Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d96da1e4-10cf-3ad3-a544-579e898b37e3.roa
File: d96da1e4-10cf-3ad3-a544-579e898b37e3.roa (raw, json)
Hash identifier: 4DhcDDLOfUKhq5CwySBSzONHfR9Hkl9qrjwZA6D1H98=
Subject key identifier: 6C:C1:DC:5E:21:64:A9:21:EE:54:9E:53:F6:56:71:BE:05:56:00:58
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B55B7573DDEDBD31B13380
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d96da1e4-10cf-3ad3-a544-579e898b37e3.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 76.70.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:5b:75:73:dd:ed:bd:31:b1:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=70ad20d6-2cfb-4ca4-8da1-3bef06db3ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a5:fa:d4:24:d9:8a:c3:04:4b:0a:d4:a2:85:
c4:1a:ba:e5:19:76:fa:06:2a:6c:ea:72:8d:26:9c:
44:53:66:58:68:b4:49:70:b7:93:f1:96:dc:74:a3:
bd:12:f0:c5:62:ab:e5:0b:15:08:5a:41:04:16:df:
78:9e:7f:6c:41:9e:97:9d:53:ab:46:b3:fb:70:8a:
e8:36:48:54:16:c9:4f:53:a2:76:82:97:0d:39:83:
bd:2f:c5:ee:72:08:3d:dd:0f:c2:0a:de:b0:52:48:
08:80:f8:4b:e2:33:33:9e:8d:81:de:9f:25:19:49:
ed:d0:b2:12:68:4d:5b:cc:37:f7:e2:f5:a7:15:0b:
25:16:35:45:e1:f3:da:21:f5:5e:f1:57:7a:76:5a:
4a:55:a6:15:fe:c8:d9:e4:b0:bb:28:c0:0f:8c:97:
80:9a:f8:e1:7b:e4:41:c9:89:53:3b:53:cb:02:ef:
54:f2:e8:55:10:ec:d2:4c:7c:d5:22:5d:f6:a6:fb:
f5:53:ae:25:d8:ff:21:da:41:77:06:0a:30:39:dd:
a2:7c:c2:e7:15:89:d8:d6:98:7e:12:68:0e:82:d8:
a4:d5:0d:32:2a:37:ee:cb:43:b3:48:c9:92:7e:55:
d9:57:04:a6:65:af:6d:b6:e8:b9:00:37:58:85:a3:
5d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C1:DC:5E:21:64:A9:21:EE:54:9E:53:F6:56:71:BE:05:56:00:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d96da1e4-10cf-3ad3-a544-579e898b37e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
76.70.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:a8:e3:af:fc:b1:cf:17:36:2c:7c:92:33:c2:ef:8b:1d:95:
65:86:61:7a:51:e3:03:3e:63:c1:82:e2:57:c0:ae:53:c1:49:
c6:8f:98:9a:ba:5c:4d:4c:43:69:f1:ff:8a:fe:b4:1d:00:27:
44:12:8c:6a:f4:a3:d1:b1:a3:2c:8c:39:eb:9f:82:a5:f2:3a:
81:c2:93:e2:e1:2f:d2:67:a9:b3:54:5e:55:c0:b5:1f:d7:89:
53:68:cd:55:03:1a:63:36:66:25:ca:da:78:aa:33:cb:7c:a1:
dd:1c:9d:9b:5c:2d:c1:c4:1b:39:ca:32:e2:77:c0:91:8f:37:
09:51:ac:27:f7:9a:f2:38:25:3d:de:b7:93:88:6a:05:c4:06:
6e:60:88:a4:a8:7b:31:b5:cd:07:6d:c6:e7:83:f9:8d:f1:f5:
e2:23:a1:66:11:76:21:7e:a1:98:83:25:f1:77:58:a9:4c:97:
41:75:96:65:73:49:69:06:a6:ff:3b:9a:38:aa:73:c8:30:6a:
05:04:e9:d8:7f:e0:f4:61:59:9f:40:47:5f:1b:0c:69:91:d6:
cf:80:32:0e:c2:cd:ce:9e:a0:22:da:19:e3:c3:c1:d0:79:16:
4c:d4:29:55:48:96:09:1a:01:56:a8:72:92:a5:3e:bc:19:59:
10:1a:12:64
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEgmtVt1c93tvTGxM4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MTIwODEyMDAwMFoXDTI1MDMxMDA0MDAwMFowLzEtMCsGA1UEAxMk
NzBhZDIwZDYtMmNmYi00Y2E0LThkYTEtM2JlZjA2ZGIzYWM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6X61CTZisMESwrUooXEGrrlGXb6Bips6nKN
JpxEU2ZYaLRJcLeT8ZbcdKO9EvDFYqvlCxUIWkEEFt94nn9sQZ6XnVOrRrP7cIro
NkhUFslPU6J2gpcNOYO9L8Xucgg93Q/CCt6wUkgIgPhL4jMzno2B3p8lGUnt0LIS
aE1bzDf34vWnFQslFjVF4fPaIfVe8Vd6dlpKVaYV/sjZ5LC7KMAPjJeAmvjhe+RB
yYlTO1PLAu9U8uhVEOzSTHzVIl32pvv1U64l2P8h2kF3BgowOd2ifMLnFYnY1ph+
EmgOgtik1Q0yKjfuy0OzSMmSflXZVwSmZa9ttui5ADdYhaNd0wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGzB3F4hZKkh7lSeU/ZWcb4FVgBYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZDk2ZGExZTQtMTBjZi0z
YWQzLWE1NDQtNTc5ZTg5OGIzN2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMATEYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAjqjjr/yxzxc2LHySM8Lvix2VZYZhelHjAz5jwYLiV8CuU8FJxo+Ymrpc
TUxDafH/iv60HQAnRBKMavSj0bGjLIw565+CpfI6gcKT4uEv0meps1ReVcC1H9eJ
U2jNVQMaYzZmJcraeKozy3yh3Rydm1wtwcQbOcoy4nfAkY83CVGsJ/ea8jglPd63
k4hqBcQGbmCIpKh7MbXNB23G54P5jfH14iOhZhF2IX6hmIMl8XdYqUyXQXWWZXNJ
aQam/zuaOKpzyDBqBQTp2H/g9GFZn0BHXxsMaZHWz4AyDsLNzp6gItoZ48PB0HkW
TNQpVUiWCRoBVqhykqU+vBlZEBoSZA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:44:31 2025 by rpki-client