Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/ae850b8d-bf19-37be-976a-2cc95eb4b7a8.roa
File: ae850b8d-bf19-37be-976a-2cc95eb4b7a8.roa (raw, json)
Hash identifier: NSEjF6O6Czzm41oPc1Eadh/1iRBfPtsTHyVp38J/3PA=
Subject key identifier: A4:07:DF:D5:8F:92:34:D9:9F:00:44:C8:A0:6C:F7:8C:3F:6E:AF:20
Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial: 010D0C9F4328584819CFDDF5D520ECC7D0FDA640
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/ae850b8d-bf19-37be-976a-2cc95eb4b7a8.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 14618
IP address blocks: 208.70.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:dd:f5:d5:20:ec:c7:d0:fd:a6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=ebf108bb-a8d8-43c9-8cde-85e4ba0ce5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4a:51:bd:ca:a0:f6:e9:97:5d:09:98:c9:ec:
bd:16:ac:85:07:d3:38:3e:a6:ad:27:63:ca:3f:f5:
99:de:9c:6e:1d:97:de:3a:b1:82:40:b4:32:8d:59:
3e:a6:66:e8:92:f2:fb:1b:4f:2d:d2:dd:59:3b:b0:
7d:cd:7c:31:f7:33:aa:22:ef:0b:db:cb:ed:52:93:
b5:4d:d8:72:30:b9:69:01:ff:bd:a7:37:2b:16:f2:
3b:53:4b:74:21:3e:d8:ae:38:37:18:48:49:16:51:
19:21:06:81:9e:4d:0c:29:9b:26:97:05:f4:9c:b1:
2e:34:02:cb:21:26:20:dd:6c:ca:59:a3:1c:b7:b9:
7d:12:50:15:e8:2e:b2:e4:40:e8:bf:4e:16:fe:e4:
66:e2:e3:41:82:9d:7d:79:ec:77:ae:20:66:a4:d7:
96:e5:e3:26:f7:24:e4:27:23:88:0b:67:46:39:e2:
9f:51:66:65:83:34:7a:51:26:e7:69:28:c0:5f:c4:
17:c7:9e:c8:2d:0c:b8:53:34:47:5b:e3:a5:b9:a2:
a9:6e:92:cd:56:3e:c4:45:a4:50:2a:61:40:c6:d0:
a3:90:56:13:99:1e:c5:b8:20:d2:be:d5:b5:9f:d5:
ef:d4:b4:0e:a5:b9:43:b3:52:1f:ef:99:b0:57:8d:
f4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:07:DF:D5:8F:92:34:D9:9F:00:44:C8:A0:6C:F7:8C:3F:6E:AF:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/ae850b8d-bf19-37be-976a-2cc95eb4b7a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
X509v3 Authority Key Identifier:
keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
sbgp-ipAddrBlock: critical
IPv4:
208.70.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:2a:dc:4a:c3:e7:f5:58:2d:45:07:96:cc:02:57:71:d0:3c:
2e:bc:9e:2c:bb:24:f7:2d:25:36:4b:29:21:f4:a2:c2:92:6b:
18:c1:79:82:29:92:53:2b:da:3b:5b:eb:a8:59:36:05:09:ad:
af:c9:77:b3:b0:bc:34:93:00:60:15:78:b3:0a:83:01:94:bd:
90:85:ad:3d:56:bd:8e:45:1e:22:f2:b1:3d:2a:1b:99:09:0c:
5e:f2:5f:de:ce:88:01:d7:54:4c:05:d9:0c:cf:5b:f2:39:4f:
5b:7f:68:48:4b:b0:c2:8e:f0:ee:04:a5:5f:a2:78:89:b6:37:
67:a3:81:61:89:f1:3d:60:af:d9:61:8d:ed:1c:0f:9b:d8:db:
55:97:15:66:8f:d0:71:09:12:5e:12:ad:83:13:e7:9d:7d:bd:
56:81:b7:bb:2f:8f:aa:4c:e5:b8:64:99:db:61:b0:88:b1:86:
2c:b7:c6:1b:0c:bf:1c:db:9f:fa:89:d4:cc:9e:d0:e7:c6:dc:
bd:a4:40:aa:ce:22:78:c3:15:2b:8b:df:1e:f6:a1:2b:0c:9d:
3f:4c:65:52:6b:04:a9:cd:d1:78:48:5d:c5:8a:46:ab:9d:8f:
3c:39:b0:c5:3e:cd:eb:f8:8d:3b:db:76:95:8a:03:1a:fe:75:
d0:41:5d:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgZz9311SDsx9D9pkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1
YTA0MB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
ZWJmMTA4YmItYThkOC00M2M5LThjZGUtODVlNGJhMGNlNWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0pRvcqg9umXXQmYyey9FqyFB9M4PqatJ2PK
P/WZ3pxuHZfeOrGCQLQyjVk+pmbokvL7G08t0t1ZO7B9zXwx9zOqIu8L28vtUpO1
TdhyMLlpAf+9pzcrFvI7U0t0IT7Yrjg3GEhJFlEZIQaBnk0MKZsmlwX0nLEuNALL
ISYg3WzKWaMct7l9ElAV6C6y5EDov04W/uRm4uNBgp19eex3riBmpNeW5eMm9yTk
JyOIC2dGOeKfUWZlgzR6USbnaSjAX8QXx57ILQy4UzRHW+OluaKpbpLNVj7ERaRQ
KmFAxtCjkFYTmR7FuCDSvtW1n9Xv1LQOpblDs1If75mwV430vQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKQH39WPkjTZnwBEyKBs94w/bq8gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh
Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvYWU4NTBiOGQtYmYxOS0z
N2JlLTk3NmEtMmNjOTVlYjRiN2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh
M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi
NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx
OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJEq3ErD5/VYLUUHlswCV3HQPC68niy7JPctJTZLKSH0osKSaxjBeYIp
klMr2jtb66hZNgUJra/Jd7OwvDSTAGAVeLMKgwGUvZCFrT1WvY5FHiLysT0qG5kJ
DF7yX97OiAHXVEwF2QzPW/I5T1t/aEhLsMKO8O4EpV+ieIm2N2ejgWGJ8T1gr9lh
je0cD5vY21WXFWaP0HEJEl4SrYMT5519vVaBt7svj6pM5bhkmdthsIixhiy3xhsM
vxzbn/qJ1Mye0OfG3L2kQKrOInjDFSuL3x72oSsMnT9MZVJrBKnN0XhIXcWKRqud
jzw5sMU+zev4jTvbdpWKAxr+ddBBXWI=
-----END CERTIFICATE-----
Generated at Mon May 5 12:09:17 2025 by rpki-client