Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f6685b7a-5f10-3bf3-8eb9-9b0310d9e34c.roa
File: f6685b7a-5f10-3bf3-8eb9-9b0310d9e34c.roa (raw, json)
Hash identifier: uiTcCXeXVa1Vlpcc4f5axs4FkB3I2tKpNXMMQZQ3Owg=
Subject key identifier: 65:3C:DC:AC:33:37:33:86:5E:12:2D:34:DC:60:3B:DF:7B:CE:59:37
Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Certificate serial: 010D0C9F4328584891DB2F3250669A8D4642CD80
Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f6685b7a-5f10-3bf3-8eb9-9b0310d9e34c.roa
Signing time: Fri 17 Jan 2025 02:00:40 +0000
ROA not before: Fri 17 Jan 2025 02:00:40 +0000
ROA not after: Thu 17 Apr 2025 01:00:40 +0000
asID: 398420
IP address blocks: 206.71.146.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:91:db:2f:32:50:66:9a:8d:46:42:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Validity
Not Before: Jan 17 02:00:40 2025 GMT
Not After : Apr 17 01:00:40 2025 GMT
Subject: CN=22991225-4441-44ae-91cb-d9ed6460957c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:44:a5:e1:3e:b1:82:e3:07:8b:e8:fd:bd:
08:73:55:cc:c6:47:38:a2:08:31:76:1b:8a:49:c4:
29:73:6e:0a:32:49:5c:89:d9:36:65:23:09:3c:59:
0a:f7:77:ae:c2:63:d5:0a:53:94:41:f3:1c:20:0d:
1b:48:66:ce:d4:fa:a0:92:9e:80:eb:c3:25:8b:a2:
38:06:9e:b4:65:bb:7e:52:5f:39:73:3c:a4:50:7e:
63:6c:66:3e:df:0c:e4:c1:25:35:65:8d:f0:0f:cc:
5c:62:e2:2a:64:95:09:7a:70:ad:11:7d:f9:77:b5:
2e:0d:c8:2c:06:69:09:45:d1:ca:38:79:fc:6f:bb:
b7:c6:4c:e2:ab:68:c5:b1:cb:27:74:1f:3d:97:79:
01:1a:c5:47:47:8a:8d:5f:25:67:54:7b:58:d2:6c:
32:60:7d:35:6d:cc:ba:c8:96:4a:52:45:aa:3e:81:
33:d6:72:dc:69:39:7a:e1:42:63:db:0f:12:b8:3e:
fb:b3:16:96:05:f6:4f:8c:33:5b:f7:3d:5a:fd:ca:
a6:06:27:4b:3c:f7:aa:3d:f2:c7:49:47:db:01:8d:
cb:4a:85:5d:32:90:82:c7:c2:b5:67:36:a4:b9:ab:
c5:4c:05:cb:0b:dd:d1:50:41:ab:da:43:19:66:f1:
fd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3C:DC:AC:33:37:33:86:5E:12:2D:34:DC:60:3B:DF:7B:CE:59:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f6685b7a-5f10-3bf3-8eb9-9b0310d9e34c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl
X509v3 Authority Key Identifier:
keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
sbgp-ipAddrBlock: critical
IPv4:
206.71.146.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:91:b9:63:f0:e2:01:44:5d:56:33:1e:f0:d1:1f:bb:b1:8c:
5b:ba:5f:0c:ce:0c:69:e4:ef:b2:16:ff:32:14:ad:ca:0a:62:
a0:73:c2:31:1f:26:a1:74:ec:fe:04:9b:53:0b:e6:64:23:9f:
a5:eb:a5:33:9c:63:86:0b:7a:a3:24:fa:88:54:5b:c2:84:77:
12:d0:48:d8:32:99:b1:d5:23:68:39:11:91:b2:ae:88:07:8e:
1f:65:33:43:b7:ab:c2:dd:38:69:4e:07:a3:33:d7:7f:44:3c:
eb:16:f2:3c:2b:98:9b:65:f6:21:0a:31:46:e9:b8:a9:70:0c:
dd:10:3b:d8:9a:53:68:1e:06:27:44:08:dc:34:df:47:fa:cf:
88:d3:75:9e:7b:58:dc:d2:90:56:e2:a1:ee:14:a8:62:13:03:
d0:c1:9f:c0:31:c8:15:0a:93:e9:43:e4:7d:1b:12:92:02:47:
43:f4:59:c4:48:dd:cc:0c:8c:56:f5:a3:0d:ec:28:7d:94:0f:
f8:2d:40:b1:5e:cc:af:61:5f:64:28:ed:5e:1a:15:8e:44:ac:
9b:90:9f:5e:77:ea:32:1e:cc:a9:1a:ef:ff:b3:4d:e7:44:c0:
05:11:6a:76:8e:9e:4c:58:e6:8d:1c:a4:d8:49:08:2b:e0:f0:
11:04:82:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiR2y8yUGaajUZCzYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3
OTU5MB4XDTI1MDExNzAyMDA0MFoXDTI1MDQxNzAxMDA0MFowLzEtMCsGA1UEAxMk
MjI5OTEyMjUtNDQ0MS00NGFlLTkxY2ItZDllZDY0NjA5NTdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsShEpeE+sYLjB4vo/b0Ic1XMxkc4oggxdhuK
ScQpc24KMklcidk2ZSMJPFkK93euwmPVClOUQfMcIA0bSGbO1Pqgkp6A68Mli6I4
Bp60Zbt+Ul85czykUH5jbGY+3wzkwSU1ZY3wD8xcYuIqZJUJenCtEX35d7UuDcgs
BmkJRdHKOHn8b7u3xkziq2jFscsndB89l3kBGsVHR4qNXyVnVHtY0mwyYH01bcy6
yJZKUkWqPoEz1nLcaTl64UJj2w8SuD77sxaWBfZPjDNb9z1a/cqmBidLPPeqPfLH
SUfbAY3LSoVdMpCCx8K1ZzakuavFTAXLC93RUEGr2kMZZvH9wQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGU83KwzNzOGXhItNNxgO997zlk3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz
ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvZjY2ODViN2EtNWYxMC0z
YmYzLThlYjktOWIwMzEwZDllMzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0
ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0
Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw
M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzkeSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE2RuWPw4gFEXVYzHvDRH7uxjFu6XwzODGnk77IW/zIUrcoKYqBzwjEf
JqF07P4Em1ML5mQjn6XrpTOcY4YLeqMk+ohUW8KEdxLQSNgymbHVI2g5EZGyrogH
jh9lM0O3q8LdOGlOB6Mz139EPOsW8jwrmJtl9iEKMUbpuKlwDN0QO9iaU2geBidE
CNw030f6z4jTdZ57WNzSkFbioe4UqGITA9DBn8AxyBUKk+lD5H0bEpICR0P0WcRI
3cwMjFb1ow3sKH2UD/gtQLFezK9hX2Qo7V4aFY5ErJuQn1536jIezKka7/+zTedE
wAURanaOnkxY5o0cpNhJCCvg8BEEgp0=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:46:38 2025 by rpki-client