Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/9f63994d-c0aa-3c6e-bc88-577f76d76a60.roa
File: 9f63994d-c0aa-3c6e-bc88-577f76d76a60.roa (raw, json)
Hash identifier: RKBcbex2wcxU/1Hi4a7Vnvvc9JczrZtyRTqjP4n6+HQ=
Subject key identifier: B2:12:A9:D3:3A:1F:3C:8D:51:C2:C6:34:35:A5:CA:C3:19:34:B3:55
Certificate issuer: /CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
Certificate serial: 010D0C9F43285848E16BD3B7917D4710318AB280
Authority key identifier: F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/9f63994d-c0aa-3c6e-bc88-577f76d76a60.roa
Signing time: Fri 14 Feb 2025 14:00:52 +0000
ROA not before: Fri 14 Feb 2025 14:00:52 +0000
ROA not after: Thu 15 May 2025 13:00:52 +0000
asID: 6315
IP address blocks: 68.69.160.0/20 maxlen: 20
166.70.0.0/16 maxlen: 16
198.60.22.0/24 maxlen: 24
198.60.80.0/22 maxlen: 22
198.60.84.0/24 maxlen: 24
198.60.104.0/22 maxlen: 22
198.60.108.0/23 maxlen: 23
198.60.110.0/24 maxlen: 24
198.60.113.0/24 maxlen: 24
198.60.114.0/24 maxlen: 24
198.207.196.0/24 maxlen: 24
199.104.120.0/21 maxlen: 21
204.107.178.0/24 maxlen: 24
204.228.128.0/19 maxlen: 19
207.135.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:6b:d3:b7:91:7d:47:10:31:8a:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
Validity
Not Before: Feb 14 14:00:52 2025 GMT
Not After : May 15 13:00:52 2025 GMT
Subject: CN=82410c2c-014c-4b6e-ae10-d513da773f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:86:e0:d6:9d:be:0a:49:10:1f:b4:b7:c3:45:
43:40:cd:17:06:e2:6e:51:a8:34:4b:4e:d8:a5:14:
84:c6:fe:33:d7:dd:bb:d2:56:48:f1:ee:97:aa:a8:
b5:b0:a4:f2:bf:f9:ac:67:0a:7e:85:9b:b2:39:f1:
98:d7:a7:33:e6:c3:38:ad:07:00:72:96:85:5a:47:
21:3c:41:92:db:a4:33:95:87:41:7e:09:50:b2:a3:
87:33:4b:f6:2d:ba:d2:b6:38:db:92:6b:d1:9d:55:
58:c5:25:3e:26:02:af:86:b3:13:45:f6:3d:39:47:
19:59:b7:44:82:8f:48:a3:d6:2d:3c:e6:a7:a0:c9:
ab:0a:53:c6:97:3b:e7:dd:d9:ae:a5:7f:c2:7f:71:
db:59:89:54:26:60:da:e1:3a:90:61:c4:69:4c:73:
80:1d:33:d7:b9:a5:2d:97:d5:c0:21:f3:f7:49:d2:
14:08:e9:fd:8b:70:ca:7b:a3:32:9e:8a:23:a2:f6:
c4:22:e7:41:4f:5b:c4:cc:7c:45:c2:9e:94:95:45:
7e:fe:87:d4:31:a0:fe:56:c8:79:9e:09:5b:e9:bd:
cf:ba:31:44:23:1f:9d:0c:15:d7:9e:5e:ff:3e:a6:
d7:4d:e1:c5:2f:81:5a:80:50:c9:93:bf:26:4d:0c:
f8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:12:A9:D3:3A:1F:3C:8D:51:C2:C6:34:35:A5:CA:C3:19:34:B3:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/9f63994d-c0aa-3c6e-bc88-577f76d76a60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl
X509v3 Authority Key Identifier:
keyid:F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
sbgp-ipAddrBlock: critical
IPv4:
68.69.160.0/20
166.70.0.0/16
198.60.22.0/24
198.60.80.0-198.60.84.255
198.60.104.0-198.60.110.255
198.60.113.0-198.60.114.255
198.207.196.0/24
199.104.120.0/21
204.107.178.0/24
