Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/828ae03b-a727-34a7-b93a-e90b4f4a563b.roa
File: 828ae03b-a727-34a7-b93a-e90b4f4a563b.roa (raw, json)
Hash identifier: S3lsj5pfgs3GTb39XsQ8abh7Z4KhlPjp2qp6OL9XKTs=
Subject key identifier: 33:1F:F1:44:1C:F6:5C:AA:D8:39:63:7C:AD:AE:26:21:11:A7:52:56
Certificate issuer: /CN=6c7a9179-b71c-4608-b6ad-37c021ece676
Certificate serial: 010D0C9F43285848ADD8763F0EA0B3FF884B1880
Authority key identifier: A4:AA:05:6E:EC:2E:BF:7A:43:54:F8:C6:CF:73:36:6C:C3:8D:26:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/828ae03b-a727-34a7-b93a-e90b4f4a563b.roa
Signing time: Mon 27 Jan 2025 02:37:53 +0000
ROA not before: Mon 27 Jan 2025 02:37:53 +0000
ROA not after: Sun 27 Apr 2025 01:37:53 +0000
asID: 142064
IP address blocks: 206.168.133.0/24 maxlen: 24
2602:fbd9:100::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:d8:76:3f:0e:a0:b3:ff:88:4b:18:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c7a9179-b71c-4608-b6ad-37c021ece676
Validity
Not Before: Jan 27 02:37:53 2025 GMT
Not After : Apr 27 01:37:53 2025 GMT
Subject: CN=a4a4ca47-55f2-493f-a0ff-2f91b9cf3658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f4:33:39:7a:26:6a:15:58:7a:92:21:d0:1d:
f8:a6:f5:0f:4f:56:c0:b3:1b:93:ca:88:92:40:3c:
71:1a:8c:18:0c:8e:e8:11:84:8c:e6:5b:4b:3b:42:
07:08:f7:dd:8d:c8:19:d7:68:86:53:5f:8e:39:20:
3c:fa:fa:50:5d:fb:fb:7c:89:a4:8e:49:dc:b8:09:
0e:cb:56:27:f4:6d:2e:97:06:0a:a6:a5:32:63:93:
e4:e6:31:44:67:c7:5c:07:f2:e3:84:86:03:82:10:
21:11:7d:af:23:77:9b:8a:14:ac:10:c5:4a:c6:70:
af:00:ed:64:81:38:d6:36:6c:4d:92:dc:c7:8d:7f:
5a:71:f4:e6:2c:71:0d:88:04:a3:b4:67:93:d1:ae:
52:be:45:6c:b2:c6:7d:2e:e5:79:29:63:66:ad:95:
58:c0:4c:91:01:64:c2:ea:3b:aa:8e:33:62:a2:46:
6c:41:7a:82:cd:56:17:8c:98:96:ea:16:5e:65:2a:
f5:d9:c6:1f:6b:66:7b:8a:db:da:b5:ed:36:97:a8:
a0:2f:67:72:af:b0:66:41:d5:28:c6:db:68:cb:25:
60:02:b8:f5:da:d0:a7:9a:1c:3f:52:b6:42:ac:bb:
5c:db:2d:6f:f9:c6:26:20:6b:4c:44:a3:9d:76:2e:
37:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1F:F1:44:1C:F6:5C:AA:D8:39:63:7C:AD:AE:26:21:11:A7:52:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/828ae03b-a727-34a7-b93a-e90b4f4a563b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.crl
X509v3 Authority Key Identifier:
keyid:A4:AA:05:6E:EC:2E:BF:7A:43:54:F8:C6:CF:73:36:6C:C3:8D:26:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.133.0/24
IPv6:
2602:fbd9:100::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:3d:43:16:b9:17:6b:44:a3:48:54:f3:f0:79:ea:8b:5f:0a:
