Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/70f84667-596d-3892-9efc-8d21ee5932e4.roa
File: 70f84667-596d-3892-9efc-8d21ee5932e4.roa (raw, json)
Hash identifier: +GQIzXoguKXa3/CsWwRCWdNPHa4lat433+9uWclkwfI=
Subject key identifier: DF:13:DE:09:D1:4E:57:E8:48:F5:2A:A9:71:2C:11:EE:3F:98:A6:AD
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F432858482D5AA436F89C8915DAF9CB00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/70f84667-596d-3892-9efc-8d21ee5932e4.roa
Signing time: Thu 12 Dec 2024 02:00:38 +0000
ROA not before: Thu 12 Dec 2024 02:00:38 +0000
ROA not after: Wed 12 Mar 2025 01:00:38 +0000
asID: 22773
IP address blocks: 70.165.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2d:5a:a4:36:f8:9c:89:15:da:f9:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Dec 12 02:00:38 2024 GMT
Not After : Mar 12 01:00:38 2025 GMT
Subject: CN=54afe643-0b11-4192-99e0-8363e1fdb2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:26:15:05:fa:f4:e1:b5:da:df:28:d7:b0:9b:
f0:45:a7:d9:56:60:b3:00:0e:ee:84:6f:04:f5:f2:
4b:a3:8b:3d:15:fd:a6:46:62:2c:13:38:61:25:0b:
bd:01:6a:8a:99:e0:5c:95:6b:37:72:d1:44:24:a0:
f6:f3:58:4e:12:98:27:90:44:7e:4e:91:36:02:fc:
5d:86:fd:d1:97:09:31:0d:85:19:74:f5:05:23:b9:
2f:b8:66:5b:bc:44:8e:d8:fd:a7:3a:73:49:67:d9:
02:82:3d:70:9e:82:77:46:b2:a8:1b:c8:8a:48:1e:
8c:6d:95:d4:58:e8:d1:fc:ed:26:e7:72:4e:7b:d4:
f0:81:12:92:9a:cc:73:69:fa:27:68:c6:bd:23:07:
97:38:cd:14:d2:bb:d0:f5:ab:c5:29:e1:66:b8:51:
17:7c:2f:fc:90:b1:81:16:a7:f6:59:76:ce:f3:f7:
15:08:8e:0a:02:89:5d:03:ab:df:7e:9a:f5:7d:c5:
88:68:d0:a5:82:18:84:5f:d8:a3:d1:f5:a4:79:8f:
42:e1:86:b6:21:9e:dd:0a:9f:b4:01:09:8d:08:ee:
9b:7b:9f:eb:ee:d9:73:a6:d9:17:b1:2b:45:c6:83:
66:f2:5e:16:3b:03:26:62:d1:c7:b1:ee:e8:00:b0:
9f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:13:DE:09:D1:4E:57:E8:48:F5:2A:A9:71:2C:11:EE:3F:98:A6:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/70f84667-596d-3892-9efc-8d21ee5932e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.165.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:af:0c:ec:1a:45:b1:60:7f:8a:cb:ee:d2:25:2a:3b:54:be:
8b:10:f4:47:22:fa:02:a9:dd:88:fc:b9:28:68:9b:4d:31:18:
23:34:79:f2:a1:31:b4:a4:3e:58:d5:e2:38:45:04:87:5d:79:
18:0f:7c:38:c0:58:5e:39:1a:cd:e6:7c:1e:bc:92:5f:21:1c:
a5:a6:a9:7e:c1:95:bc:42:57:f0:75:4d:39:b3:e4:4c:aa:77:
15:86:ba:e8:d0:78:a0:6f:f2:9e:36:b0:64:ba:ad:53:88:8d:
26:fb:d1:ed:91:35:ab:c7:8a:d5:72:ed:0d:fa:a4:62:69:26:
39:f2:f3:6f:90:83:20:ba:0d:2e:ed:11:fc:4a:b2:84:84:c7:
b4:e7:9c:73:0d:86:1b:cf:61:46:5d:57:5d:fe:c5:b9:f7:73:
02:cf:0a:4a:90:25:96:be:bc:8a:4f:5b:ce:b2:d9:52:cd:87:
93:36:bc:8d:e2:a4:88:6c:46:94:00:25:11:10:25:d5:58:20:
18:fb:06:72:eb:ca:b9:ed:85:55:af:6f:63:c0:f3:1c:13:ba:
a6:31:bf:a4:86:c0:6f:13:2d:f4:13:03:16:0d:bd:59:40:26:
d3:5a:5f:fd:87:b0:0d:55:6a:89:66:f5:65:1c:db:72:32:01:
a8:29:12:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgtWqQ2+JyJFdr5ywAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI0MTIxMjAyMDAzOFoXDTI1MDMxMjAxMDAzOFowLzEtMCsGA1UEAxMk
NTRhZmU2NDMtMGIxMS00MTkyLTk5ZTAtODM2M2UxZmRiMmY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCYVBfr04bXa3yjXsJvwRafZVmCzAA7uhG8E
9fJLo4s9Ff2mRmIsEzhhJQu9AWqKmeBclWs3ctFEJKD281hOEpgnkER+TpE2Avxd
hv3RlwkxDYUZdPUFI7kvuGZbvESO2P2nOnNJZ9kCgj1wnoJ3RrKoG8iKSB6MbZXU
WOjR/O0m53JOe9TwgRKSmsxzafonaMa9IweXOM0U0rvQ9avFKeFmuFEXfC/8kLGB
Fqf2WXbO8/cVCI4KAoldA6vffpr1fcWIaNClghiEX9ij0fWkeY9C4Ya2IZ7dCp+0
AQmNCO6be5/r7tlzptkXsStFxoNm8l4WOwMmYtHHse7oALCfyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN8T3gnRTlfoSPUqqXEsEe4/mKatMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzBmODQ2NjctNTk2ZC0z
ODkyLTllZmMtOGQyMWVlNTkzMmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqV7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACuvDOwaRbFgf4rL7tIlKjtUvosQ9Eci+gKp3Yj8uShom00xGCM0efKh
MbSkPljV4jhFBIddeRgPfDjAWF45Gs3mfB68kl8hHKWmqX7BlbxCV/B1TTmz5Eyq
dxWGuujQeKBv8p42sGS6rVOIjSb70e2RNavHitVy7Q36pGJpJjny82+QgyC6DS7t
EfxKsoSEx7TnnHMNhhvPYUZdV13+xbn3cwLPCkqQJZa+vIpPW86y2VLNh5M2vI3i
pIhsRpQAJREQJdVYIBj7BnLryrnthVWvb2PA8xwTuqYxv6SGwG8TLfQTAxYNvVlA
JtNaX/2HsA1Vaolm9WUc23IyAagpEvo=
-----END CERTIFICATE-----
Generated at Sat Apr 26 11:27:36 2025 by rpki-client