Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8e5ed9de-8260-3f23-8a5f-845c119039ad.roa
File: 8e5ed9de-8260-3f23-8a5f-845c119039ad.roa (raw, json)
Hash identifier: xfZTbRgKTCsh676+YERNHwtZo/O34JhtKLJhD3V41qs=
Subject key identifier: 73:E1:50:60:FB:B4:4A:B7:16:E8:09:D8:AC:38:83:CC:4B:5E:2B:E0
Certificate issuer: /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial: 010D0C9F432858486695C0A5985903631E65AAC0
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8e5ed9de-8260-3f23-8a5f-845c119039ad.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 3695
IP address blocks: 70.36.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:c0:a5:98:59:03:63:1e:65:aa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=114842ab-8569-4d3a-8c50-d22e7112ec6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:43:88:0f:a5:3d:55:10:f6:59:d5:4a:90:4b:
74:dd:f7:b4:fc:a8:b0:56:9a:b0:4e:c1:32:96:7b:
c3:a6:6e:60:6e:8f:92:97:2e:af:9d:1e:62:eb:56:
c2:65:82:a8:6d:b2:bc:98:55:23:1a:70:5e:ae:3a:
c8:a6:15:11:d6:9f:01:75:e4:76:fc:11:aa:f7:ba:
ce:6e:37:38:18:b5:d0:36:61:55:58:9f:1b:0f:22:
d9:87:e4:a9:63:5f:57:06:c5:6f:ff:23:87:f9:7d:
6b:ee:93:fa:c9:0d:81:0e:61:10:48:96:bf:12:19:
14:d0:59:aa:5e:ad:b5:56:39:e0:ce:47:94:92:60:
17:01:20:b0:31:46:d3:23:83:b7:ee:57:49:ea:70:
40:ea:58:cd:4e:a0:f0:cd:0e:4c:8c:4b:78:b0:d2:
26:78:a7:83:fb:11:2a:1b:d0:a3:25:3e:cd:43:a7:
62:fb:e5:7b:9b:06:7c:c8:d7:1d:1b:1d:b3:b7:88:
43:5a:a4:94:58:eb:5c:b0:4e:b2:6a:e4:ec:3d:50:
d8:1d:60:e7:fd:53:36:3b:06:24:12:21:1f:9f:32:
ed:42:6f:25:70:d2:0c:bf:8a:49:9e:aa:96:ea:a8:
59:80:fb:11:f4:23:d2:68:14:c7:b2:82:fc:b3:31:
b0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E1:50:60:FB:B4:4A:B7:16:E8:09:D8:AC:38:83:CC:4B:5E:2B:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8e5ed9de-8260-3f23-8a5f-845c119039ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
X509v3 Authority Key Identifier:
keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
sbgp-ipAddrBlock: critical
IPv4:
70.36.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:64:ae:ba:76:06:e1:1d:10:2b:9f:1a:fc:ed:31:db:a8:2d:
db:8e:d0:4d:7f:a2:a3:a5:91:58:ed:41:7b:f8:ff:e1:03:f6:
3b:85:40:3c:f7:d7:ea:a1:7f:cd:8e:6c:60:4e:05:9c:4d:b9:
16:12:43:ac:88:64:01:13:5d:83:14:5f:4f:3f:29:a0:f0:c4:
bb:3b:bb:66:bd:d4:b4:dd:2e:b6:99:04:d7:a1:dc:2d:a3:08:
17:1e:bb:f3:5c:fe:61:6a:47:97:da:86:b9:df:4c:df:e7:ed:
5b:d0:cf:32:4a:25:e0:ae:2a:bb:30:ea:dd:54:1d:5e:c4:bd:
f4:28:fa:56:bb:54:50:ad:b5:d0:c5:ca:a4:6d:56:4a:4d:e1:
c8:49:d8:77:93:6b:57:61:36:74:13:de:61:e9:01:9a:8f:7a:
dd:a4:e1:d3:b8:4d:44:6e:0b:28:bb:d5:a3:d3:8d:3b:bd:98:
1c:33:92:e6:f9:df:b2:7d:17:86:dd:43:ac:2e:56:b9:de:e7:
d4:6e:54:47:df:b1:89:f2:56:1f:b0:2a:9c:23:c2:7c:83:3c:
bc:ae:cb:15:1a:a9:b0:0f:7b:4d:fa:f7:38:ea:fb:44:30:6f:
46:05:ef:a5:72:a2:15:46:ec:ca:fc:47:73:2e:67:f1:21:a7:
80:92:b5:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhmlcClmFkDYx5lqsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjljZDhiYzQtNWUzYy00Y2M4LTk0MWUtMDg0MDQzZWZi
NTIwMB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk
MTE0ODQyYWItODU2OS00ZDNhLThjNTAtZDIyZTcxMTJlYzZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkOID6U9VRD2WdVKkEt03fe0/KiwVpqwTsEy
lnvDpm5gbo+Sly6vnR5i61bCZYKobbK8mFUjGnBerjrIphUR1p8BdeR2/BGq97rO
bjc4GLXQNmFVWJ8bDyLZh+SpY19XBsVv/yOH+X1r7pP6yQ2BDmEQSJa/EhkU0Fmq
Xq21VjngzkeUkmAXASCwMUbTI4O37ldJ6nBA6ljNTqDwzQ5MjEt4sNImeKeD+xEq
G9CjJT7NQ6di++V7mwZ8yNcdGx2zt4hDWqSUWOtcsE6yauTsPVDYHWDn/VM2OwYk
EiEfnzLtQm8lcNIMv4pJnqqW6qhZgPsR9CPSaBTHsoL8szGwtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHPhUGD7tEq3FugJ2Kw4g8xLXivgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82OWNk
OGJjNC01ZTNjLTRjYzgtOTQxZS0wODQwNDNlZmI1MjAvOGU1ZWQ5ZGUtODI2MC0z
ZjIzLThhNWYtODQ1YzExOTAzOWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjljZDhiYzQtNWUzYy00Y2M4LTk0
MWUtMDg0MDQzZWZiNTIwLzY5Y2Q4YmM0LTVlM2MtNGNjOC05NDFlLTA4NDA0M2Vm
YjUyMC5jcmwwHwYDVR0jBBgwFoAU8u5yVm4HrBcrJBWRIoc0mDBvYIkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82OWNkOGJjNC01ZTNjLTRjYzgtOTQxZS0wODQw
NDNlZmI1MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiQDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACxkrrp2BuEdECufGvztMduoLduO0E1/oqOlkVjtQXv4/+ED9juFQDz3
1+qhf82ObGBOBZxNuRYSQ6yIZAETXYMUX08/KaDwxLs7u2a91LTdLraZBNeh3C2j
CBceu/Nc/mFqR5fahrnfTN/n7VvQzzJKJeCuKrsw6t1UHV7EvfQo+la7VFCttdDF
yqRtVkpN4chJ2HeTa1dhNnQT3mHpAZqPet2k4dO4TURuCyi71aPTjTu9mBwzkub5
37J9F4bdQ6wuVrne59RuVEffsYnyVh+wKpwjwnyDPLyuyxUaqbAPe0369zjq+0Qw
b0YF76VyohVG7Mr8R3MuZ/Ehp4CStc8=
-----END CERTIFICATE-----
Generated at Mon May 12 11:53:32 2025 by rpki-client