Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ded893c2-c716-3f0d-8e75-2465f0832639.roa
File: ded893c2-c716-3f0d-8e75-2465f0832639.roa (raw, json)
Hash identifier: SN0fRKuN4c1q/pOdNyDeL/AWgVloKu1OpvoQh8mhYJc=
Subject key identifier: 86:47:A1:EC:92:CB:99:92:F0:4F:43:B1:16:E5:D4:6E:19:4F:A0:A5
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285848D47C22C24553C8DE4B11A4C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ded893c2-c716-3f0d-8e75-2465f0832639.roa
Signing time: Sun 09 Feb 2025 22:48:23 +0000
ROA not before: Sun 09 Feb 2025 22:48:23 +0000
ROA not after: Sat 10 May 2025 21:48:23 +0000
asID: 834
IP address blocks: 173.46.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d4:7c:22:c2:45:53:c8:de:4b:11:a4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Feb 9 22:48:23 2025 GMT
Not After : May 10 21:48:23 2025 GMT
Subject: CN=9879b53d-9047-48f8-a590-3b19ce108258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:57:16:5d:9f:f2:e1:df:d8:f4:5b:b1:2a:d7:
ee:35:67:0f:75:8c:cf:f4:1f:1b:09:ff:43:a9:a9:
6a:6a:83:6d:7e:67:f6:52:47:c8:b1:56:52:3c:28:
46:76:5b:3f:6a:97:7d:68:60:c3:0b:e9:06:5b:5f:
ef:9b:18:0f:c7:0f:fe:c3:cd:99:fe:b2:69:f4:e9:
f7:f9:16:84:f8:a6:dd:c9:fd:cc:8f:08:fc:fe:bc:
66:20:37:8f:e0:db:2b:53:f5:e9:55:e7:bb:39:b9:
02:6a:21:94:18:3c:ea:b4:f7:8a:f3:b7:a1:a6:ca:
34:bf:3f:69:21:45:6a:dd:8c:7a:cd:07:a1:79:42:
8e:ba:75:54:df:e3:9e:4f:3c:40:c7:94:27:11:97:
fc:31:4b:f0:ce:ff:2f:71:23:d4:13:b0:7a:da:7e:
f1:64:84:04:34:71:47:58:44:18:64:fc:b5:25:a9:
09:59:85:1a:2a:64:06:cc:0e:5b:c8:44:7e:21:44:
9a:9d:1e:a9:b6:c3:77:5c:72:18:83:b6:da:6c:cd:
f9:cc:16:f9:73:00:4e:37:f9:72:50:22:34:f2:66:
02:95:50:1c:08:39:2b:ad:6a:aa:21:b7:e4:9d:fc:
09:16:de:cc:84:aa:dc:f9:d9:ee:b8:b7:be:62:e7:
06:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:47:A1:EC:92:CB:99:92:F0:4F:43:B1:16:E5:D4:6E:19:4F:A0:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ded893c2-c716-3f0d-8e75-2465f0832639.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
173.46.81.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c1:38:cf:18:1f:ac:cb:04:22:09:d0:ad:ac:8e:d2:38:7c:f4:
3a:06:a4:1b:d4:61:c9:fe:64:5f:3c:d7:0e:c0:9b:ee:5f:6b:
69:09:59:49:fc:46:8e:e7:6a:71:02:50:0d:58:3d:a1:e7:34:
17:6f:ba:db:0a:6a:49:f1:c5:d2:43:f9:54:ea:43:d3:5c:55:
c6:fb:a4:b0:0d:cf:11:1f:66:13:f0:4d:94:92:8d:bc:15:58:
21:41:ba:a6:08:da:14:56:80:66:e5:ab:3c:05:31:1b:b0:30:
9c:c7:de:34:10:4f:ee:78:ff:cb:8c:aa:0b:51:82:7a:b1:47:
28:15:4c:1c:c9:c3:5a:19:42:6e:60:65:42:66:65:37:8a:f3:
c5:ac:ee:b3:f1:ec:f8:b5:16:8a:60:40:e7:01:d2:a4:a7:b4:
0a:49:28:2d:60:8d:68:5a:b2:b2:0c:51:a7:28:25:48:01:8e:
ee:44:59:5d:dd:4f:34:eb:83:36:ba:da:b9:65:7d:ae:e0:7f:
0f:c6:fc:c5:ce:f2:b9:c7:c7:00:ea:48:29:d3:8b:76:09:c2:
da:92:09:1c:ae:04:03:4d:1f:1c:05:6a:ee:c9:c8:d6:88:61:
e4:15:80:5c:14:7d:13:21:e8:83:78:40:08:4d:5c:9f:06:aa:
51:71:c5:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjUfCLCRVPI3ksRpMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI1MDIwOTIyNDgyM1oXDTI1MDUxMDIxNDgyM1owLzEtMCsGA1UEAxMk
OTg3OWI1M2QtOTA0Ny00OGY4LWE1OTAtM2IxOWNlMTA4MjU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1cWXZ/y4d/Y9FuxKtfuNWcPdYzP9B8bCf9D
qalqaoNtfmf2UkfIsVZSPChGdls/apd9aGDDC+kGW1/vmxgPxw/+w82Z/rJp9On3
+RaE+Kbdyf3Mjwj8/rxmIDeP4NsrU/XpVee7ObkCaiGUGDzqtPeK87ehpso0vz9p
IUVq3Yx6zQeheUKOunVU3+OeTzxAx5QnEZf8MUvwzv8vcSPUE7B62n7xZIQENHFH
WEQYZPy1JakJWYUaKmQGzA5byER+IUSanR6ptsN3XHIYg7babM35zBb5cwBON/ly
UCI08mYClVAcCDkrrWqqIbfknfwJFt7MhKrc+dnuuLe+YucGnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIZHoeySy5mS8E9DsRbl1G4ZT6ClMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZGVkODkzYzItYzcxNi0z
ZjBkLThlNzUtMjQ2NWYwODMyNjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArS5RMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAME4zxgfrMsEIgnQrayO0jh89DoGpBvUYcn+ZF881w7Am+5fa2kJWUn8
Ro7nanECUA1YPaHnNBdvutsKaknxxdJD+VTqQ9NcVcb7pLANzxEfZhPwTZSSjbwV
WCFBuqYI2hRWgGblqzwFMRuwMJzH3jQQT+54/8uMqgtRgnqxRygVTBzJw1oZQm5g
ZUJmZTeK88Ws7rPx7Pi1FopgQOcB0qSntApJKC1gjWhasrIMUacoJUgBju5EWV3d
TzTrgza62rllfa7gfw/G/MXO8rnHxwDqSCnTi3YJwtqSCRyuBANNHxwFau7JyNaI
YeQVgFwUfRMh6IN4QAhNXJ8GqlFxxZo=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:45:19 2025 by rpki-client