Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773/0a1d64fb-b3ee-3d9c-b063-8d2eba8255ca.roa
File: 0a1d64fb-b3ee-3d9c-b063-8d2eba8255ca.roa (raw, json)
Hash identifier: TRwwMQ5N+nr0BVIJJ7JlyosvNvmiEpHROb8yQicHYVs=
Subject key identifier: 0A:C1:FB:7A:03:50:C7:24:A8:99:B0:40:10:6E:F3:8B:B0:99:62:CC
Certificate issuer: /CN=6d105620-7389-4837-b50f-6d9bfdfd3773
Certificate serial: 010D0C9F432858490CB167339BB286BF30150D00
Authority key identifier: 2B:00:D1:85:F5:BD:F4:8A:21:0C:9E:1D:2E:DA:B7:EE:D9:E1:AA:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773/0a1d64fb-b3ee-3d9c-b063-8d2eba8255ca.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 16509
IP address blocks: 163.123.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:67:33:9b:b2:86:bf:30:15:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d105620-7389-4837-b50f-6d9bfdfd3773
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=6b3fc33b-2ab4-4511-87c1-70d95ea8f56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5c:2a:ec:34:c9:ba:f9:42:c4:f5:df:74:c7:
17:23:26:17:43:95:24:45:4e:78:5d:4c:15:3f:f4:
56:7c:bc:16:5a:1c:db:30:e3:e4:28:d9:fc:77:6f:
54:e3:66:5b:be:e9:1f:c7:93:12:ab:d6:cd:af:13:
83:89:cb:b7:e6:9e:e9:28:8b:5d:63:0a:dd:ce:fd:
16:f7:8d:b6:60:6d:2c:6b:30:af:ef:90:b2:31:ee:
01:c9:b1:07:74:a7:4d:da:67:a9:04:b1:01:57:e8:
72:18:c6:08:7e:38:1c:b1:81:18:f8:39:4d:09:9a:
1d:a1:2b:77:af:ed:81:05:ee:4a:9e:5b:f1:16:91:
af:33:5b:1b:d4:9a:8c:58:24:00:06:c8:38:9d:94:
91:ac:c1:06:3b:27:ce:c9:52:cc:31:0e:c1:fb:89:
17:67:7e:2d:45:40:f2:0c:28:d4:93:89:ac:50:8b:
0f:9d:19:50:44:ec:99:fd:15:e7:be:69:c2:af:fa:
f2:a2:93:1d:25:ff:be:3e:de:09:dc:3d:d5:85:44:
c7:92:cb:81:c1:f9:84:f4:8c:1c:5f:7c:e3:f2:e3:
27:48:88:4e:62:f2:f4:c1:50:47:c5:cb:d7:44:b0:
87:9b:c2:32:2f:11:ee:a3:16:a3:f2:be:ca:57:72:
b6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C1:FB:7A:03:50:C7:24:A8:99:B0:40:10:6E:F3:8B:B0:99:62:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773/0a1d64fb-b3ee-3d9c-b063-8d2eba8255ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773/6d105620-7389-4837-b50f-6d9bfdfd3773.crl
X509v3 Authority Key Identifier:
keyid:2B:00:D1:85:F5:BD:F4:8A:21:0C:9E:1D:2E:DA:B7:EE:D9:E1:AA:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773.cer
sbgp-ipAddrBlock: critical
IPv4:
163.123.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:04:eb:46:7e:64:fb:1b:38:d4:8e:53:98:56:7a:73:1b:63:
6e:c4:e5:58:15:64:b0:8c:5f:27:46:cb:f9:25:b2:6d:8f:4c:
5c:ac:ce:14:ca:cf:9e:41:1e:88:c3:a6:9d:6a:c5:f3:67:d3:
ed:70:4d:be:90:f4:9b:f8:5e:66:b9:59:9a:60:07:ee:b0:5a:
bc:8d:96:cc:cd:dd:28:f0:6a:f3:4a:1d:6f:84:79:7d:7e:a3:
9d:0d:3d:29:53:a3:cb:ee:f0:da:65:8f:08:ca:b2:7d:83:42:
21:59:df:e6:b8:9d:4d:a9:13:ed:26:ad:72:71:8a:e3:30:3a:
e4:3d:d0:9b:40:52:14:20:a5:02:0c:c4:15:a8:4e:23:df:4b:
66:1d:c9:89:38:1c:bb:fe:20:36:73:61:6a:65:a9:81:32:b6:
3e:9f:b9:b5:47:b9:d6:a0:d2:9b:8e:e7:8c:83:93:58:a0:ee:
07:50:b3:d4:77:7f:cb:25:19:cf:b5:3f:d0:27:f6:6f:b5:ad:
25:3d:cc:32:af:65:21:1f:73:e6:27:ec:28:b2:2d:59:c9:c2:
2a:43:39:58:a9:39:d5:62:4e:f3:81:79:2d:a2:00:bf:8f:5e:
33:69:a2:0c:fa:d4:77:e7:e5:1c:d2:68:41:e0:bd:49:2a:ef:
53:8e:0f:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsWczm7KGvzAVDQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQxMDU2MjAtNzM4OS00ODM3LWI1MGYtNmQ5YmZkZmQz
NzczMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk
NmIzZmMzM2ItMmFiNC00NTExLTg3YzEtNzBkOTVlYThmNTZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFwq7DTJuvlCxPXfdMcXIyYXQ5UkRU54XUwV
P/RWfLwWWhzbMOPkKNn8d29U42Zbvukfx5MSq9bNrxODicu35p7pKItdYwrdzv0W
9422YG0sazCv75CyMe4BybEHdKdN2mepBLEBV+hyGMYIfjgcsYEY+DlNCZodoSt3
r+2BBe5KnlvxFpGvM1sb1JqMWCQABsg4nZSRrMEGOyfOyVLMMQ7B+4kXZ34tRUDy
DCjUk4msUIsPnRlQROyZ/RXnvmnCr/ryopMdJf++Pt4J3D3VhUTHksuBwfmE9Iwc
X3zj8uMnSIhOYvL0wVBHxcvXRLCHm8IyLxHuoxaj8r7KV3K2AwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFArB+3oDUMckqJmwQBBu84uwmWLMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82ZDEw
NTYyMC03Mzg5LTQ4MzctYjUwZi02ZDliZmRmZDM3NzMvMGExZDY0ZmItYjNlZS0z
ZDljLWIwNjMtOGQyZWJhODI1NWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNmQxMDU2MjAtNzM4OS00ODM3LWI1
MGYtNmQ5YmZkZmQzNzczLzZkMTA1NjIwLTczODktNDgzNy1iNTBmLTZkOWJmZGZk
Mzc3My5jcmwwHwYDVR0jBBgwFoAUKwDRhfW99IohDJ4dLtq37tnhqucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi82ZDEwNTYyMC03Mzg5LTQ4MzctYjUwZi02ZDli
ZmRmZDM3NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo3vZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIkE60Z+ZPsbONSOU5hWenMbY27E5VgVZLCMXydGy/klsm2PTFyszhTK
z55BHojDpp1qxfNn0+1wTb6Q9Jv4Xma5WZpgB+6wWryNlszN3SjwavNKHW+EeX1+
o50NPSlTo8vu8NpljwjKsn2DQiFZ3+a4nU2pE+0mrXJxiuMwOuQ90JtAUhQgpQIM
xBWoTiPfS2YdyYk4HLv+IDZzYWplqYEytj6fubVHudag0puO54yDk1ig7gdQs9R3
f8slGc+1P9An9m+1rSU9zDKvZSEfc+Yn7CiyLVnJwipDOVipOdViTvOBeS2iAL+P
XjNpogz61Hfn5RzSaEHgvUkq71OOD90=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:02:19 2025 by rpki-client