Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8e05e8c-2a1f-30c4-a4e5-cfcf0192b791.roa
File: c8e05e8c-2a1f-30c4-a4e5-cfcf0192b791.roa (raw, json)
Hash identifier: xj4UoT4SCXnbN5+ZUz1vTm+IdbBdPWFNOOqgv3uaXVI=
Subject key identifier: 26:98:88:43:52:18:55:F3:7E:30:8A:85:29:72:F3:37:E6:38:28:3F
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A5365F788947117EA7600
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8e05e8c-2a1f-30c4-a4e5-cfcf0192b791.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 173.194.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:53:65:f7:88:94:71:17:ea:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=3ff4523a-ef94-47eb-8050-a8e7fba1cea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3d:16:2f:a7:f1:b3:02:88:eb:ea:22:3a:b5:
38:eb:4a:c4:e2:6c:94:17:8c:ae:2e:22:c2:c0:ff:
ad:14:2a:38:55:26:d0:79:74:98:b5:77:d6:d4:19:
12:9b:5a:83:2d:8c:99:d4:1c:51:07:fe:8e:9a:b5:
bb:09:c6:e4:3c:23:a8:28:7a:6b:79:22:ab:e8:23:
9f:dd:8c:d3:7d:a8:61:61:a0:51:74:40:b4:2f:67:
fb:e0:be:1c:31:43:05:ca:14:8d:ed:fe:e7:46:ed:
91:46:e1:a5:08:c7:4a:ce:a1:4b:25:1a:ba:c7:6c:
fc:39:7a:79:df:5c:34:c3:89:5e:89:e2:10:9b:bc:
f1:b8:24:72:9a:ed:0c:9b:63:ac:3e:6d:b4:f3:48:
a1:b5:47:a7:14:ab:32:81:e2:fe:de:55:59:1c:13:
f2:11:b2:6d:2e:2c:78:a1:23:a5:a9:be:1c:95:ba:
76:fd:2d:6e:32:da:51:32:c2:a8:4a:03:39:fe:ee:
83:fd:ef:c7:a3:87:a1:6c:53:94:14:9e:4c:e9:9a:
f8:a1:f6:e0:fc:de:e0:8b:db:9a:8b:3a:7b:6c:8e:
97:ff:5d:8b:68:73:b0:5d:f4:d1:69:de:96:8f:c4:
83:91:0a:7f:b4:9b:4a:70:9b:d4:1f:c4:7e:7a:ab:
54:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:98:88:43:52:18:55:F3:7E:30:8A:85:29:72:F3:37:E6:38:28:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8e05e8c-2a1f-30c4-a4e5-cfcf0192b791.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:9a:06:33:29:2f:d4:7e:e5:92:d7:e1:f8:b8:17:27:43:9b:
49:a3:e6:33:ec:73:8e:f1:9a:fe:ab:46:49:40:c8:de:c7:54:
58:33:b8:b1:ae:6c:5e:c4:83:3b:dc:18:ec:a7:9d:58:67:1c:
ac:ea:b8:56:88:9e:12:6c:01:80:7a:dd:ed:47:45:ba:9c:1a:
15:e1:77:48:5e:ef:4a:f6:21:36:25:08:63:b9:6e:4a:b7:f7:
61:cb:00:83:5f:2b:0b:1c:36:fd:f0:32:ac:69:2c:f7:f7:c8:
6e:1f:19:5f:a7:23:f6:e5:ed:0c:2b:57:6b:1f:a2:e4:0e:04:
de:9a:b6:fe:eb:b6:71:bf:0e:17:2c:1d:1a:d6:17:00:db:54:
40:d1:74:5f:84:d9:0c:bf:62:cb:45:7a:bf:1b:25:7f:d1:5b:
6d:a7:cb:d5:ee:e2:11:c6:be:fb:5d:d4:8c:62:49:b8:41:ee:
5c:bd:88:78:56:33:0b:4b:c6:f2:ce:41:cd:02:92:1a:3e:ff:
c1:5c:f7:f6:f4:29:90:28:78:f5:07:95:43:f0:41:3d:7f:b6:
e1:07:a1:9a:d4:95:63:5a:db:b7:3a:db:c9:21:bf:8f:b0:63:
47:0f:40:ff:de:e2:94:8f:13:7c:60:69:8e:82:9f:33:2e:93:
94:f1:24:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf/SlNl94iUcRfqdgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI0MTEyNTE0MDAzOVoXDTI1MDIyMzE0MDAzOVowLzEtMCsGA1UEAxMk
M2ZmNDUyM2EtZWY5NC00N2ViLTgwNTAtYThlN2ZiYTFjZWE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgj0WL6fxswKI6+oiOrU460rE4myUF4yuLiLC
wP+tFCo4VSbQeXSYtXfW1BkSm1qDLYyZ1BxRB/6OmrW7CcbkPCOoKHpreSKr6COf
3YzTfahhYaBRdEC0L2f74L4cMUMFyhSN7f7nRu2RRuGlCMdKzqFLJRq6x2z8OXp5
31w0w4leieIQm7zxuCRymu0Mm2OsPm2080ihtUenFKsygeL+3lVZHBPyEbJtLix4
oSOlqb4clbp2/S1uMtpRMsKoSgM5/u6D/e/Ho4ehbFOUFJ5M6Zr4ofbg/N7gi9ua
izp7bI6X/12LaHOwXfTRad6Wj8SDkQp/tJtKcJvUH8R+eqtU8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCaYiENSGFXzfjCKhSly8zfmOCg/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzhlMDVlOGMtMmExZi0z
MGM0LWE0ZTUtY2ZjZjAxOTJiNzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEqaBjMpL9R+5ZLX4fi4FydDm0mj5jPsc47xmv6rRklAyN7HVFgzuLGu
bF7EgzvcGOynnVhnHKzquFaInhJsAYB63e1HRbqcGhXhd0he70r2ITYlCGO5bkq3
92HLAINfKwscNv3wMqxpLPf3yG4fGV+nI/bl7QwrV2sfouQOBN6atv7rtnG/Dhcs
HRrWFwDbVEDRdF+E2Qy/YstFer8bJX/RW22ny9Xu4hHGvvtd1IxiSbhB7ly9iHhW
MwtLxvLOQc0Ckho+/8Fc9/b0KZAoePUHlUPwQT1/tuEHoZrUlWNa27c628khv4+w
Y0cPQP/e4pSPE3xgaY6CnzMuk5TxJEQ=
-----END CERTIFICATE-----
Generated at Fri May 9 18:41:06 2025 by rpki-client