Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/95dec174-d0b2-3c77-aa70-aae3c1f8628c.roa
File: 95dec174-d0b2-3c77-aa70-aae3c1f8628c.roa (raw, json)
Hash identifier: PK83tiTYXUj4Iv6k8IWe3jQCVmIDhUfyap9ZHH6JAiM=
Subject key identifier: D7:FC:63:20:E1:04:4C:9A:20:5B:F5:45:CC:C1:7A:70:58:01:EA:80
Certificate issuer: /CN=8ac31463-974b-4676-9328-200202ae4d6e
Certificate serial: 010D0C9F4328584837201922CEF31B2B5B9E29C0
Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/95dec174-d0b2-3c77-aa70-aae3c1f8628c.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 33211
IP address blocks: 206.41.120.0/22 maxlen: 22
206.41.120.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:19:22:ce:f3:1b:2b:5b:9e:29:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=8c84ca9f-3ab6-40e1-8c0b-3744c5db20ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:48:91:6f:b2:69:42:3b:6a:b6:20:65:24:24:
54:9e:27:4d:76:00:18:e6:f9:de:65:0e:cb:41:ff:
84:b1:ce:a6:e9:d9:f3:09:d7:c3:a0:39:87:5d:c3:
e8:91:e4:47:f7:c0:1c:8a:a6:c7:40:45:01:74:2a:
db:ec:81:30:06:82:b4:69:ad:7c:e7:07:f0:91:6d:
38:4e:99:7e:98:d5:85:9e:03:45:88:a8:dd:18:53:
df:50:2f:f1:7f:c9:fd:cc:b5:84:8b:96:24:66:83:
07:60:bb:33:31:e4:b3:02:7e:64:10:b7:df:6e:58:
b5:2e:2c:ea:74:d1:ea:81:e6:f5:bd:d8:de:24:35:
5a:5a:64:c7:5d:5e:33:78:09:73:ee:9a:7e:96:76:
6f:6d:f7:eb:df:28:94:5a:f0:14:74:22:c1:7b:58:
a4:44:10:5e:c7:da:c9:94:49:85:34:60:80:ee:a1:
ff:65:0f:78:64:21:1e:05:a2:78:7c:51:8b:27:39:
64:87:7f:e1:b3:54:9f:3a:88:9f:7c:44:f2:04:f5:
d3:1a:53:16:0b:df:ba:60:84:b1:20:f9:54:9e:94:
ea:d5:75:76:76:fd:1a:c1:87:7d:52:b3:e8:e1:85:
e1:0c:e5:65:fb:54:9c:ca:44:f2:8c:26:49:68:fd:
91:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FC:63:20:E1:04:4C:9A:20:5B:F5:45:CC:C1:7A:70:58:01:EA:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/95dec174-d0b2-3c77-aa70-aae3c1f8628c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl
X509v3 Authority Key Identifier:
keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
sbgp-ipAddrBlock: critical
IPv4:
206.41.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:e3:58:07:71:85:97:a1:32:a4:fc:ca:76:d0:a2:50:15:3a:
65:d1:9d:9f:17:f8:fe:b8:99:2e:05:40:c0:dc:af:f6:f2:21:
a3:4b:11:3c:e4:3c:07:c1:c7:94:eb:9d:0a:ad:0d:45:ee:f0:
6a:71:86:1b:24:08:26:ce:64:e6:21:ab:ca:f0:cf:27:ea:0a:
4e:a0:ea:bf:eb:12:db:aa:72:a2:d4:5c:e1:32:5a:f2:c5:82:
7c:d2:c9:88:78:fc:82:c8:99:6b:c2:34:4d:2c:5f:4f:b8:d9:
c6:7b:de:81:a8:67:a8:9f:fa:92:61:3f:5c:9f:cf:a5:d6:d7:
4b:b4:c7:b2:c2:5b:e1:ba:7c:41:aa:3f:55:50:9a:a3:8e:01:
5d:37:ea:3e:c0:a0:81:1d:90:2e:cc:66:63:a5:02:a8:de:f2:
d8:8d:7a:d1:9f:de:d2:a8:ff:25:3b:32:d5:f7:ea:85:4a:66:
44:ce:74:4f:2a:f7:a6:0d:6a:fd:fe:63:e0:72:98:dd:c6:c7:
83:19:8c:3d:e5:21:a9:e7:63:2b:fa:7b:1f:fd:fc:f0:43:93:
83:e9:b0:78:6a:fb:ad:4d:86:a3:fb:cf:81:8f:80:5a:5d:74:
95:14:8c:27:b0:dc:55:8f:10:96:00:07:bf:69:6f:c8:89:50:
f8:01:cc:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg3IBkizvMbK1ueKcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGFjMzE0NjMtOTc0Yi00Njc2LTkzMjgtMjAwMjAyYWU0
ZDZlMB4XDTI0MTIxNTE0MDA1M1oXDTI1MDMxNTEzMDA1M1owLzEtMCsGA1UEAxMk
OGM4NGNhOWYtM2FiNi00MGUxLThjMGItMzc0NGM1ZGIyMGFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUiRb7JpQjtqtiBlJCRUnidNdgAY5vneZQ7L
Qf+Esc6m6dnzCdfDoDmHXcPokeRH98AciqbHQEUBdCrb7IEwBoK0aa185wfwkW04
Tpl+mNWFngNFiKjdGFPfUC/xf8n9zLWEi5YkZoMHYLszMeSzAn5kELffbli1Lizq
dNHqgeb1vdjeJDVaWmTHXV4zeAlz7pp+lnZvbffr3yiUWvAUdCLBe1ikRBBex9rJ
lEmFNGCA7qH/ZQ94ZCEeBaJ4fFGLJzlkh3/hs1SfOoiffETyBPXTGlMWC9+6YISx
IPlUnpTq1XV2dv0awYd9UrPo4YXhDOVl+1ScykTyjCZJaP2RbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNf8YyDhBEyaIFv1RczBenBYAeqAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84YWMz
MTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAyMDJhZTRkNmUvOTVkZWMxNzQtZDBiMi0z
Yzc3LWFhNzAtYWFlM2MxZjg2MjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGFjMzE0NjMtOTc0Yi00Njc2LTkz
MjgtMjAwMjAyYWU0ZDZlLzhhYzMxNDYzLTk3NGItNDY3Ni05MzI4LTIwMDIwMmFl
NGQ2ZS5jcmwwHwYDVR0jBBgwFoAUZkrPeoeALtWWaZNuDr1s6kFXZvYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84YWMzMTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAy
MDJhZTRkNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzil4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG3jWAdxhZehMqT8ynbQolAVOmXRnZ8X+P64mS4FQMDcr/byIaNLETzk
PAfBx5TrnQqtDUXu8GpxhhskCCbOZOYhq8rwzyfqCk6g6r/rEtuqcqLUXOEyWvLF
gnzSyYh4/ILImWvCNE0sX0+42cZ73oGoZ6if+pJhP1yfz6XW10u0x7LCW+G6fEGq
P1VQmqOOAV036j7AoIEdkC7MZmOlAqje8tiNetGf3tKo/yU7MtX36oVKZkTOdE8q
96YNav3+Y+BymN3Gx4MZjD3lIannYyv6ex/9/PBDk4PpsHhq+61NhqP7z4GPgFpd
dJUUjCew3FWPEJYAB79pb8iJUPgBzDI=
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:52 2025 by rpki-client