Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f/b12a3cb5-98c7-31f3-bbf2-7541da4b1fab.roa
File: b12a3cb5-98c7-31f3-bbf2-7541da4b1fab.roa (raw, json)
Hash identifier: lCfl8blKA+6FBgxXKAvbkXPHJoUSkug0WdJbMv5t+Yg=
Subject key identifier: 14:BD:A6:6B:6C:37:97:0F:2B:F9:93:5D:29:8A:F9:67:73:E5:31:4A
Certificate issuer: /CN=c9607f1e-20c8-421d-b23b-a4c9bb6b791f
Certificate serial: 010D0C9F43285848A830AF55E87206A598DEF580
Authority key identifier: 3A:9D:F6:7E:78:A2:D3:C4:F2:72:DA:86:5E:28:29:FF:EE:ED:05:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f/b12a3cb5-98c7-31f3-bbf2-7541da4b1fab.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 26962
IP address blocks: 207.71.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:af:55:e8:72:06:a5:98:de:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9607f1e-20c8-421d-b23b-a4c9bb6b791f
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=d1bb0fe1-aea3-44dd-b72b-1ff99c42d412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:41:fc:0f:f2:a4:81:b7:cc:ed:aa:82:74:
fb:e7:25:3e:d1:b7:22:a0:46:5e:13:c4:e1:a7:8b:
8d:ab:41:71:0b:86:4a:db:11:0e:48:54:a3:89:3c:
56:de:16:64:0d:3f:d8:3e:18:59:b5:50:f3:4b:a6:
0e:07:de:b4:dd:13:d1:18:ef:50:90:6e:11:5e:9f:
ea:01:c5:4f:a9:a1:eb:ce:5f:89:8f:82:fc:30:3a:
66:1e:0b:97:d1:a6:c0:99:c5:d0:48:f2:db:28:75:
17:f8:cb:9f:f2:3e:b9:4e:e7:3f:c2:85:d4:5e:3a:
b2:17:db:9a:21:bf:27:31:db:d2:29:1e:21:08:91:
e9:24:6c:ed:c2:5b:69:f2:9c:93:dd:e5:da:98:3e:
b1:4d:78:a1:82:b5:87:bc:4d:1c:21:02:9f:f9:e2:
75:1d:65:a1:3e:6e:18:74:2c:34:a6:61:50:ab:1d:
68:05:70:f1:52:73:1a:0e:66:1c:e1:f6:86:60:24:
ae:80:b6:70:c3:68:64:56:10:ba:87:f0:82:a2:9d:
e0:81:08:6b:0a:22:e2:1f:d0:1e:f5:c9:1d:da:04:
6b:f2:42:5e:e7:8f:27:11:09:c1:27:a0:3b:a4:ba:
84:5e:38:0f:40:02:9c:5c:3f:9c:b4:9e:99:15:d6:
01:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BD:A6:6B:6C:37:97:0F:2B:F9:93:5D:29:8A:F9:67:73:E5:31:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f/b12a3cb5-98c7-31f3-bbf2-7541da4b1fab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f/c9607f1e-20c8-421d-b23b-a4c9bb6b791f.crl
X509v3 Authority Key Identifier:
keyid:3A:9D:F6:7E:78:A2:D3:C4:F2:72:DA:86:5E:28:29:FF:EE:ED:05:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f.cer
sbgp-ipAddrBlock: critical
IPv4:
207.71.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:a0:d9:0e:21:14:44:63:e6:ab:ef:12:7a:ec:bf:f7:04:0d:
bc:af:6f:aa:4f:7e:65:7c:9a:ab:f5:8a:b5:97:72:aa:4a:15:
