Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0570ebae-fcff-332a-9a31-c6bb30ad19a9.roa
File: 0570ebae-fcff-332a-9a31-c6bb30ad19a9.roa (raw, json)
Hash identifier: O8GFFGSjPi9ah9U+dTaw4ZfZZSNYvS0VdO8OoHQixGM=
Subject key identifier: 40:0D:E7:C8:D3:6C:CE:E8:A1:66:24:C3:4D:17:08:16:13:FF:72:24
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848ADC60E050DDC8D48386655A0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0570ebae-fcff-332a-9a31-c6bb30ad19a9.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 25668
IP address blocks: 208.181.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:0e:05:0d:dc:8d:48:38:66:55:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=79bec475-f4a1-4984-b7a6-04d872ba796b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0a:48:06:c9:e9:8c:a3:11:eb:98:66:b4:bf:
65:3f:78:2f:b0:2e:3e:46:a6:f7:6c:d0:36:41:d7:
7f:23:7c:ce:ba:f4:a2:a7:33:dc:3d:89:dc:f3:35:
1a:51:d9:3c:b2:d6:28:fe:83:c1:46:7c:ed:62:8b:
23:ff:2a:3f:48:9b:46:78:10:ae:4c:6a:09:af:af:
85:61:f8:c5:a2:0f:08:87:94:af:74:07:d8:61:ef:
7e:ba:ce:a0:c1:f3:64:81:6d:81:7f:e3:42:9d:aa:
09:02:0b:72:6e:0c:62:1a:e1:c9:fc:41:bd:fc:9a:
f7:0c:59:ec:97:cb:99:3f:59:da:55:cf:62:eb:fa:
51:8b:d4:65:e5:e9:27:e2:74:e8:3a:a9:4d:af:5b:
bb:56:18:aa:8d:4e:1b:dc:38:cb:ab:3e:e4:11:53:
02:79:25:95:62:05:74:ab:33:12:55:30:1f:df:82:
c3:ec:df:26:88:38:cd:17:db:a5:7a:60:bb:18:84:
5b:6b:9d:03:8f:0e:aa:f2:be:62:f0:ee:7b:c2:4e:
cd:93:dc:ee:0d:d2:03:6f:84:24:d3:c3:62:d9:d1:
a6:bd:77:dc:d0:8c:ed:55:1d:e8:96:c2:42:1e:41:
41:b8:cb:4c:b8:74:f3:08:8f:04:8d:ca:14:4a:b8:
d6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0D:E7:C8:D3:6C:CE:E8:A1:66:24:C3:4D:17:08:16:13:FF:72:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0570ebae-fcff-332a-9a31-c6bb30ad19a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
208.181.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:b8:5e:be:b4:0b:1b:c1:11:e2:16:13:37:f9:3b:5f:1d:da:
cc:57:fe:4d:2a:0b:32:c5:64:78:ac:bb:01:91:5a:9f:ee:a9:
3f:d7:73:a4:7e:b9:83:01:fb:ec:2f:b0:eb:5e:dd:57:5d:20:
d9:8e:fa:b1:5b:6e:01:22:b7:74:34:0e:84:c4:67:3f:fe:32:
b3:0a:d1:a5:32:1d:d5:36:86:99:5c:9f:61:48:1d:2d:e6:3d:
ef:d4:39:d1:e5:99:d1:af:97:53:7a:13:3f:4d:cd:20:fc:07:
fc:04:54:5f:cb:cd:11:e8:a5:dd:f3:94:45:97:0b:fe:44:87:
46:b1:5f:62:2f:fb:aa:e3:3e:d1:e5:3f:12:93:c7:99:12:65:
6e:81:47:c8:e0:8e:90:84:96:19:0f:6e:72:4d:1a:06:c2:f1:
47:ae:c1:af:61:73:7c:ba:3c:c5:4e:39:2e:51:2e:43:ac:67:
6d:f7:b4:d6:e4:71:c7:77:fd:58:9f:73:d1:b5:d3:07:54:4f:
78:6d:d0:13:10:bb:1a:c4:e6:a3:9a:ee:89:40:f8:44:51:35:
40:3e:e6:98:e4:cc:0f:85:09:6a:dd:9d:35:ac:55:7d:17:94:
a7:f8:45:2f:f2:67:3a:87:3f:68:80:0a:8e:14:1f:d0:75:78:
ad:6b:d0:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxg4FDdyNSDhmVaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk
NzliZWM0NzUtZjRhMS00OTg0LWI3YTYtMDRkODcyYmE3OTZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwpIBsnpjKMR65hmtL9lP3gvsC4+Rqb3bNA2
Qdd/I3zOuvSipzPcPYnc8zUaUdk8stYo/oPBRnztYosj/yo/SJtGeBCuTGoJr6+F
YfjFog8Ih5SvdAfYYe9+us6gwfNkgW2Bf+NCnaoJAgtybgxiGuHJ/EG9/Jr3DFns
l8uZP1naVc9i6/pRi9Rl5ekn4nToOqlNr1u7VhiqjU4b3DjLqz7kEVMCeSWVYgV0
qzMSVTAf34LD7N8miDjNF9ulemC7GIRba50Djw6q8r5i8O57wk7Nk9zuDdIDb4Qk
08Ni2dGmvXfc0IztVR3olsJCHkFBuMtMuHTzCI8EjcoUSrjW0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEAN58jTbM7ooWYkw00XCBYT/3IkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMDU3MGViYWUtZmNmZi0z
MzJhLTlhMzEtYzZiYjMwYWQxOWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0LV4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEm4Xr60CxvBEeIWEzf5O18d2sxX/k0qCzLFZHisuwGRWp/uqT/Xc6R+
uYMB++wvsOte3VddINmO+rFbbgEit3Q0DoTEZz/+MrMK0aUyHdU2hplcn2FIHS3m
Pe/UOdHlmdGvl1N6Ez9NzSD8B/wEVF/LzRHopd3zlEWXC/5Eh0axX2Iv+6rjPtHl
PxKTx5kSZW6BR8jgjpCElhkPbnJNGgbC8Ueuwa9hc3y6PMVOOS5RLkOsZ233tNbk
ccd3/Vifc9G10wdUT3ht0BMQuxrE5qOa7olA+ERRNUA+5pjkzA+FCWrdnTWsVX0X
lKf4RS/yZzqHP2iACo4UH9B1eK1r0PU=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:21 2025 by rpki-client