204.228.128.0/19
207.135.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:51:8c:1c:1b:47:ad:12:41:da:a1:3d:63:12:72:8e:a1:c7:
4f:94:f0:2d:3a:73:94:b8:14:32:60:99:af:01:61:f3:4e:ea:
29:64:4b:9e:ff:42:5a:a1:61:88:1a:8b:66:ff:68:d5:47:fa:
40:f0:94:78:fc:ab:89:a3:66:36:6f:fb:9d:9f:a9:25:be:d9:
97:23:64:eb:db:51:a8:70:80:81:32:d2:e4:87:66:74:49:7b:
af:be:40:9c:97:c5:11:86:96:a2:90:fd:17:25:f5:f3:e6:e1:
ae:76:a0:06:3b:0a:4d:bc:ca:dc:80:23:6b:d2:49:d6:9b:38:
56:36:a7:74:9b:a1:ac:45:2a:be:32:9c:70:be:1d:5f:23:81:
aa:46:6a:1d:48:77:c7:ed:42:a2:13:01:61:16:36:a9:65:dc:
e3:7f:1d:db:d9:cc:4e:3c:31:67:24:09:40:c9:17:44:e9:d1:
9a:5d:df:ee:1f:24:8d:5b:b1:c5:68:77:32:fb:f8:e9:2b:da:
8b:cc:49:5e:d9:f9:9c:2a:be:54:0e:2f:35:75:54:c6:31:f7:
12:e7:2d:2c:9c:c0:03:31:ec:1f:7d:e3:91:ee:4a:cc:b5:db:
e0:cb:a7:8c:1e:76:94:5c:55:42:48:ed:18:1e:9a:17:68:b0:
2c:7f:8a:11
-----BEGIN CERTIFICATE-----
MIIGljCCBX6gAwIBAgIUAQ0Mn0MoWEjha9O3kX1HEDGKsoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGZlNzgwNGYtZjE2YS00Zjc4LTk5NzktNmE4ZDUwOTll
NWU3MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk
ODI0MTBjMmMtMDE0Yy00YjZlLWFlMTAtZDUxM2RhNzczZjA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYbg1p2+CkkQH7S3w0VDQM0XBuJuUag0S07Y
pRSExv4z19270lZI8e6Xqqi1sKTyv/msZwp+hZuyOfGY16cz5sM4rQcAcpaFWkch
PEGS26QzlYdBfglQsqOHM0v2LbrStjjbkmvRnVVYxSU+JgKvhrMTRfY9OUcZWbdE
go9Io9YtPOanoMmrClPGlzvn3dmupX/Cf3HbWYlUJmDa4TqQYcRpTHOAHTPXuaUt
l9XAIfP3SdIUCOn9i3DKe6MynoojovbEIudBT1vEzHxFwp6UlUV+/ofUMaD+Vsh5
nglb6b3PujFEIx+dDBXXnl7/PqbXTeHFL4FagFDJk78mTQz43QIDAQABo4IDqDCC
A6QwHQYDVR0OBBYEFLISqdM6HzyNUcLGNDWlysMZNLNVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZmU3
ODA0Zi1mMTZhLTRmNzgtOTk3OS02YThkNTA5OWU1ZTcvOWY2Mzk5NGQtYzBhYS0z
YzZlLWJjODgtNTc3Zjc2ZDc2YTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGZlNzgwNGYtZjE2YS00Zjc4LTk5
NzktNmE4ZDUwOTllNWU3LzBmZTc4MDRmLWYxNmEtNGY3OC05OTc5LTZhOGQ1MDk5
ZTVlNy5jcmwwHwYDVR0jBBgwFoAU+VXAQ4RRLwbPOrS6kfJqw02k5GgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wZmU3ODA0Zi1mMTZhLTRmNzgtOTk3OS02YThk
NTA5OWU1ZTcuY2VyMHIGCCsGAQUFBwEHAQH/BGMwYTBfBAIAATBZAwQEREWgAwMA
pkYDBADGPBYwDAMEBMY8UAMEAMY8VDAMAwQDxjxoAwQAxjxuMAwDBADGPHEDBADG
PHIDBADGz8QDBAPHaHgDBADMa7IDBAXM5IADBAXPh4AwVAYDVR0gAQH/BEowSDBG
BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y
ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAl1GMHBtH
rRJB2qE9YxJyjqHHT5TwLTpzlLgUMmCZrwFh807qKWRLnv9CWqFhiBqLZv9o1Uf6
QPCUePyriaNmNm/7nZ+pJb7ZlyNk69tRqHCAgTLS5IdmdEl7r75AnJfFEYaWopD9
FyX18+bhrnagBjsKTbzK3IAja9JJ1ps4VjandJuhrEUqvjKccL4dXyOBqkZqHUh3
x+1CohMBYRY2qWXc438d29nMTjwxZyQJQMkXROnRml3f7h8kjVuxxWh3Mvv46Sva
i8xJXtn5nCq+VA4vNXVUxjH3EuctLJzAAzHsH33jke5KzLXb4MunjB52lFxVQkjt
GB6aF2iwLH+KEQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:34:48 2025 by rpki-client