30:86:d2:75:3b:4f:3f:67:f9:8c:20:f9:d6:aa:c2:32:b5:84:
e0:87:ba:70:07:58:d3:ae:56:33:b3:1f:33:b2:d0:cd:fe:23:
28:aa:00:f0:03:fd:94:45:d9:a8:55:be:88:42:af:14:f1:48:
d5:b9:13:cd:6a:ec:5d:dc:9f:84:95:40:5f:7d:7d:65:0e:6b:
07:64:a9:81:51:f6:c8:4f:48:3e:78:2c:57:09:9f:15:0c:4d:
ea:0e:da:d8:9a:43:6c:cb:66:64:6e:55:bc:29:ca:0f:18:18:
8c:59:df:c0:b1:25:ee:50:51:38:83:db:77:49:58:ce:50:94:
0b:f6:7b:b5:4f:af:e6:70:8c:81:9b:27:05:f3:bb:1c:dc:07:
80:89:39:81:be:0d:4a:af:e7:39:e5:90:76:35:2f:3b:c5:59:
da:ff:9e:52:e4:4b:06:d5:00:d3:88:ab:10:bc:3d:30:a9:72:
fa:79:0c:30:ab:54:69:dc:37:94:41:82:b7:67:be:d8:83:88:
ba:87:af:d2:28:c5:67:34:8a:35:b6:49:57:be:18:f0:f4:6a:
f9:20:7c:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMK9V6HIGpZje9YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzk2MDdmMWUtMjBjOC00MjFkLWIyM2ItYTRjOWJiNmI3
OTFmMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk
ZDFiYjBmZTEtYWVhMy00NGRkLWI3MmItMWZmOTljNDJkNDEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKlB/A/ypIG3zO2qgnT75yU+0bcioEZeE8Th
p4uNq0FxC4ZK2xEOSFSjiTxW3hZkDT/YPhhZtVDzS6YOB9603RPRGO9QkG4RXp/q
AcVPqaHrzl+Jj4L8MDpmHguX0abAmcXQSPLbKHUX+Muf8j65Tuc/woXUXjqyF9ua
Ib8nMdvSKR4hCJHpJGztwltp8pyT3eXamD6xTXihgrWHvE0cIQKf+eJ1HWWhPm4Y
dCw0pmFQqx1oBXDxUnMaDmYc4faGYCSugLZww2hkVhC6h/CCop3ggQhrCiLiH9Ae
9ckd2gRr8kJe548nEQnBJ6A7pLqEXjgPQAKcXD+ctJ6ZFdYB6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBS9pmtsN5cPK/mTXSmK+Wdz5TFKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTYw
N2YxZS0yMGM4LTQyMWQtYjIzYi1hNGM5YmI2Yjc5MWYvYjEyYTNjYjUtOThjNy0z
MWYzLWJiZjItNzU0MWRhNGIxZmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzk2MDdmMWUtMjBjOC00MjFkLWIy
M2ItYTRjOWJiNmI3OTFmL2M5NjA3ZjFlLTIwYzgtNDIxZC1iMjNiLWE0YzliYjZi
NzkxZi5jcmwwHwYDVR0jBBgwFoAUOp32fnii08TyctqGXigp/+7tBR8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jOTYwN2YxZS0yMGM4LTQyMWQtYjIzYi1hNGM5
YmI2Yjc5MWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz0egMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAKg2Q4hFERj5qvvEnrsv/cEDbyvb6pPfmV8mqv1irWXcqpKFTCG0nU7
Tz9n+Ywg+daqwjK1hOCHunAHWNOuVjOzHzOy0M3+IyiqAPAD/ZRF2ahVvohCrxTx
SNW5E81q7F3cn4SVQF99fWUOawdkqYFR9shPSD54LFcJnxUMTeoO2tiaQ2zLZmRu
Vbwpyg8YGIxZ38CxJe5QUTiD23dJWM5QlAv2e7VPr+ZwjIGbJwXzuxzcB4CJOYG+
DUqv5znlkHY1LzvFWdr/nlLkSwbVANOIqxC8PTCpcvp5DDCrVGncN5RBgrdnvtiD
iLqHr9IoxWc0ijW2SVe+GPD0avkgfLQ=
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:07:00 2025 by rpki-client