Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/bb2251df-91fb-3b05-a6d9-5c6c4fe0fd0f.roa
File: bb2251df-91fb-3b05-a6d9-5c6c4fe0fd0f.roa (raw, json)
Hash identifier: wkidGlj1vJXHNgw15yGIjrAekuVh9RPNGgHBv+Et2do=
Subject key identifier: E7:F1:EB:FE:9B:1F:44:63:C3:66:9D:C8:15:BE:97:66:E8:DC:E1:4C
Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial: 010D0C9F43285848100A8338815F22FC3CB0E410
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/bb2251df-91fb-3b05-a6d9-5c6c4fe0fd0f.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 22225
IP address blocks: 173.251.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:83:38:81:5f:22:fc:3c:b0:e4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=1c459b70-a244-4ac6-9d90-cbbcfcf42ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:61:42:ec:8e:33:1d:fc:48:0c:e8:8d:a7:8b:
dc:d0:25:22:36:ad:9b:60:56:fa:e5:d5:1f:cb:b9:
2b:56:fb:29:b3:84:dd:02:49:69:c9:e5:6f:ef:64:
e5:d7:68:67:82:70:85:22:46:d9:5e:3b:43:f4:6f:
8c:b2:58:aa:fd:9d:ac:fe:5e:25:08:98:f6:6f:0e:
66:b0:43:45:34:b9:30:f4:12:ee:39:b7:d8:f2:d4:
c0:8d:5d:2a:30:3d:2f:60:64:6c:aa:20:a6:b0:4c:
2b:9d:9f:4a:e4:a8:30:d3:e1:13:34:d9:df:b8:87:
05:e9:c8:55:ff:3e:c7:e7:37:31:5d:32:cd:4e:0e:
60:1f:43:95:43:68:c2:7e:e9:41:fa:4a:af:1c:28:
38:49:23:8c:47:2e:54:4b:73:60:4d:f4:b0:21:46:
67:e5:97:30:14:d4:30:6b:07:9a:09:13:00:3e:06:
9a:db:17:ff:79:91:5a:c9:75:aa:ea:7e:98:17:4d:
53:4e:96:5c:cc:d2:2f:ab:84:bd:b6:c2:8b:5b:5b:
c0:1e:44:c9:85:b8:6a:cf:ee:d8:14:57:cd:3f:17:
8a:32:9f:bb:30:2b:d6:50:f6:90:f8:b6:c5:ff:27:
f0:62:c4:3a:97:48:a1:d2:29:b2:3b:34:ee:18:51:
e4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F1:EB:FE:9B:1F:44:63:C3:66:9D:C8:15:BE:97:66:E8:DC:E1:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/bb2251df-91fb-3b05-a6d9-5c6c4fe0fd0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
X509v3 Authority Key Identifier:
keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
sbgp-ipAddrBlock: critical
IPv4:
173.251.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:8e:eb:df:66:92:15:4c:33:82:6f:29:f4:91:8f:55:d8:47:
2f:68:00:7b:35:55:7a:1a:6f:b2:9d:12:29:e8:44:42:8c:4a:
1d:29:83:33:35:1e:9e:82:5f:fe:95:d0:40:d0:7a:60:b9:ff:
c1:04:47:0f:ef:a8:0f:73:85:3d:0d:04:8c:24:56:01:ac:69:
f3:50:7b:e2:1d:1a:8d:b4:9d:b1:65:e4:e2:b7:42:11:f7:3f:
f3:7e:a0:bb:5a:ee:6d:d9:67:02:e3:9c:48:b0:8b:5b:ce:35:
99:3e:1a:3f:3c:22:ec:d5:32:50:3b:25:37:0b:9d:76:0e:ea:
fb:5f:f7:05:6b:e9:f8:0a:0d:af:08:6c:1c:a7:a7:d9:9b:5d:
a5:72:9a:89:64:d4:4e:89:78:57:f9:53:52:d9:96:1b:9d:8d:
cf:be:d0:aa:81:77:18:8e:66:c5:b2:83:0b:86:27:75:76:3c:
ec:83:91:56:14:74:67:1c:a5:cb:92:b5:de:70:d1:db:5c:45:
35:0f:ac:51:3e:fb:ed:f4:7e:eb:08:56:5f:91:28:88:38:33:
24:7f:e1:9f:33:95:ce:33:d5:bc:5c:c5:7e:21:26:d3:42:60:
d1:77:f3:30:04:c4:47:52:bc:06:a9:b1:57:14:32:47:1e:6c:
31:5b:52:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgQCoM4gV8i/Dyw5BAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh
ZDE1MB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk
MWM0NTliNzAtYTI0NC00YWM2LTlkOTAtY2JiY2ZjZjQyZmYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2FC7I4zHfxIDOiNp4vc0CUiNq2bYFb65dUf
y7krVvsps4TdAklpyeVv72Tl12hngnCFIkbZXjtD9G+Msliq/Z2s/l4lCJj2bw5m
sENFNLkw9BLuObfY8tTAjV0qMD0vYGRsqiCmsEwrnZ9K5Kgw0+ETNNnfuIcF6chV
/z7H5zcxXTLNTg5gH0OVQ2jCfulB+kqvHCg4SSOMRy5US3NgTfSwIUZn5ZcwFNQw
aweaCRMAPgaa2xf/eZFayXWq6n6YF01TTpZczNIvq4S9tsKLW1vAHkTJhbhqz+7Y
FFfNPxeKMp+7MCvWUPaQ+LbF/yfwYsQ6l0ih0imyOzTuGFHk5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOfx6/6bH0Rjw2adyBW+l2bo3OFMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4
YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvYmIyMjUxZGYtOTFmYi0z
YjA1LWE2ZDktNWM2YzRmZTBmZDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh
YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw
YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl
OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfs8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJWO699mkhVMM4JvKfSRj1XYRy9oAHs1VXoab7KdEinoREKMSh0pgzM1
Hp6CX/6V0EDQemC5/8EERw/vqA9zhT0NBIwkVgGsafNQe+IdGo20nbFl5OK3QhH3
P/N+oLta7m3ZZwLjnEiwi1vONZk+Gj88IuzVMlA7JTcLnXYO6vtf9wVr6fgKDa8I
bBynp9mbXaVymolk1E6JeFf5U1LZlhudjc++0KqBdxiOZsWygwuGJ3V2POyDkVYU
dGccpcuStd5w0dtcRTUPrFE+++30fusIVl+RKIg4MyR/4Z8zlc4z1bxcxX4hJtNC
YNF38zAExEdSvAapsVcUMkcebDFbUrA=
-----END CERTIFICATE-----
Generated at Mon May 12 09:02:00 2025 by rpki-client