Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/0409d953-fb93-3031-9957-e0cd196421fa.roa
File: 0409d953-fb93-3031-9957-e0cd196421fa.roa (raw, json)
Hash identifier: YEv1wpp5uxDsVrRD2sRJOhG9n/8lzqhOTHYIAUnABXE=
Subject key identifier: A8:17:FB:6D:6C:F3:85:EA:EF:03:7A:2B:BB:15:DA:5F:C2:00:36:08
Certificate issuer: /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
Certificate serial: 010D0C9F43285848194616EADF522263C4748F14
Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/0409d953-fb93-3031-9957-e0cd196421fa.roa
Signing time: Wed 04 Dec 2024 21:23:19 +0000
ROA not before: Wed 04 Dec 2024 21:23:19 +0000
ROA not after: Tue 04 Mar 2025 21:23:19 +0000
asID: 16509
IP address blocks: 159.143.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:46:16:ea:df:52:22:63:c4:74:8f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
Validity
Not Before: Dec 4 21:23:19 2024 GMT
Not After : Mar 4 21:23:19 2025 GMT
Subject: CN=ecbfddfa-f59d-46ac-a55f-928e09393e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:43:f9:69:95:f9:3d:c8:7f:eb:9a:2d:5e:fd:
83:fe:d4:00:19:b4:f5:09:63:01:b7:3b:00:10:06:
3c:4c:f4:72:73:83:14:1f:95:02:d5:30:67:33:b1:
88:c9:96:be:e2:08:b3:2c:71:20:2b:49:c2:37:a8:
59:79:2c:c7:0e:8e:58:aa:5d:a8:05:07:12:6f:e4:
46:65:8f:89:b3:4e:5d:9a:32:04:0b:b0:b3:5d:f5:
18:5c:0e:b7:c8:ff:5f:3a:7e:83:94:bb:85:a6:71:
b4:7b:3a:e6:fb:df:21:64:37:35:05:30:30:f7:11:
1a:bc:c4:c5:c5:b2:6e:5e:90:a9:f3:3c:91:85:ab:
8a:2d:07:09:c7:9b:aa:ce:0c:70:11:f6:1a:e6:75:
81:d9:05:70:a0:d5:bc:46:db:9a:5f:76:64:d3:69:
0c:81:e3:db:b9:2a:65:85:41:24:2b:3c:b5:48:65:
c9:6a:4e:dd:ca:d5:27:44:7d:4c:ce:db:c3:38:e4:
6f:e3:e7:7a:11:2c:1e:80:a1:e1:bd:e7:e1:08:8d:
6f:94:67:02:39:02:e6:0e:f9:91:85:0a:93:b5:b3:
40:4f:63:11:3e:71:46:46:79:5e:b2:a1:ce:61:d3:
5b:64:f9:21:51:40:fd:66:ea:87:10:bd:ef:25:5b:
e5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:17:FB:6D:6C:F3:85:EA:EF:03:7A:2B:BB:15:DA:5F:C2:00:36:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/0409d953-fb93-3031-9957-e0cd196421fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl
X509v3 Authority Key Identifier:
keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
sbgp-ipAddrBlock: critical
IPv4:
159.143.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:cc:bf:28:a9:dd:b4:ac:40:be:fc:b9:51:23:54:68:40:43:
e0:98:58:34:cb:6f:00:d7:f3:f6:28:c8:2f:b2:9f:2c:e2:a0:
67:80:e0:80:63:5d:ea:d2:4b:3d:d2:85:31:90:df:79:e9:2f:
48:ee:53:c5:c1:f1:45:1b:3d:cb:3b:c8:f9:60:b1:68:01:a8:
d9:db:4d:f0:59:59:a6:4d:d0:d2:c4:73:bc:a3:19:00:ea:5f:
2b:fe:49:58:3a:d8:ab:84:da:e8:ed:cf:82:77:c6:80:ce:2a:
54:3b:65:ea:34:11:33:f6:11:10:d1:17:1b:68:37:31:c7:33:
d4:76:cf:73:73:8d:d8:ec:ee:37:1d:4f:f7:9d:c8:6c:4b:12:
8d:96:16:59:81:e5:49:9c:87:28:ec:57:7a:46:6a:d3:3b:4a:
01:7b:9e:16:06:a7:6f:8c:aa:80:29:45:ae:44:4b:8a:8d:f8:
30:d3:b6:71:b7:e2:c1:58:91:ce:6c:c1:3c:01:99:08:39:ad:
69:b3:53:e6:1c:74:ac:73:ba:93:01:7f:70:69:1a:9a:12:93:
27:31:d4:4e:6a:c9:05:73:16:53:f6:50:75:78:71:e1:d1:6e:
f3:64:7d:9e:e3:39:57:93:fe:5c:89:f2:49:f3:53:a5:c1:15:
e3:34:44:c8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEgZRhbq31IiY8R0jxQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzdmZDI1YTItMzA0MS00MzFkLWE2YTktYzQwOWI0Mjgz
NWExMB4XDTI0MTIwNDIxMjMxOVoXDTI1MDMwNDIxMjMxOVowLzEtMCsGA1UEAxMk
ZWNiZmRkZmEtZjU5ZC00NmFjLWE1NWYtOTI4ZTA5MzkzZTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUP5aZX5Pch/65otXv2D/tQAGbT1CWMBtzsA
EAY8TPRyc4MUH5UC1TBnM7GIyZa+4gizLHEgK0nCN6hZeSzHDo5Yql2oBQcSb+RG
ZY+Js05dmjIEC7CzXfUYXA63yP9fOn6DlLuFpnG0ezrm+98hZDc1BTAw9xEavMTF
xbJuXpCp8zyRhauKLQcJx5uqzgxwEfYa5nWB2QVwoNW8RtuaX3Zk02kMgePbuSpl
hUEkKzy1SGXJak7dytUnRH1MztvDOORv4+d6ESwegKHhvefhCI1vlGcCOQLmDvmR
hQqTtbNAT2MRPnFGRnlesqHOYdNbZPkhUUD9ZuqHEL3vJVvlYwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKgX+21s84Xq7wN6K7sV2l/CADYIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Zk
MjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5YjQyODM1YTEvMDQwOWQ5NTMtZmI5My0z
MDMxLTk5NTctZTBjZDE5NjQyMWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdmZDI1YTItMzA0MS00MzFkLWE2
YTktYzQwOWI0MjgzNWExL2M3ZmQyNWEyLTMwNDEtNDMxZC1hNmE5LWM0MDliNDI4
MzVhMS5jcmwwHwYDVR0jBBgwFoAUNXEKw9dxeaFzg95nCkio4CDv6IUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2ZkMjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5
YjQyODM1YTEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAn48wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAb8y/KKndtKxAvvy5USNUaEBD4JhYNMtvANfz9ijIL7KfLOKgZ4DggGNd
6tJLPdKFMZDfeekvSO5TxcHxRRs9yzvI+WCxaAGo2dtN8FlZpk3Q0sRzvKMZAOpf
K/5JWDrYq4Ta6O3PgnfGgM4qVDtl6jQRM/YRENEXG2g3Mccz1HbPc3ON2OzuNx1P
953IbEsSjZYWWYHlSZyHKOxXekZq0ztKAXueFganb4yqgClFrkRLio34MNO2cbfi
wViRzmzBPAGZCDmtabNT5hx0rHO6kwF/cGkamhKTJzHUTmrJBXMWU/ZQdXhx4dFu
82R9nuM5V5P+XInySfNTpcEV4zREyA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:19 2025 by rpki-client