Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/95543801-26ad-3eb0-946d-dc8e31f78a7c.roa
File: 95543801-26ad-3eb0-946d-dc8e31f78a7c.roa (raw, json)
Hash identifier: JMx+YxDJx0I7l6hYtKZNVYNzbpnbZMFDTCuFZNWTpko=
Subject key identifier: 35:B9:0C:FF:D4:97:D9:BA:BB:F8:F8:14:81:EF:91:9A:C2:8A:B9:1A
Certificate issuer: /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial: 010D0C9F43285848F65BE482CD4A9ADE990C9980
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/95543801-26ad-3eb0-946d-dc8e31f78a7c.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 13335
IP address blocks: 169.196.196.0/24 maxlen: 24
169.196.197.0/24 maxlen: 24
169.196.202.0/24 maxlen: 24
169.196.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:e4:82:cd:4a:9a:de:99:0c:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=fdb34da7-d41b-4aa5-96b0-c8ec06eedf54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:81:50:10:ea:67:72:75:7e:e7:e5:8f:3f:56:
ae:20:e6:97:71:48:4a:ba:ba:16:83:f5:59:1d:56:
fc:0b:21:c1:a1:a7:03:e9:2d:aa:53:6a:83:51:13:
0e:17:d6:8b:d2:6b:ad:3c:40:ba:51:17:94:dd:af:
23:2d:ab:cc:5b:3c:a3:23:b2:ec:df:70:a9:d9:5d:
e7:bf:f9:c8:dd:af:d2:18:83:ce:5e:9c:1a:f0:5f:
ea:73:90:35:32:77:7e:de:84:87:02:1a:08:6f:b2:
27:11:56:e1:31:a1:5b:dc:fb:fa:cc:ed:98:58:bf:
77:eb:e0:1f:e7:43:86:96:78:4d:de:ce:a3:e3:c5:
2e:ca:ea:55:58:9d:6c:c6:53:bd:80:34:8d:05:68:
c2:b3:58:a4:25:47:55:4a:b9:ef:5b:04:9b:ac:60:
d2:75:34:93:a7:b5:03:22:65:c5:14:c5:c7:fe:12:
7b:89:52:24:ce:61:3f:d6:cb:7a:ab:9f:3e:03:51:
80:9e:f8:55:e5:a2:71:f6:b4:9c:a6:39:5b:45:11:
f6:bb:c0:9d:eb:04:2d:45:4a:b0:96:6e:99:f2:9c:
f3:9d:83:49:43:11:a9:7c:dc:f6:87:f4:e6:37:fc:
47:e0:2f:08:ed:37:94:60:c6:ae:39:31:67:99:21:
58:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B9:0C:FF:D4:97:D9:BA:BB:F8:F8:14:81:EF:91:9A:C2:8A:B9:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/95543801-26ad-3eb0-946d-dc8e31f78a7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
X509v3 Authority Key Identifier:
keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
sbgp-ipAddrBlock: critical
IPv4:
169.196.196.0/23
169.196.202.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:35:00:96:28:d2:b7:b9:69:86:eb:10:25:4a:51:76:e5:f2:
11:9f:e2:56:9b:e5:c8:bc:89:7e:68:e5:b1:5d:23:e3:fb:2b:
93:e3:ed:2d:d9:fd:a7:67:58:af:32:0d:01:2f:10:ec:4b:2e:
0d:bf:1e:63:7d:8f:11:6a:2c:b7:53:00:6b:72:79:65:0a:94:
7e:9c:fa:fb:51:10:04:11:7e:4f:d9:c8:f4:c2:a6:6b:38:12:
7a:53:ea:57:40:03:3e:f3:b7:b5:a7:ca:95:7f:f5:ce:4d:8e:
01:d0:bf:e9:1d:a0:02:b3:b1:b5:b9:f6:58:7c:7c:3d:b4:c4:
23:5e:d5:8a:59:98:34:2e:64:45:05:2e:d9:41:b4:e2:51:d5:
8f:4c:c7:5e:19:6f:74:25:91:d2:1f:b8:ba:15:6b:c5:27:a8:
e9:77:47:d8:de:65:ae:7e:aa:42:b2:50:b0:49:a9:0f:cc:bd:
cd:f1:4e:58:98:0e:b2:d0:81:8e:3d:62:4c:a2:19:70:ac:63:
53:ff:8a:f1:f9:df:9d:b4:69:d9:54:95:10:bd:5a:ed:bf:ac:
05:c3:87:d4:0f:4c:30:90:e7:0e:43:1a:0c:6d:19:b5:f5:d0:
ec:77:22:2f:f2:16:39:ea:43:a1:e4:d0:a1:a8:9c:1d:73:be:
99:c8:77:85
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEj2W+SCzUqa3pkMmYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTczZWUxYmItYmI2Yi00Y2M2LWJjYTEtNGMxNjIyZGM0
ZWRiMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk
ZmRiMzRkYTctZDQxYi00YWE1LTk2YjAtYzhlYzA2ZWVkZjU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9IFQEOpncnV+5+WPP1auIOaXcUhKuroWg/VZ
HVb8CyHBoacD6S2qU2qDURMOF9aL0mutPEC6UReU3a8jLavMWzyjI7Ls33Cp2V3n
v/nI3a/SGIPOXpwa8F/qc5A1Mnd+3oSHAhoIb7InEVbhMaFb3Pv6zO2YWL936+Af
50OGlnhN3s6j48UuyupVWJ1sxlO9gDSNBWjCs1ikJUdVSrnvWwSbrGDSdTSTp7UD
ImXFFMXH/hJ7iVIkzmE/1st6q58+A1GAnvhV5aJx9rScpjlbRRH2u8Cd6wQtRUqw
lm6Z8pzznYNJQxGpfNz2h/TmN/xH4C8I7TeUYMauOTFnmSFYtwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFDW5DP/Ul9m6u/j4FIHvkZrCirkaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NzNl
ZTFiYi1iYjZiLTRjYzYtYmNhMS00YzE2MjJkYzRlZGIvOTU1NDM4MDEtMjZhZC0z
ZWIwLTk0NmQtZGM4ZTMxZjc4YTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTczZWUxYmItYmI2Yi00Y2M2LWJj
YTEtNGMxNjIyZGM0ZWRiLzU3M2VlMWJiLWJiNmItNGNjNi1iY2ExLTRjMTYyMmRj
NGVkYi5jcmwwHwYDVR0jBBgwFoAU5bcwnII1o67jk7VvPhVOUUksQ+AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NzNlZTFiYi1iYjZiLTRjYzYtYmNhMS00YzE2
MjJkYzRlZGIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBqcTEAwQB
qcTKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAJg1AJYo0re5aYbrECVKUXbl8hGf4lab5ci8iX5o5bFdI+P7
K5Pj7S3Z/adnWK8yDQEvEOxLLg2/HmN9jxFqLLdTAGtyeWUKlH6c+vtREAQRfk/Z
yPTCpms4EnpT6ldAAz7zt7WnypV/9c5NjgHQv+kdoAKzsbW59lh8fD20xCNe1YpZ
mDQuZEUFLtlBtOJR1Y9Mx14Zb3QlkdIfuLoVa8UnqOl3R9jeZa5+qkKyULBJqQ/M
vc3xTliYDrLQgY49YkyiGXCsY1P/ivH53520adlUlRC9Wu2/rAXDh9QPTDCQ5w5D
GgxtGbX10Ox3Ii/yFjnqQ6Hk0KGonB1zvpnId4U=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:42 2025 by rpki-client