Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1a547cdd-e5c1-3504-9405-c095717ca9c2.roa
File: 1a547cdd-e5c1-3504-9405-c095717ca9c2.roa (raw, json)
Hash identifier: M2w3D6zbTbDnXbx7Fsapg2qdPe+hoK1sNgPA4mOrWvY=
Subject key identifier: 60:B4:A7:4D:42:31:26:AB:50:D5:7C:01:87:2C:7A:5D:2F:05:CF:0E
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246E2097446D3622AE30F58
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1a547cdd-e5c1-3504-9405-c095717ca9c2.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 12008
IP address blocks: 209.173.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:e2:09:74:46:d3:62:2a:e3:0f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=9fbf9799-abb5-4e13-9db3-6c982c7be7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1b:93:84:64:cb:df:8e:62:c5:33:04:76:fe:
4d:85:48:bc:dd:9f:86:01:f3:3f:d3:93:54:cc:99:
70:8c:c7:a7:1e:85:98:f9:00:41:76:3a:6c:c4:47:
60:77:a5:fa:7a:aa:d7:77:c5:4d:5f:e9:2e:92:0d:
0b:8c:0f:02:31:e3:96:c2:ec:ae:3d:84:ad:fd:a7:
d0:09:4f:0d:f9:58:86:12:74:4a:7e:34:88:ae:19:
67:2b:4c:f8:e0:73:d9:13:4a:03:46:4d:5b:a3:8d:
a3:c6:bf:5d:4a:7c:b1:14:61:e2:0f:38:c9:06:11:
28:21:2e:0e:07:4d:f3:5e:92:e8:82:89:20:70:4e:
04:36:94:cf:c4:a8:09:a4:14:70:af:0b:34:8c:40:
57:da:a1:50:66:75:c7:b1:2c:69:c3:3c:40:14:b6:
e3:3b:38:05:10:95:6d:38:98:c7:80:0a:43:54:50:
2d:0e:59:d1:89:c5:59:38:49:2c:b9:61:87:b5:82:
b5:88:8a:82:9c:ff:37:70:b3:92:52:d0:8d:e3:1a:
2f:dd:54:28:c6:07:fc:23:32:a6:b9:8f:ea:7a:3a:
3d:55:0a:3a:13:20:ee:1b:59:ed:19:06:79:73:43:
45:49:65:1f:9e:60:1f:16:db:01:6c:87:5c:9b:9d:
ed:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B4:A7:4D:42:31:26:AB:50:D5:7C:01:87:2C:7A:5D:2F:05:CF:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1a547cdd-e5c1-3504-9405-c095717ca9c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
209.173.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:c5:cd:45:88:e5:c1:ed:7d:37:75:bc:72:47:b3:61:f4:78:
97:20:06:f0:5e:87:c6:8a:fa:e5:82:45:f4:e3:2f:c4:31:1a:
26:8a:22:94:04:94:bc:d6:6b:b5:f9:84:10:6e:af:96:c1:99:
3e:74:71:a5:12:02:35:12:9d:e3:08:51:9b:69:dc:12:0e:2d:
37:83:77:c9:29:ed:95:5d:75:e5:97:58:1a:42:c8:f6:8e:11:
a0:d2:a1:53:1c:47:a5:b6:4f:d2:81:9d:f0:95:9b:3e:81:0b:
ee:66:e9:f4:49:76:ac:b7:fa:dc:fd:5c:26:a1:fa:54:df:a9:
27:d1:4c:83:d3:fe:b3:37:bc:87:32:50:0f:8b:79:10:2b:35:
c6:35:a4:17:8a:39:41:dc:0b:5a:d7:5f:24:ed:62:76:2e:49:
85:98:cd:e1:9a:e9:ba:29:d9:bb:46:dd:b9:7d:a3:9c:dc:c2:
cf:2f:fe:65:87:51:3c:08:05:04:74:2a:46:bb:34:e2:95:6d:
50:33:93:1d:9b:d6:01:ae:8e:08:10:8f:65:19:0f:8b:79:0e:
7d:87:f3:c2:7f:da:14:fe:de:d5:36:0e:32:83:7a:a7:e3:77:
ba:ac:d1:d5:c1:1b:9c:38:05:1c:54:b1:19:50:c3:ab:7b:47:
85:9d:c1:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRuIJdEbTYirjD1gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
OWZiZjk3OTktYWJiNS00ZTEzLTlkYjMtNmM5ODJjN2JlN2Y0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhuThGTL345ixTMEdv5NhUi83Z+GAfM/05NU
zJlwjMenHoWY+QBBdjpsxEdgd6X6eqrXd8VNX+kukg0LjA8CMeOWwuyuPYSt/afQ
CU8N+ViGEnRKfjSIrhlnK0z44HPZE0oDRk1bo42jxr9dSnyxFGHiDzjJBhEoIS4O
B03zXpLogokgcE4ENpTPxKgJpBRwrws0jEBX2qFQZnXHsSxpwzxAFLbjOzgFEJVt
OJjHgApDVFAtDlnRicVZOEksuWGHtYK1iIqCnP83cLOSUtCN4xov3VQoxgf8IzKm
uY/qejo9VQo6EyDuG1ntGQZ5c0NFSWUfnmAfFtsBbIdcm53t8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGC0p01CMSarUNV8AYcsel0vBc8OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMWE1NDdjZGQtZTVjMS0z
NTA0LTk0MDUtYzA5NTcxN2NhOWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0a06MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAATFzUWI5cHtfTd1vHJHs2H0eJcgBvBeh8aK+uWCRfTjL8QxGiaKIpQE
lLzWa7X5hBBur5bBmT50caUSAjUSneMIUZtp3BIOLTeDd8kp7ZVddeWXWBpCyPaO
EaDSoVMcR6W2T9KBnfCVmz6BC+5m6fRJdqy3+tz9XCah+lTfqSfRTIPT/rM3vIcy
UA+LeRArNcY1pBeKOUHcC1rXXyTtYnYuSYWYzeGa6bop2btG3bl9o5zcws8v/mWH
UTwIBQR0Kka7NOKVbVAzkx2b1gGujggQj2UZD4t5Dn2H88J/2hT+3tU2DjKDeqfj
d7qs0dXBG5w4BRxUsRlQw6t7R4Wdwc8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:42:12 2025 by rpki-client