Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be735685-067e-32e1-980d-0d33feb69b8b.roa
File: be735685-067e-32e1-980d-0d33feb69b8b.roa (raw, json)
Hash identifier: Qf3VCSGW10ywhSV9bI8Wa14c/JXcknrBpSOjm4A0KB4=
Subject key identifier: FC:21:E0:FA:30:9C:D4:95:EF:B5:BC:F5:9A:5D:86:53:FD:EC:83:85
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858482BF5622A33EE3217790AAF80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be735685-067e-32e1-980d-0d33feb69b8b.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 701
IP address blocks: 96.233.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:62:2a:33:ee:32:17:79:0a:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=a39ec27d-9df5-4321-bb31-1f8184af9278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7e:f3:2e:48:3a:13:01:1d:96:b1:29:46:80:
97:58:15:bb:b0:51:96:a8:a6:78:28:fd:bd:dc:e2:
3f:af:e8:2d:f0:e9:04:59:0d:59:ed:13:d3:67:9e:
6c:a0:76:79:be:a4:a0:14:c6:52:f9:dc:fa:66:62:
2d:02:cd:ec:33:5c:3f:93:8a:34:b1:07:78:f9:29:
4d:22:94:da:5c:43:12:a9:75:8c:b2:7b:48:85:16:
2c:c0:b5:b3:30:2a:45:84:3e:7b:66:b5:12:84:91:
e7:37:d0:e9:de:84:c8:2e:59:a8:49:b7:65:cb:65:
c5:95:08:24:7b:7b:8b:f8:23:14:22:ce:05:8a:8e:
1b:34:b3:c3:e4:b7:f5:82:be:a1:33:3a:98:42:b8:
71:c7:7c:0c:11:35:8d:e5:77:b8:de:4e:ea:67:0d:
ae:69:5d:3a:91:01:fd:00:59:4e:a5:5e:83:bc:36:
84:63:2e:c7:fc:fd:e4:de:6a:76:25:3a:17:de:fe:
6b:33:6b:34:34:34:46:aa:8a:15:38:f2:72:71:8f:
20:c0:39:b7:9f:99:17:2f:b1:7d:c8:a3:88:7b:40:
fe:36:3d:8a:d9:1d:a0:d5:d8:e1:b1:19:44:72:8f:
a6:a3:85:0e:b0:e5:2d:76:a1:84:3d:a8:af:5b:6a:
40:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:21:E0:FA:30:9C:D4:95:EF:B5:BC:F5:9A:5D:86:53:FD:EC:83:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be735685-067e-32e1-980d-0d33feb69b8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
96.233.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:c3:af:a7:f8:81:c6:ed:d4:09:b9:d9:b5:ec:8a:37:09:4a:
a0:eb:53:ee:40:91:de:3d:7f:bb:42:05:df:e1:62:78:04:e3:
3d:56:cb:88:9f:75:8d:19:f3:97:f4:ac:ad:9e:03:07:b7:d7:
e3:cc:9f:ff:d0:83:39:95:48:a4:74:1d:1f:48:b0:6a:cd:9e:
12:c9:97:54:ba:dc:9d:10:d5:09:54:20:d8:46:be:ce:56:31:
46:8d:a7:db:61:2f:81:da:b3:77:69:e4:1d:85:dc:e5:e7:b0:
f1:78:15:a6:02:d5:8c:8f:77:36:ff:8f:2a:a4:65:eb:35:39:
c6:e9:fa:9d:68:76:c4:61:d7:dd:62:8f:25:0a:0e:05:a1:2a:
65:d3:53:87:76:ad:bd:97:db:98:5b:dd:3a:6b:09:b2:19:24:
f9:ff:39:63:dc:8b:c7:95:5d:3c:4a:25:19:ae:e1:ac:b0:a1:
cd:e6:d2:57:12:0a:5f:d8:ef:35:f6:7e:06:98:08:23:b6:2a:
31:e1:f5:92:1b:53:f5:67:f6:5e:ab:23:93:19:f8:db:dd:3a:
5c:e1:a0:d5:26:cd:0d:f6:9b:2b:d7:7c:52:e1:5d:a5:73:02:
94:57:30:b4:91:72:a1:f4:23:9c:4b:2d:40:06:d5:9d:28:70:
f0:b1:9c:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgr9WIqM+4yF3kKr4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIxMTE0MDA1MloXDTI1MDMxMTEzMDA1MlowLzEtMCsGA1UEAxMk
YTM5ZWMyN2QtOWRmNS00MzIxLWJiMzEtMWY4MTg0YWY5Mjc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo37zLkg6EwEdlrEpRoCXWBW7sFGWqKZ4KP29
3OI/r+gt8OkEWQ1Z7RPTZ55soHZ5vqSgFMZS+dz6ZmItAs3sM1w/k4o0sQd4+SlN
IpTaXEMSqXWMsntIhRYswLWzMCpFhD57ZrUShJHnN9Dp3oTILlmoSbdly2XFlQgk
e3uL+CMUIs4Fio4bNLPD5Lf1gr6hMzqYQrhxx3wMETWN5Xe43k7qZw2uaV06kQH9
AFlOpV6DvDaEYy7H/P3k3mp2JToX3v5rM2s0NDRGqooVOPJycY8gwDm3n5kXL7F9
yKOIe0D+Nj2K2R2g1djhsRlEco+mo4UOsOUtdqGEPaivW2pAAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPwh4PownNSV77W89ZpdhlP97IOFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmU3MzU2ODUtMDY3ZS0z
MmUxLTk4MGQtMGQzM2ZlYjY5YjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHYOkAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALPDr6f4gcbt1Am52bXsijcJSqDrU+5Akd49f7tCBd/hYngE4z1Wy4if
dY0Z85f0rK2eAwe31+PMn//QgzmVSKR0HR9IsGrNnhLJl1S63J0Q1QlUINhGvs5W
MUaNp9thL4Has3dp5B2F3OXnsPF4FaYC1YyPdzb/jyqkZes1Ocbp+p1odsRh191i
jyUKDgWhKmXTU4d2rb2X25hb3TprCbIZJPn/OWPci8eVXTxKJRmu4aywoc3m0lcS
Cl/Y7zX2fgaYCCO2KjHh9ZIbU/Vn9l6rI5MZ+NvdOlzhoNUmzQ32myvXfFLhXaVz
ApRXMLSRcqH0I5xLLUAG1Z0ocPCxnI8=
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:24:09 2025 by rpki-client