Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/f9db3b81-c9ae-3fc4-9a09-da235717f7ae.roa
File: f9db3b81-c9ae-3fc4-9a09-da235717f7ae.roa (raw, json)
Hash identifier: 2dIaiF+CxCotDUa4Y+cgImX8D4By/0Hca5UpcTfDobc=
Subject key identifier: EE:69:F5:4D:C2:02:EB:3B:5A:8E:BB:3C:41:F6:58:8F:D3:7A:76:F8
Certificate issuer: /CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
Certificate serial: 010D0C9F432858484C101E428D0EC031D6D95700
Authority key identifier: 61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/f9db3b81-c9ae-3fc4-9a09-da235717f7ae.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 3561
IP address blocks: 207.170.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:1e:42:8d:0e:c0:31:d6:d9:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=62985e1b-cf48-43c9-bbd3-3d483ea8121e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d2:42:0f:f0:5d:65:6e:69:cc:5a:8d:39:83:
e1:98:19:82:e1:fb:d9:26:c4:44:f8:fe:e5:bb:7d:
6f:c6:ff:76:8e:23:3f:e6:5a:af:03:8b:66:ef:7d:
dd:80:f9:0b:34:2c:9f:c9:e1:42:6f:11:d1:73:c3:
c2:84:ec:ba:6f:12:6e:9e:a5:4d:54:a0:09:47:1d:
d3:79:11:61:40:51:de:69:d2:cc:82:62:0c:d9:25:
71:d1:76:d6:3f:1f:08:fa:7d:1e:5d:a5:e8:b3:0e:
03:2e:5a:9b:fd:29:de:35:2b:f7:84:0c:06:b4:d4:
c4:ac:b5:36:4a:fe:50:c1:29:bc:2f:87:14:8b:55:
48:95:65:59:9e:78:06:90:03:12:21:df:61:08:ff:
45:78:7e:01:6a:7f:12:38:0d:f8:71:b7:12:45:25:
6d:00:11:ef:c9:17:90:d3:86:da:b3:9c:3e:3c:aa:
88:c8:95:59:f2:97:10:e3:2e:64:85:92:17:20:1a:
76:6f:22:e9:b5:6b:45:60:0c:4a:83:90:e3:e1:e6:
2e:6e:23:cd:68:78:5c:84:5d:84:12:55:18:7d:1b:
15:25:e5:b8:ee:8d:74:92:9b:0d:47:28:32:38:99:
1d:b2:7b:ae:fb:e8:ef:ed:fb:e4:ac:2a:52:8e:9f:
d8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:69:F5:4D:C2:02:EB:3B:5A:8E:BB:3C:41:F6:58:8F:D3:7A:76:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/f9db3b81-c9ae-3fc4-9a09-da235717f7ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl
X509v3 Authority Key Identifier:
keyid:61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
sbgp-ipAddrBlock: critical
IPv4:
207.170.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:5b:6d:ec:09:15:a3:f2:38:61:ce:8b:d0:1f:b6:82:90:ce:
c4:22:0d:4c:84:b5:2b:06:ed:7a:2a:b6:47:ee:a7:c8:b9:8f:
df:7e:c5:8c:88:74:52:0d:27:90:b9:81:f2:b8:6d:e9:2f:3a:
ac:8a:6b:cb:a4:60:9d:c0:dd:11:10:9e:c8:b6:f1:96:b3:11:
ed:70:79:a6:46:c4:d5:43:4e:81:de:fa:ef:9f:93:9b:30:58:
5a:77:b2:03:a0:69:85:ed:c7:7f:e9:92:82:a7:6d:27:41:5e:
5f:c3:a6:fe:d0:f2:e9:e3:6b:25:fe:bc:3f:82:e3:bf:90:a6:
e5:87:f7:56:0a:e3:50:ea:fe:b5:1a:c5:1d:e2:65:5a:d1:5d:
50:bc:a3:38:8b:56:3d:2e:04:23:fa:4d:1b:15:c4:3d:c2:74:
1d:81:8b:2b:7a:9e:7a:38:9b:a9:09:bb:84:ab:3d:39:38:5b:
f5:4a:66:de:06:8e:db:9b:44:51:bd:04:76:46:57:88:1a:4e:
66:e1:90:00:e0:71:01:f8:3a:05:fd:e6:1a:2c:05:6d:42:f3:
d0:6f:e3:54:8b:60:88:79:09:30:f3:bf:8a:29:59:5e:a2:cf:
35:ad:e2:71:21:a2:3d:85:db:49:38:d4:4b:15:11:11:55:9e:
a1:6b:e1:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEB5CjQ7AMdbZVwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWZhYjYzNzgtZTE1ZC00NDcxLWIwMWYtYmUxNWZjNWJm
YTA0MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
NjI5ODVlMWItY2Y0OC00M2M5LWJiZDMtM2Q0ODNlYTgxMjFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9JCD/BdZW5pzFqNOYPhmBmC4fvZJsRE+P7l
u31vxv92jiM/5lqvA4tm733dgPkLNCyfyeFCbxHRc8PChOy6bxJunqVNVKAJRx3T
eRFhQFHeadLMgmIM2SVx0XbWPx8I+n0eXaXosw4DLlqb/SneNSv3hAwGtNTErLU2
Sv5QwSm8L4cUi1VIlWVZnngGkAMSId9hCP9FeH4Ban8SOA34cbcSRSVtABHvyReQ
04bas5w+PKqIyJVZ8pcQ4y5khZIXIBp2byLptWtFYAxKg5Dj4eYubiPNaHhchF2E
ElUYfRsVJeW47o10kpsNRygyOJkdsnuu++jv7fvkrCpSjp/YgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO5p9U3CAus7Wo67PEH2WI/Tenb4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81ZmFi
NjM3OC1lMTVkLTQ0NzEtYjAxZi1iZTE1ZmM1YmZhMDQvZjlkYjNiODEtYzlhZS0z
ZmM0LTlhMDktZGEyMzU3MTdmN2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWZhYjYzNzgtZTE1ZC00NDcxLWIw
MWYtYmUxNWZjNWJmYTA0LzVmYWI2Mzc4LWUxNWQtNDQ3MS1iMDFmLWJlMTVmYzVi
ZmEwNC5jcmwwHwYDVR0jBBgwFoAUYUBDv+JQs0dk/NFzD2KYA1AyGNIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS81ZmFiNjM3OC1lMTVkLTQ0NzEtYjAxZi1iZTE1
ZmM1YmZhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz6qwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALBbbewJFaPyOGHOi9AftoKQzsQiDUyEtSsG7Xoqtkfup8i5j99+xYyI
dFINJ5C5gfK4bekvOqyKa8ukYJ3A3REQnsi28ZazEe1weaZGxNVDToHe+u+fk5sw
WFp3sgOgaYXtx3/pkoKnbSdBXl/Dpv7Q8unjayX+vD+C47+QpuWH91YK41Dq/rUa
xR3iZVrRXVC8oziLVj0uBCP6TRsVxD3CdB2Biyt6nno4m6kJu4SrPTk4W/VKZt4G
jtubRFG9BHZGV4gaTmbhkADgcQH4OgX95hosBW1C89Bv41SLYIh5CTDzv4opWV6i
zzWt4nEhoj2F20k41EsVERFVnqFr4VI=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:37:06 2025 by rpki-client