51:67:8a:7e:3a:80:97:5f:a5:14:d7:59:0b:8f:12:8a:
3d:58:06:05
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEg0VWifv7hi+x8qDwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz
M2E0MB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk
OWI0ZjNlNTktMzYyNC00N2M4LTk3MDItYWU5MDU4NzZhMjBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAdX46VbdcsfeyYG7BAMdx7QxY/JZGUTV6rL
adfayfUYqNRzCs25ehy9Acm57q0qF/vs+u1yeZxHgPF6M6mmI0ge5EMSZDePqrfv
QAKhMFIS8NkRlHpswGyd8kdUDTb6kyG/v+lvYKm7c50wOO8lRnbIo01xikpGWpGJ
S3RdKvKHiBN0pk0WhW09fFjUcjqgQGv6eT22d4Peqn1Nd1f3tAuPLt/w92FYasQE
GuSam7RNme8VipTcGYrtOyTUAa3I6FrAFsmD8h9Vm+qefZeVgNGC3NyiBGtgI4RR
FaZOvCqQxRllEqLEyo6Cp6brA28buyw5bWMDEZBYYNSXZRsu1wIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFG92jlW4ajspRSrOTT+xio1RyWdrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2
NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvMDI1M2U1ZWUtODc3ZC0z
OGQ0LWE5NzAtNTUxZDU5M2YyOTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1
MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0
MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj
NmFiNDMzYTQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA2J7PAwQA
2J7TAwQA2J7cMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAFQ935KxPTmMlP/tsmutbSb6lufIdFuCygwFt7uk
l9fYEdlvNRYvarlzbkmMB2dWq0J/XeZleuY4Ywwx8TPlhEnRllCNJBkqIdSxZzJ3
QDqZ4KvwoJqroYae7nrt5Ss39J+UUTaFqL6I4Pr0kWg8sAYxQiR0qTGnwnn0tRCi
tT/SjMJyy8DSIg6P2vogCquzs30Hru7pHNMbKpQCgig4mpT7D9Xp+jovpor12kAa
tFYexl5EMLDj+1WPKh3C4U1FQBLQuLy26m2EZq9ojsAqUF7WKUf0QeFHogQbaors
L0XZQPESSwRw4vapXf8SUWeKfjqAl1+lFNdZC48Sij1YBgU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 11:21:38 2025 by rpki-client