Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cd2e640b-ff3b-3fc0-ba9a-feaaa413b072.roa
File: cd2e640b-ff3b-3fc0-ba9a-feaaa413b072.roa (raw, json)
Hash identifier: xVp/ElmeOh2YgqVkSWP0QpZ3lV8swdrbDMTuGcyU78g=
Subject key identifier: 52:C0:60:67:94:13:29:10:70:06:77:D4:BC:77:76:2E:F7:28:B5:85
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848ED4C690E97CB59C2C958A3D0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cd2e640b-ff3b-3fc0-ba9a-feaaa413b072.roa
Signing time: Tue 18 Feb 2025 20:07:25 +0000
ROA not before: Tue 18 Feb 2025 20:07:25 +0000
ROA not after: Mon 19 May 2025 19:07:25 +0000
asID: 16509
IP address blocks: 208.213.184.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ed:4c:69:0e:97:cb:59:c2:c9:58:a3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 18 20:07:25 2025 GMT
Not After : May 19 19:07:25 2025 GMT
Subject: CN=269ebf70-5af4-4d52-b371-f9af5c4b7112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cc:3f:d3:16:e8:52:5c:05:9c:d1:e4:06:73:
4f:87:41:25:76:75:7e:a6:55:9f:18:f7:84:92:34:
c1:ac:69:80:da:98:8e:33:7e:20:6b:57:95:28:a4:
d7:90:52:d4:a2:5a:be:7a:48:af:61:2e:8a:2f:66:
ce:93:33:1a:2d:e7:d4:cf:57:8f:dc:86:e1:98:b7:
27:78:5e:66:92:b9:8e:90:fa:ea:d0:a7:e7:e9:9c:
ce:42:b0:d5:d2:92:79:5d:7c:d4:d2:17:16:fe:7f:
b5:ec:dc:09:76:6e:1b:ef:99:97:21:b6:39:bf:f5:
bb:a3:1d:fe:f6:e7:86:98:4a:65:0c:75:70:16:3f:
84:5a:57:13:7e:67:39:84:39:da:4d:b0:54:1a:6c:
bf:32:52:db:0b:49:7a:f2:3e:b4:a4:d5:d3:4c:23:
3c:91:80:de:ce:57:cd:db:52:2a:18:de:ef:0b:83:
99:85:61:d3:d2:ac:a9:b8:c3:70:86:0a:26:79:65:
ef:ab:99:96:46:9f:15:a4:f3:d2:58:7e:9f:9f:d0:
f5:ce:ba:1d:0c:ee:e4:2a:0f:a2:72:15:f4:92:63:
7b:ac:2f:41:e4:04:ae:0e:55:d5:2d:06:de:3e:ab:
f6:eb:f3:19:29:0f:bb:d8:ce:d9:9d:f6:67:b6:34:
52:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C0:60:67:94:13:29:10:70:06:77:D4:BC:77:76:2E:F7:28:B5:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cd2e640b-ff3b-3fc0-ba9a-feaaa413b072.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
208.213.184.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:2c:81:6f:45:d6:19:87:f2:b9:40:37:40:de:90:62:86:f1:
23:b2:d3:4f:18:98:81:7c:27:05:1e:bc:9b:f2:b1:78:f6:fc:
2b:8f:a5:4f:1b:94:48:45:82:5c:89:ef:41:cb:ed:c4:d9:6a:
50:c6:18:e0:8e:93:ec:74:d6:0a:02:f6:b9:ff:5d:4c:f5:11:
62:e8:4a:b6:93:22:cd:f4:59:ef:a3:af:79:24:28:a2:76:44:
37:8c:f1:af:69:15:b6:03:f2:e8:55:95:83:37:b0:04:d6:75:
55:eb:52:12:ab:be:75:d3:c5:80:48:5b:c8:7e:5e:b3:ca:f4:
ac:a3:a6:12:00:81:69:dd:be:09:22:ac:db:5f:bd:5a:e5:07:
44:bf:d0:d7:3a:10:fb:79:6a:2d:be:c2:db:59:b6:c9:4c:1b:
9c:ed:af:87:d3:b8:ce:bc:c8:82:f1:cf:31:6c:d9:fa:bb:0c:
85:fe:47:db:2a:36:0b:27:99:db:88:8a:da:95:85:d6:ec:d9:
f0:28:63:ce:0d:b2:6f:92:4b:0d:f8:e4:d6:71:0a:e3:90:0e:
88:67:c3:b9:67:46:17:35:84:61:ae:e4:d5:00:19:19:fb:58:
7b:cd:14:bb:82:aa:4a:1e:9f:c5:da:7f:e4:5b:5c:2a:2a:1f:
08:57:7b:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjtTGkOl8tZwslYo9AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDIxODIwMDcyNVoXDTI1MDUxOTE5MDcyNVowLzEtMCsGA1UEAxMk
MjY5ZWJmNzAtNWFmNC00ZDUyLWIzNzEtZjlhZjVjNGI3MTEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8w/0xboUlwFnNHkBnNPh0EldnV+plWfGPeE
kjTBrGmA2piOM34ga1eVKKTXkFLUolq+ekivYS6KL2bOkzMaLefUz1eP3IbhmLcn
eF5mkrmOkPrq0Kfn6ZzOQrDV0pJ5XXzU0hcW/n+17NwJdm4b75mXIbY5v/W7ox3+
9ueGmEplDHVwFj+EWlcTfmc5hDnaTbBUGmy/MlLbC0l68j60pNXTTCM8kYDezlfN
21IqGN7vC4OZhWHT0qypuMNwhgomeWXvq5mWRp8VpPPSWH6fn9D1zrodDO7kKg+i
chX0kmN7rC9B5ASuDlXVLQbePqv26/MZKQ+72M7ZnfZntjRSIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFLAYGeUEykQcAZ31Lx3di73KLWFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2QyZTY0MGItZmYzYi0z
ZmMwLWJhOWEtZmVhYWE0MTNiMDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0NW4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFwsgW9F1hmH8rlAN0DekGKG8SOy008YmIF8JwUevJvysXj2/CuPpU8b
lEhFglyJ70HL7cTZalDGGOCOk+x01goC9rn/XUz1EWLoSraTIs30We+jr3kkKKJ2
RDeM8a9pFbYD8uhVlYM3sATWdVXrUhKrvnXTxYBIW8h+XrPK9KyjphIAgWndvgki
rNtfvVrlB0S/0Nc6EPt5ai2+wttZtslMG5ztr4fTuM68yILxzzFs2fq7DIX+R9sq
NgsnmduIitqVhdbs2fAoY84Nsm+SSw345NZxCuOQDohnw7lnRhc1hGGu5NUAGRn7
WHvNFLuCqkoen8Xaf+RbXCoqHwhXe24=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:38 2025 by rpki-client