Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae771f74-2147-3ae3-a00c-8c3584555bcf.roa
File: ae771f74-2147-3ae3-a00c-8c3584555bcf.roa (raw, json)
Hash identifier: XCuBeEsSsNB1Mq2n0f7En+pw4uE+ri8xjLU8HSfw0cQ=
Subject key identifier: D2:D4:08:ED:01:FC:6C:8B:3F:32:6C:6C:97:C7:30:42:CD:5A:C9:52
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848100A9B6BAA2DA9D686BD6400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae771f74-2147-3ae3-a00c-8c3584555bcf.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 6167
IP address blocks: 174.42.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:9b:6b:aa:2d:a9:d6:86:bd:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=0029509a-d101-43ae-b619-54960476f9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:be:48:3f:d0:7b:ed:2b:52:d9:ad:90:94:fa:
63:b0:3b:42:17:22:90:46:f7:76:23:4a:f0:a3:eb:
13:75:23:c0:d9:f9:a8:fb:77:1f:f3:5a:27:43:ce:
6c:b9:85:97:6d:db:47:db:9d:c0:40:6a:9e:58:13:
b4:b2:66:65:85:cf:ff:1a:6b:ca:0f:b6:88:86:ae:
e2:58:28:a7:f4:ce:a2:db:7a:ab:30:c5:15:17:16:
e9:25:6c:02:6c:3a:46:96:b4:62:76:5a:fa:71:f8:
e7:5b:73:56:84:66:12:d8:e0:5a:6f:87:c1:dc:b4:
46:b7:a0:1c:b2:29:a9:ae:3f:46:5d:0c:13:4c:22:
36:9d:11:32:ce:e9:17:6c:0b:4e:7a:ca:a9:53:db:
10:f3:1e:36:e8:3e:3d:17:b6:27:55:6a:e1:84:56:
58:c9:68:9f:ca:5c:0e:7e:ab:fc:7d:1d:39:dc:42:
d1:65:23:f1:9d:26:f4:88:51:eb:ec:74:6c:1a:68:
93:fc:d8:43:ca:f1:e1:e3:f3:27:9f:cb:5d:81:e9:
a9:13:a6:60:49:9b:b6:72:66:47:a6:b0:b6:d0:f2:
f1:ab:09:24:1b:02:ce:3f:6c:df:43:17:ea:42:87:
fa:2c:c3:c2:ed:cc:67:e9:df:93:c1:51:1b:1e:6f:
06:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D4:08:ED:01:FC:6C:8B:3F:32:6C:6C:97:C7:30:42:CD:5A:C9:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae771f74-2147-3ae3-a00c-8c3584555bcf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.42.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:2b:b0:74:b2:aa:3a:65:e2:57:0a:c0:3a:dc:91:30:93:48:
19:63:94:19:8a:1b:e3:b6:87:64:ca:36:c7:11:5d:5f:0c:09:
34:82:4e:b5:58:8a:f6:ad:f3:e6:76:f0:6e:35:c5:f7:2a:08:
e5:50:b1:ab:4c:e3:8e:fc:6d:f4:cd:c5:c9:9b:b6:f9:43:79:
02:bd:8c:f0:13:4f:03:35:fe:e9:a9:bd:34:73:6d:d8:95:52:
a4:2a:f0:d7:df:2e:c0:ed:9a:72:53:ea:03:b7:c1:24:b0:d3:
62:09:f6:59:e0:ab:04:45:a5:f3:2a:22:a6:ba:c6:44:04:17:
86:ab:85:c7:33:86:59:9a:b7:f8:31:5c:00:b4:6c:67:f9:24:
33:75:4b:f8:75:21:25:48:94:49:63:cf:bd:cb:39:d0:26:06:
a2:ed:f6:59:30:55:78:14:ab:87:4a:23:1f:3b:93:1f:42:2f:
3a:4a:29:5c:e2:1c:b4:61:62:7e:3f:71:5e:da:fb:82:fe:06:
a0:cc:44:fe:a5:1b:b0:b9:10:81:9a:44:69:6e:1c:b6:cf:61:
48:55:d5:1d:25:72:d7:56:4d:50:f4:19:c0:bd:ef:99:7f:60:
d9:45:6f:5e:ab:17:d0:d8:a2:b7:1a:ba:b6:38:ba:bd:0f:44:
1b:2a:14:0a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEgQCptrqi2p1oa9ZAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk
MDAyOTUwOWEtZDEwMS00M2FlLWI2MTktNTQ5NjA0NzZmOWJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb5IP9B77StS2a2QlPpjsDtCFyKQRvd2I0rw
o+sTdSPA2fmo+3cf81onQ85suYWXbdtH253AQGqeWBO0smZlhc//GmvKD7aIhq7i
WCin9M6i23qrMMUVFxbpJWwCbDpGlrRidlr6cfjnW3NWhGYS2OBab4fB3LRGt6Ac
simprj9GXQwTTCI2nREyzukXbAtOesqpU9sQ8x426D49F7YnVWrhhFZYyWifylwO
fqv8fR053ELRZSPxnSb0iFHr7HRsGmiT/NhDyvHh4/Mnn8tdgempE6ZgSZu2cmZH
prC20PLxqwkkGwLOP2zfQxfqQof6LMPC7cxn6d+TwVEbHm8GwwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNLUCO0B/GyLPzJsbJfHMELNWslSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWU3NzFmNzQtMjE0Ny0z
YWUzLWEwMGMtOGMzNTg0NTU1YmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBriowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAhiuwdLKqOmXiVwrAOtyRMJNIGWOUGYob47aHZMo2xxFdXwwJNIJOtViK
9q3z5nbwbjXF9yoI5VCxq0zjjvxt9M3FyZu2+UN5Ar2M8BNPAzX+6am9NHNt2JVS
pCrw198uwO2aclPqA7fBJLDTYgn2WeCrBEWl8yoiprrGRAQXhquFxzOGWZq3+DFc
ALRsZ/kkM3VL+HUhJUiUSWPPvcs50CYGou32WTBVeBSrh0ojHzuTH0IvOkopXOIc
tGFifj9xXtr7gv4GoMxE/qUbsLkQgZpEaW4cts9hSFXVHSVy11ZNUPQZwL3vmX9g
2UVvXqsX0Niitxq6tji6vQ9EGyoUCg==
-----END CERTIFICATE-----
Generated at Wed May 14 06:35:50 2025 by rpki-client