8f:cc:8f:bd:6c:bd:c5:43:e7:5f:80:2f:aa:88:04:3f:8b:95:
a9:1a:9a:7a:16:bf:79:ae:f3:8b:ba:1e:5d:c8:08:1d:cf:ec:
da:30:9d:cb:bf:91:c5:37:14:c4:53:45:f2:25:12:9d:0d:f2:
e0:55:c0:02:3a:6c:e0:35:e3:b3:4b:24:4e:6a:38:81:36:55:
dc:4b:77:70:93:c1:bb:ec:88:0e:96:3c:1e:dd:9b:6c:ef:b3:
bf:58:c9:bc:88:40:19:be:da:d1:ab:ae:9f:69:d8:e8:62:ea:
30:54:a8:23:cd:65:b1:4d:44:79:46:72:0d:d3:95:3a:4f:d9:
e3:1b:3d:71:ec:14:66:0c:02:96:73:52:f5:5b:2e:da:bc:b5:
c4:d7:15:ed:a2:7d:a6:53:eb:84:f7:3e:3f:e5:70:da:06:76:
a7:67:95:bc:5e:ed:83:c2:d2:7a:df:dd:b4:41:c7:61:d8:3d:
8b:4d:a6:13:d2:67:01:b1:e4:98:87:83:4a:c7:53:a5:2e:96:
78:b6:0c:de:a3:18:98:ff:97:f7:fa:be:87:e4:9d:97:cc:61:
64:53:51:b9:ac:2e:46:c4:d7:2e:97:27:01:14:82:07:e7:3c:
c7:55:04:55
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEit2HY/DqCz/4hLGIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmM3YTkxNzktYjcxYy00NjA4LWI2YWQtMzdjMDIxZWNl
Njc2MB4XDTI1MDEyNzAyMzc1M1oXDTI1MDQyNzAxMzc1M1owLzEtMCsGA1UEAxMk
YTRhNGNhNDctNTVmMi00OTNmLWEwZmYtMmY5MWI5Y2YzNjU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPQzOXomahVYepIh0B34pvUPT1bAsxuTyoiS
QDxxGowYDI7oEYSM5ltLO0IHCPfdjcgZ12iGU1+OOSA8+vpQXfv7fImkjkncuAkO
y1Yn9G0ulwYKpqUyY5Pk5jFEZ8dcB/LjhIYDghAhEX2vI3ebihSsEMVKxnCvAO1k
gTjWNmxNktzHjX9acfTmLHENiASjtGeT0a5SvkVsssZ9LuV5KWNmrZVYwEyRAWTC
6juqjjNiokZsQXqCzVYXjJiW6hZeZSr12cYfa2Z7itvate02l6igL2dyr7BmQdUo
xttoyyVgArj12tCnmhw/UrZCrLtc2y1v+cYmIGtMRKOddi43VwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFDMf8UQc9lyq2DljfK2uJiERp1JWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82Yzdh
OTE3OS1iNzFjLTQ2MDgtYjZhZC0zN2MwMjFlY2U2NzYvODI4YWUwM2ItYTcyNy0z
NGE3LWI5M2EtZTkwYjRmNGE1NjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmM3YTkxNzktYjcxYy00NjA4LWI2
YWQtMzdjMDIxZWNlNjc2LzZjN2E5MTc5LWI3MWMtNDYwOC1iNmFkLTM3YzAyMWVj
ZTY3Ni5jcmwwHwYDVR0jBBgwFoAUpKoFbuwuv3pDVPjGz3M2bMONJo4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82YzdhOTE3OS1iNzFjLTQ2MDgtYjZhZC0zN2Mw
MjFlY2U2NzYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAzqiFMA8E
AgACMAkDBwQmAvvZAQAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMT1DFrkXa0SjSFTz8Hnqi18Kj8yPvWy9
xUPnX4AvqogEP4uVqRqaeha/ea7zi7oeXcgIHc/s2jCdy7+RxTcUxFNF8iUSnQ3y
4FXAAjps4DXjs0skTmo4gTZV3Et3cJPBu+yIDpY8Ht2bbO+zv1jJvIhAGb7a0auu
n2nY6GLqMFSoI81lsU1EeUZyDdOVOk/Z4xs9cewUZgwClnNS9Vsu2ry1xNcV7aJ9
plPrhPc+P+Vw2gZ2p2eVvF7tg8LSet/dtEHHYdg9i02mE9JnAbHkmIeDSsdTpS6W
eLYM3qMYmP+X9/q+h+Sdl8xhZFNRuawuRsTXLpcnARSCB+c8x1UEVQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 11:15:11 2025 by rpki-client