Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/a1f6d499-4f97-3e96-b33e-adb8ba79683d.roa
File: a1f6d499-4f97-3e96-b33e-adb8ba79683d.roa (raw, json)
Hash identifier: MSlLP3iwmxR7U8avJ4zmWTP7EmCzaPyes2a1kO4VjKA=
Subject key identifier: 9E:C8:A5:4C:C9:93:03:18:59:3D:92:64:71:D3:77:CF:AB:DF:56:7B
Certificate issuer: /CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf
Certificate serial: 010D0C9F43285848494571D0D2D3E8F215D76680
Authority key identifier: 0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/a1f6d499-4f97-3e96-b33e-adb8ba79683d.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 18587
IP address blocks: 204.209.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:71:d0:d2:d3:e8:f2:15:d7:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=381dd8b2-91f8-4a23-8820-5a41463d588f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:8c:ea:61:74:5a:19:1b:b7:02:34:56:68:01:
f5:f6:79:19:de:2e:89:5d:33:60:bb:24:a6:f0:3a:
7c:3d:40:23:e5:76:0b:af:62:b5:30:eb:7c:6d:5d:
55:57:05:24:d3:b5:bf:92:39:74:c3:09:94:53:62:
92:36:fb:0f:b5:65:81:5f:16:b8:0c:14:15:16:09:
b8:66:ff:a2:f0:20:13:ce:22:69:95:50:e0:b6:80:
c2:77:92:fd:65:9f:7b:82:72:01:0b:c8:4b:ba:93:
bc:54:31:ed:4a:aa:aa:9e:de:fe:be:5e:1a:4c:99:
b6:14:45:ff:7a:f4:4e:18:28:e1:04:fb:0c:15:71:
4f:f4:1b:0d:09:8d:8b:25:e0:4a:6d:66:8b:74:09:
6c:a2:5b:01:74:ba:2c:39:e7:3b:c6:43:77:6a:bf:
fd:23:00:29:b0:0c:f1:59:d3:c0:fb:95:40:68:48:
0b:94:db:d9:2d:d1:41:b3:2f:d6:3c:b3:d5:0c:f0:
c7:53:6b:64:2b:a9:20:20:2d:d2:20:a7:64:36:5c:
93:23:05:74:89:ba:14:d9:8f:96:11:13:4b:51:32:
9e:7a:74:b9:49:c2:ee:e2:f8:0c:19:41:b9:4f:27:
e6:9e:f4:7b:bc:50:ce:1b:64:15:89:5c:89:87:d6:
9d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C8:A5:4C:C9:93:03:18:59:3D:92:64:71:D3:77:CF:AB:DF:56:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/a1f6d499-4f97-3e96-b33e-adb8ba79683d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl
X509v3 Authority Key Identifier:
keyid:0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer
sbgp-ipAddrBlock: critical
IPv4:
204.209.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:2f:a9:17:9c:df:b1:22:d7:db:60:71:9b:e5:85:c7:d1:d1:
a4:00:d0:85:4e:3e:97:12:9f:df:e2:45:4f:64:75:b0:8c:4a:
be:23:d6:17:a5:ae:fd:f9:cc:b8:1a:36:bb:90:6c:e6:ee:0d:
5b:71:84:be:e3:b0:2c:74:d1:08:94:f7:e0:48:05:2c:03:9f:
37:0e:0e:50:7c:51:43:f5:c5:ae:7c:24:e8:34:de:cc:ac:1e:
c3:9c:f2:b8:03:a2:e1:54:64:e9:37:65:d9:5b:d5:63:ff:48:
5f:54:42:3c:01:60:7f:c5:26:7d:92:94:86:95:d4:fe:bb:a2:
0d:9d:5d:6f:b9:29:43:a6:1a:9e:a7:d8:d2:1e:b6:8a:14:0d:
25:50:ad:00:2a:ee:3d:fb:2c:3c:22:ff:fe:83:8f:0b:c4:be:
1f:74:fe:72:2b:83:ff:83:54:fa:bf:fb:f7:f0:1e:ce:9d:da:
4b:f0:76:1c:25:ad:f8:8a:db:d5:98:26:1b:dc:f7:7b:b7:e0:
97:08:5c:db:42:cf:33:82:8d:1b:57:10:74:9b:d1:27:9e:e7:
78:78:ff:25:bb:fe:84:dd:f7:2b:60:0c:63:f0:b5:51:57:7b:
0e:e7:c8:0c:39:3d:f7:30:19:5b:0d:78:4d:a3:17:38:24:05:
92:8e:be:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhJRXHQ0tPo8hXXZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjlkMzViNWQtYjU2YS00OWVhLWJlMDEtZmNiZmY4ZTAy
ZmNmMB4XDTI0MTIyMjAyMDAzOVoXDTI1MDMyMjAxMDAzOVowLzEtMCsGA1UEAxMk
MzgxZGQ4YjItOTFmOC00YTIzLTg4MjAtNWE0MTQ2M2Q1ODhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9YzqYXRaGRu3AjRWaAH19nkZ3i6JXTNguySm
8Dp8PUAj5XYLr2K1MOt8bV1VVwUk07W/kjl0wwmUU2KSNvsPtWWBXxa4DBQVFgm4
Zv+i8CATziJplVDgtoDCd5L9ZZ97gnIBC8hLupO8VDHtSqqqnt7+vl4aTJm2FEX/
evROGCjhBPsMFXFP9BsNCY2LJeBKbWaLdAlsolsBdLosOec7xkN3ar/9IwApsAzx
WdPA+5VAaEgLlNvZLdFBsy/WPLPVDPDHU2tkK6kgIC3SIKdkNlyTIwV0iboU2Y+W
ERNLUTKeenS5ScLu4vgMGUG5TyfmnvR7vFDOG2QViVyJh9adbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ7IpUzJkwMYWT2SZHHTd8+r31Z7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yOWQz
NWI1ZC1iNTZhLTQ5ZWEtYmUwMS1mY2JmZjhlMDJmY2YvYTFmNmQ0OTktNGY5Ny0z
ZTk2LWIzM2UtYWRiOGJhNzk2ODNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjlkMzViNWQtYjU2YS00OWVhLWJl
MDEtZmNiZmY4ZTAyZmNmLzI5ZDM1YjVkLWI1NmEtNDllYS1iZTAxLWZjYmZmOGUw
MmZjZi5jcmwwHwYDVR0jBBgwFoAUCuttE9fwYHuK0QB7KKCVi0UQpC0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yOWQzNWI1ZC1iNTZhLTQ5ZWEtYmUwMS1mY2Jm
ZjhlMDJmY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzNHYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEQvqRec37Ei19tgcZvlhcfR0aQA0IVOPpcSn9/iRU9kdbCMSr4j1hel
rv35zLgaNruQbObuDVtxhL7jsCx00QiU9+BIBSwDnzcODlB8UUP1xa58JOg03sys
HsOc8rgDouFUZOk3Zdlb1WP/SF9UQjwBYH/FJn2SlIaV1P67og2dXW+5KUOmGp6n
2NIetooUDSVQrQAq7j37LDwi//6DjwvEvh90/nIrg/+DVPq/+/fwHs6d2kvwdhwl
rfiK29WYJhvc93u34JcIXNtCzzOCjRtXEHSb0See53h4/yW7/oTd9ytgDGPwtVFX
ew7nyAw5PfcwGVsNeE2jFzgkBZKOvoY=
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:54:42 2025 by rpki-client