Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/dc659b2e-e1ec-3398-a84f-1a0622493eed.roa
File: dc659b2e-e1ec-3398-a84f-1a0622493eed.roa (raw, json)
Hash identifier: iWn3khl/wsdPOZRQfgZWEwWA1kmQ1r3i9jdSeB3MvyE=
Subject key identifier: 69:30:54:0A:3F:F5:A6:1A:DB:8C:27:70:1F:92:4F:AD:EA:CA:25:55
Certificate issuer: /CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1
Certificate serial: 010D0C9F432858487325AEC22669FC090A6CDD40
Authority key identifier: C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/dc659b2e-e1ec-3398-a84f-1a0622493eed.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 14618
IP address blocks: 170.89.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:ae:c2:26:69:fc:09:0a:6c:dd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=3bd9484e-8065-4cec-b432-ee054022f7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:77:90:0e:e9:67:5d:38:5d:4c:cf:23:f9:7f:
d9:ff:48:d4:15:7b:6d:0e:61:5f:5c:88:a7:84:df:
51:5f:39:da:43:48:26:ee:e0:08:bd:b6:cf:14:3f:
d4:63:1c:7a:42:0d:5a:58:c9:79:1a:51:a5:c9:a9:
03:2f:e4:81:f5:c9:7f:e3:f4:82:53:0b:98:ba:65:
cf:64:fc:ac:f4:bf:7b:30:44:d0:00:06:5b:18:da:
8c:8a:6b:ea:0e:b1:ad:da:25:12:6d:00:af:c3:3e:
dd:d9:f5:7b:69:84:fe:ae:75:99:80:8c:bc:5f:72:
7c:1f:41:84:74:e2:50:c0:b1:31:8d:a7:2e:2e:fc:
89:f3:39:92:d6:52:35:5a:d2:5b:21:ee:53:0c:7b:
f1:28:bc:94:7a:9e:23:d7:18:6a:14:6d:56:55:18:
ec:a2:f7:0b:df:04:8a:a0:05:1a:33:d5:4e:4c:dd:
fe:e3:56:03:c5:1e:e8:51:73:cc:8d:aa:d8:10:df:
5f:a9:2a:85:44:dd:8d:a4:f7:59:99:d5:85:96:cc:
e7:73:94:f3:57:7c:4e:60:11:a9:23:c9:82:02:df:
3a:d4:7b:9d:ba:f5:79:0c:04:45:12:c4:78:e7:1e:
62:46:4b:85:d8:5f:10:1a:4f:8a:2e:8d:b7:3c:ca:
f2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:30:54:0A:3F:F5:A6:1A:DB:8C:27:70:1F:92:4F:AD:EA:CA:25:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/dc659b2e-e1ec-3398-a84f-1a0622493eed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl
X509v3 Authority Key Identifier:
keyid:C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer
sbgp-ipAddrBlock: critical
IPv4:
170.89.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:a9:cb:49:7a:2e:ce:89:29:b5:49:1c:07:74:63:c3:5c:87:
ab:86:57:51:91:a5:61:fe:22:e5:e1:60:87:a7:9e:cf:0d:f6:
e7:41:9e:88:50:30:4e:3c:a5:19:f2:d6:63:c1:0f:62:d1:28:
aa:ab:53:e8:12:83:e6:55:c6:55:e7:cc:d0:c2:4d:01:f0:92:
84:93:8b:3b:57:68:20:dc:84:70:b7:73:96:5a:30:f7:98:f3:
6f:e4:3c:7e:c4:7c:9f:09:28:bb:76:14:f8:37:61:d3:25:90:
f7:df:c1:ba:2d:10:0e:c1:16:fb:ce:78:8a:ce:c4:a2:44:c2:
83:e1:54:82:58:d1:af:d5:ac:82:02:53:50:30:92:cd:88:b2:
01:f7:04:9c:9e:74:fc:43:64:81:d7:fd:8c:6a:a4:9b:40:84:
04:3b:69:77:dd:22:35:aa:9c:36:02:9c:ba:6a:6f:6b:0e:14:
d5:18:87:21:6f:f3:b0:77:d6:0c:35:69:83:55:9e:fe:12:64:
8d:c7:ba:11:95:43:b5:db:93:37:37:5a:f2:9f:94:e0:98:d9:
f1:ee:7f:9d:f0:70:1b:58:37:94:ef:98:b8:23:74:a7:d5:75:
fa:e3:b6:3c:9f:08:91:8f:2a:d0:ab:4f:ce:af:35:73:14:c3:
c8:07:df:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhzJa7CJmn8CQps3UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmUzZmYxMGQtOWFjNS00NmE5LThlYjQtODIzMDI3NjA3
Y2ExMB4XDTI1MDEwNjAyMDA0MFoXDTI1MDQwNjAxMDA0MFowLzEtMCsGA1UEAxMk
M2JkOTQ4NGUtODA2NS00Y2VjLWI0MzItZWUwNTQwMjJmN2UyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XeQDulnXThdTM8j+X/Z/0jUFXttDmFfXIin
hN9RXznaQ0gm7uAIvbbPFD/UYxx6Qg1aWMl5GlGlyakDL+SB9cl/4/SCUwuYumXP
ZPys9L97METQAAZbGNqMimvqDrGt2iUSbQCvwz7d2fV7aYT+rnWZgIy8X3J8H0GE
dOJQwLExjacuLvyJ8zmS1lI1WtJbIe5TDHvxKLyUep4j1xhqFG1WVRjsovcL3wSK
oAUaM9VOTN3+41YDxR7oUXPMjarYEN9fqSqFRN2NpPdZmdWFlsznc5TzV3xOYBGp
I8mCAt861HuduvV5DARFEsR45x5iRkuF2F8QGk+KLo23PMryHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGkwVAo/9aYa24wncB+ST63qyiVVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNm
ZjEwZC05YWM1LTQ2YTktOGViNC04MjMwMjc2MDdjYTEvZGM2NTliMmUtZTFlYy0z
Mzk4LWE4NGYtMWEwNjIyNDkzZWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmUzZmYxMGQtOWFjNS00NmE5LThl
YjQtODIzMDI3NjA3Y2ExL2JlM2ZmMTBkLTlhYzUtNDZhOS04ZWI0LTgyMzAyNzYw
N2NhMS5jcmwwHwYDVR0jBBgwFoAUxf1vzdJ0mgAFn0XVSeFHrl2VZcYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNmZjEwZC05YWM1LTQ2YTktOGViNC04MjMw
Mjc2MDdjYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqlkAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG2py0l6Ls6JKbVJHAd0Y8Nch6uGV1GRpWH+IuXhYIenns8N9udBnohQ
ME48pRny1mPBD2LRKKqrU+gSg+ZVxlXnzNDCTQHwkoSTiztXaCDchHC3c5ZaMPeY
82/kPH7EfJ8JKLt2FPg3YdMlkPffwbotEA7BFvvOeIrOxKJEwoPhVIJY0a/VrIIC
U1Awks2IsgH3BJyedPxDZIHX/YxqpJtAhAQ7aXfdIjWqnDYCnLpqb2sOFNUYhyFv
87B31gw1aYNVnv4SZI3HuhGVQ7Xbkzc3WvKflOCY2fHuf53wcBtYN5TvmLgjdKfV
dfrjtjyfCJGPKtCrT86vNXMUw8gH31A=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:44:08 2025 by rpki-client