Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/b7f77b74-c2ea-3780-b762-2178e38d6e01.roa
File: b7f77b74-c2ea-3780-b762-2178e38d6e01.roa (raw, json)
Hash identifier: 4Be2E0XbmXYboGCgBp+IhMD+IRmRpXHBiseKU8VyFLM=
Subject key identifier: 1E:A6:4F:46:3E:BA:75:6B:5E:87:EF:3E:A0:52:A1:A6:32:A3:E5:3D
Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial: 010D0C9F43285848A13607EE4F8B5B9EAB396040
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/b7f77b74-c2ea-3780-b762-2178e38d6e01.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 149428
IP address blocks: 172.102.218.0/24 maxlen: 24
216.158.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:07:ee:4f:8b:5b:9e:ab:39:60:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=516464b7-ec8d-4be3-b131-72c6489430b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1e:e2:6b:77:12:f6:8b:58:14:16:5f:aa:7f:
8f:9c:1b:be:45:f0:fd:9e:80:d9:42:9b:5c:2c:e7:
e6:d2:82:70:c6:4b:01:72:92:68:73:b6:0c:31:a4:
23:32:9f:68:92:b3:e2:f2:b6:b0:fb:b0:44:09:df:
f4:90:59:c5:af:c5:28:9b:d2:c7:86:2a:d2:fc:c7:
a8:8b:9a:34:ec:e9:3b:57:a2:ee:71:b8:4e:54:fc:
dd:67:b3:9b:70:b9:f7:df:3a:cf:82:46:81:c3:22:
c5:42:2a:8f:0e:84:73:cf:d9:dc:80:e1:14:c2:5b:
5c:db:f3:14:19:4b:13:b1:96:66:41:1f:b3:50:d2:
c8:03:ec:97:4e:46:74:6b:cc:a5:ea:e4:78:69:75:
8b:52:00:45:9f:c7:f7:3e:4d:ae:8f:1b:1b:27:29:
3f:39:fc:dc:eb:35:72:6b:6c:7f:d9:d3:75:23:0b:
fa:09:56:45:a3:b6:1a:83:31:b1:e3:bf:98:90:dd:
35:ed:15:a2:f4:11:2a:bf:c6:15:9b:94:af:2f:5f:
71:82:59:7a:c0:b1:ba:a3:32:ad:0f:67:12:f6:90:
05:aa:19:09:1a:7b:aa:ca:1c:8b:68:da:b7:23:1c:
03:43:60:9e:e1:5b:5f:f0:d9:61:a2:d0:dc:de:5d:
34:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A6:4F:46:3E:BA:75:6B:5E:87:EF:3E:A0:52:A1:A6:32:A3:E5:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/b7f77b74-c2ea-3780-b762-2178e38d6e01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
X509v3 Authority Key Identifier:
keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
sbgp-ipAddrBlock: critical
IPv4:
172.102.218.0/24
216.158.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:ee:18:7e:df:9d:6b:ba:89:4b:72:79:02:37:7c:89:9b:cf:
cb:18:81:22:65:40:61:e0:2f:c9:fa:fc:40:dc:f1:86:4c:85:
89:f5:18:98:a6:a0:a9:e2:3d:81:89:c5:5f:7d:f0:6e:07:b5:
ed:1e:70:cc:9a:1c:ae:28:4c:e5:80:1f:a7:85:5e:e0:84:3e:
09:89:de:98:9f:f4:f5:7e:ab:71:1c:88:74:76:fa:6d:56:3c:
50:63:ac:51:48:2b:64:b4:ed:b3:58:33:d6:5d:1c:ea:ed:89:
af:a2:9a:ad:51:e1:bc:4f:a9:39:4e:44:e1:20:b4:73:93:27:
4d:d9:4b:61:78:58:5f:17:08:19:ee:4c:86:b0:2a:3d:93:57:
f1:ed:c3:24:bf:92:ff:dc:de:9e:f8:98:56:a3:d2:6d:b3:bc:
c4:e4:64:57:4f:74:33:7d:2b:15:74:de:46:71:8f:c1:da:e5:
39:de:04:23:d3:08:af:2d:d5:fd:cc:6a:0b:78:0f:f4:3c:65:
57:27:ab:67:50:9c:0a:ea:46:82:80:bd:4a:b0:0f:94:00:2f:
ad:c7:4a:15:4e:e0:d8:a8:95:27:b2:7c:8f:5d:3b:92:b2:8e:
b7:74:19:a4:e2:2b:45:4a:4d:27:39:64:12:e7:40:2c:9d:8a:
cc:fe:61:2f
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEihNgfuT4tbnqs5YEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz
M2E0MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk
NTE2NDY0YjctZWM4ZC00YmUzLWIxMzEtNzJjNjQ4OTQzMGIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjB7ia3cS9otYFBZfqn+PnBu+RfD9noDZQptc
LOfm0oJwxksBcpJoc7YMMaQjMp9okrPi8raw+7BECd/0kFnFr8Uom9LHhirS/Meo
i5o07Ok7V6LucbhOVPzdZ7ObcLn33zrPgkaBwyLFQiqPDoRzz9ncgOEUwltc2/MU
GUsTsZZmQR+zUNLIA+yXTkZ0a8yl6uR4aXWLUgBFn8f3Pk2ujxsbJyk/Ofzc6zVy
a2x/2dN1Iwv6CVZFo7YagzGx47+YkN017RWi9BEqv8YVm5SvL19xgll6wLG6ozKt
D2cS9pAFqhkJGnuqyhyLaNq3IxwDQ2Ce4Vtf8NlhotDc3l00DwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFB6mT0Y+unVrXofvPqBSoaYyo+U9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2
NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvYjdmNzdiNzQtYzJlYS0z
NzgwLWI3NjItMjE3OGUzOGQ2ZTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1
MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0
MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj
NmFiNDMzYTQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArGbaAwQA
2J7NMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAEDuGH7fnWu6iUtyeQI3fImbz8sYgSJlQGHgL8n6/EDc8YZM
hYn1GJimoKniPYGJxV998G4Hte0ecMyaHK4oTOWAH6eFXuCEPgmJ3pif9PV+q3Ec
iHR2+m1WPFBjrFFIK2S07bNYM9ZdHOrtia+imq1R4bxPqTlOROEgtHOTJ03ZS2F4
WF8XCBnuTIawKj2TV/HtwyS/kv/c3p74mFaj0m2zvMTkZFdPdDN9KxV03kZxj8Ha
5TneBCPTCK8t1f3Magt4D/Q8ZVcnq2dQnArqRoKAvUqwD5QAL63HShVO4NiolSey
fI9dO5Kyjrd0GaTiK0VKTSc5ZBLnQCydisz+YS8=
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:32:13 2025 by rpki-client