Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ff55aa1d-5f93-3217-8536-4af786f6fdd5.roa
File: ff55aa1d-5f93-3217-8536-4af786f6fdd5.roa (raw, json)
Hash identifier: WGJw6o8Ssj9rnZc4DgMjFT2Wscq9t4v346J8U7qcsMQ=
Subject key identifier: 69:8A:8B:BC:83:9E:D8:DA:A3:8D:C5:CD:82:50:02:AE:44:D2:11:21
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F4328584905B6B5BD090C8A0C71C38180
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ff55aa1d-5f93-3217-8536-4af786f6fdd5.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 16696
IP address blocks: 208.101.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:b5:bd:09:0c:8a:0c:71:c3:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=7dd48805-f47f-417c-882f-0af655d59a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:41:1f:ed:1a:38:a4:4f:9d:36:65:44:30:8d:
0a:ec:96:7a:f5:30:c1:42:b7:08:c8:2a:69:c2:27:
0d:a5:e8:43:60:22:40:32:82:9d:3c:32:1b:d1:a5:
75:1c:ca:3e:76:e5:be:11:2f:65:fc:64:81:db:77:
60:5c:80:83:4d:40:37:20:16:12:88:3f:5c:4f:8a:
79:02:8a:ea:ff:0d:04:c8:78:29:fc:20:62:8a:9c:
55:9a:b6:b5:3d:04:d7:af:c9:2c:52:cc:7c:4d:29:
ac:f1:1e:79:76:af:2b:e9:7d:06:23:77:48:9d:9b:
3a:eb:55:64:e2:fb:ae:ae:57:67:ff:2f:3f:80:0f:
43:24:53:73:67:16:fa:22:14:67:c1:56:e2:19:62:
9c:e2:25:59:6e:d5:80:35:2a:3b:ed:b8:63:7e:17:
e6:eb:42:28:97:ed:94:44:6a:66:8e:6c:fc:d7:0e:
99:a9:05:f6:98:66:3f:35:c2:a6:6d:52:e7:de:e3:
e9:a0:62:b4:e3:f3:44:89:22:61:a0:c2:6b:4b:2f:
49:5c:e1:c0:dc:ce:d8:5b:ed:a3:2d:13:05:06:60:
08:22:1f:72:ab:63:07:b0:c0:fb:56:57:d7:45:ca:
f0:38:5a:d8:09:ef:bf:22:92:31:3c:73:cf:b9:0e:
be:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8A:8B:BC:83:9E:D8:DA:A3:8D:C5:CD:82:50:02:AE:44:D2:11:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ff55aa1d-5f93-3217-8536-4af786f6fdd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
208.101.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:ba:5a:a4:38:a4:a8:57:ed:5a:71:c3:c6:97:45:3f:69:60:
c8:06:8c:11:c4:86:7f:59:10:fc:65:e5:d1:1f:e1:d0:00:3d:
1f:4c:68:f6:5b:31:04:a6:76:44:d7:3b:5f:e4:59:97:ee:6a:
1b:ab:b4:91:7c:bc:d9:14:e9:8d:42:ca:ff:b7:2d:2e:d0:85:
ee:05:34:de:8c:55:82:81:c9:eb:65:5d:04:f7:2e:3a:12:f5:
9a:1d:f2:28:cc:e7:9c:80:74:c9:5f:34:30:03:94:60:58:84:
2b:88:13:b7:39:d2:38:3a:21:46:88:c5:44:7c:99:88:f7:99:
32:48:11:07:c3:0e:2b:5a:14:3e:e8:8b:88:5c:ae:4a:5f:62:
3f:56:fb:90:c7:e9:5d:34:a9:6a:91:2b:3b:6a:ea:b8:b6:21:
95:13:fa:62:99:a4:35:3c:44:e7:fe:bb:7b:b5:4d:d0:c1:b5:
0e:ef:44:67:00:07:97:b8:03:bc:36:43:03:0f:49:45:84:81:
86:01:62:25:93:27:9a:19:8b:e1:49:51:99:45:99:4c:e2:20:
a6:06:f9:64:60:59:43:a5:9e:93:ef:6e:8a:45:c0:87:8c:b4:
86:72:3d:8a:51:94:85:23:36:15:5d:db:4e:73:c0:15:17:27:
6b:7e:bc:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtrW9CQyKDHHDgYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm
YzYwMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk
N2RkNDg4MDUtZjQ3Zi00MTdjLTg4MmYtMGFmNjU1ZDU5YTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkEf7Ro4pE+dNmVEMI0K7JZ69TDBQrcIyCpp
wicNpehDYCJAMoKdPDIb0aV1HMo+duW+ES9l/GSB23dgXICDTUA3IBYSiD9cT4p5
Aorq/w0EyHgp/CBiipxVmra1PQTXr8ksUsx8TSms8R55dq8r6X0GI3dInZs661Vk
4vuurldn/y8/gA9DJFNzZxb6IhRnwVbiGWKc4iVZbtWANSo77bhjfhfm60Iol+2U
RGpmjmz81w6ZqQX2mGY/NcKmbVLn3uPpoGK04/NEiSJhoMJrSy9JXOHA3M7YW+2j
LRMFBmAIIh9yq2MHsMD7VlfXRcrwOFrYCe+/IpIxPHPPuQ6+pwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGmKi7yDntjao43FzYJQAq5E0hEhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl
OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZmY1NWFhMWQtNWY5My0z
MjE3LTg1MzYtNGFmNzg2ZjZmZGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz
YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh
ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1
YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GXpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEK6WqQ4pKhX7Vpxw8aXRT9pYMgGjBHEhn9ZEPxl5dEf4dAAPR9MaPZb
MQSmdkTXO1/kWZfuahurtJF8vNkU6Y1Cyv+3LS7Qhe4FNN6MVYKByetlXQT3LjoS
9Zod8ijM55yAdMlfNDADlGBYhCuIE7c50jg6IUaIxUR8mYj3mTJIEQfDDitaFD7o
i4hcrkpfYj9W+5DH6V00qWqRKztq6ri2IZUT+mKZpDU8ROf+u3u1TdDBtQ7vRGcA
B5e4A7w2QwMPSUWEgYYBYiWTJ5oZi+FJUZlFmUziIKYG+WRgWUOlnpPvbopFwIeM
tIZyPYpRlIUjNhVd205zwBUXJ2t+vPg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:52:08 2025 by rpki-client