Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/d79943c6-e491-304d-bc93-09d1a586c483.roa
File: d79943c6-e491-304d-bc93-09d1a586c483.roa (raw, json)
Hash identifier: OUFn6ihLBJ6Z42mTsgD8Tr7UC1umpootszfNvHwRvos=
Subject key identifier: 72:17:16:7B:1C:A0:43:A2:0B:FF:D8:E3:5C:48:81:58:88:D9:B3:8B
Certificate issuer: /CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265
Certificate serial: 010D0C9F432858490619401B041AEDDC5CC55680
Authority key identifier: 6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/d79943c6-e491-304d-bc93-09d1a586c483.roa
Signing time: Thu 27 Feb 2025 17:19:33 +0000
ROA not before: Thu 27 Feb 2025 17:19:33 +0000
ROA not after: Wed 28 May 2025 16:19:33 +0000
asID: 7029
IP address blocks: 206.174.134.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:06:19:40:1b:04:1a:ed:dc:5c:c5:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265
Validity
Not Before: Feb 27 17:19:33 2025 GMT
Not After : May 28 16:19:33 2025 GMT
Subject: CN=44a6f87e-8267-4cc2-93ae-26eeaa62e535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:db:cb:d8:fa:cc:e3:cc:dd:e6:2f:5c:a6:42:
ee:69:41:b6:d5:ab:4f:48:65:20:de:f6:58:a4:1d:
91:3f:1e:e9:b6:6e:d2:b2:05:51:27:bb:12:55:2e:
c4:a8:9d:a2:e3:50:b3:aa:ec:57:5a:84:ba:8d:be:
54:ba:30:d0:20:ea:d6:94:ed:0a:5f:75:8c:8f:3c:
d0:f3:bd:c3:e9:95:d1:94:11:b6:63:59:c6:e0:f9:
d3:7a:df:dd:35:81:43:b5:05:b8:c9:c1:79:f6:27:
de:ce:c6:12:e1:2e:1f:79:84:1d:fc:81:04:38:22:
00:4c:dc:fd:99:4e:6d:eb:9a:c2:6e:74:65:a5:af:
2e:14:f1:d8:e4:7a:86:14:22:b5:85:aa:f9:e0:da:
70:64:8c:52:69:2c:dc:60:a7:56:eb:bc:1e:66:56:
d8:4b:26:71:24:8d:dd:9f:59:fb:84:56:62:5d:7a:
13:8a:39:24:ea:b0:fd:de:98:d2:c0:cd:19:9a:9f:
b6:84:a6:19:21:b7:da:91:9f:ec:66:8f:a7:10:98:
48:f3:f3:cd:51:6d:76:46:9f:f0:39:41:c3:b6:69:
01:73:81:87:93:88:6b:94:00:83:c9:f5:49:50:8b:
67:3f:43:9e:96:65:5e:d0:f9:36:57:49:a2:6a:5b:
9f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:17:16:7B:1C:A0:43:A2:0B:FF:D8:E3:5C:48:81:58:88:D9:B3:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/d79943c6-e491-304d-bc93-09d1a586c483.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl
X509v3 Authority Key Identifier:
keyid:6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer
sbgp-ipAddrBlock: critical
IPv4:
206.174.134.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:15:77:ab:d7:2f:5a:d7:09:39:ba:ea:60:83:9d:8e:54:55:
4b:d6:0c:21:c8:3c:bf:95:f1:77:ac:3c:f3:93:af:8a:78:6a:
6b:cf:de:e3:64:91:9a:56:43:40:07:69:69:16:6a:0c:4b:36:
b3:3f:29:50:e0:ca:a8:4e:a7:66:26:fc:40:59:dd:47:e4:54:
4c:e5:4b:7e:13:8c:ec:1d:f9:da:9f:53:6d:7e:f0:91:08:dd:
6d:5d:8a:c9:96:7e:95:5f:a0:52:69:c5:95:97:c5:ea:e9:93:
ef:e0:57:b2:d8:95:dc:0f:ef:90:01:34:1b:54:f6:3f:2a:8d:
e4:b4:2b:24:02:92:b5:98:7f:03:3c:3a:be:af:fa:5f:b3:bc:
91:ff:27:69:e9:fb:82:6c:fc:7f:3f:41:a9:b0:c0:a7:52:34:
33:f3:53:56:21:e3:af:db:87:33:48:a1:d6:ec:f6:c8:c5:72:
4b:6a:bc:70:90:7f:e6:b2:bb:b6:03:c9:78:34:da:08:f9:63:
e6:5e:ad:bc:00:c8:2c:6c:89:9c:39:00:81:cb:14:27:65:f8:
c4:ae:68:73:ed:fc:ef:11:e5:61:6a:5f:54:be:19:8a:67:33:
44:28:0b:6e:6f:ae:a7:fe:c5:cf:b0:e5:ad:1f:53:0d:74:47:
0d:b8:5b:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkGGUAbBBrt3FzFVoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmZlOWVkMWMtZGQ0Zi00ZTFlLThlMjYtMjAxNDMzNGVl
MjY1MB4XDTI1MDIyNzE3MTkzM1oXDTI1MDUyODE2MTkzM1owLzEtMCsGA1UEAxMk
NDRhNmY4N2UtODI2Ny00Y2MyLTkzYWUtMjZlZWFhNjJlNTM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9vL2PrM48zd5i9cpkLuaUG21atPSGUg3vZY
pB2RPx7ptm7SsgVRJ7sSVS7EqJ2i41CzquxXWoS6jb5UujDQIOrWlO0KX3WMjzzQ
873D6ZXRlBG2Y1nG4PnTet/dNYFDtQW4ycF59ifezsYS4S4feYQd/IEEOCIATNz9
mU5t65rCbnRlpa8uFPHY5HqGFCK1har54NpwZIxSaSzcYKdW67weZlbYSyZxJI3d
n1n7hFZiXXoTijkk6rD93pjSwM0Zmp+2hKYZIbfakZ/sZo+nEJhI8/PNUW12Rp/w
OUHDtmkBc4GHk4hrlACDyfVJUItnP0OelmVe0Pk2V0mialufmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHIXFnscoEOiC//Y41xIgViI2bOLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5
ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0MzM0ZWUyNjUvZDc5OTQzYzYtZTQ5MS0z
MDRkLWJjOTMtMDlkMWE1ODZjNDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmZlOWVkMWMtZGQ0Zi00ZTFlLThl
MjYtMjAxNDMzNGVlMjY1LzJmZTllZDFjLWRkNGYtNGUxZS04ZTI2LTIwMTQzMzRl
ZTI2NS5jcmwwHwYDVR0jBBgwFoAUbcTQif/6sNYsCWoRLEBwddRje9MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0
MzM0ZWUyNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzq6GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABMVd6vXL1rXCTm66mCDnY5UVUvWDCHIPL+V8XesPPOTr4p4amvP3uNk
kZpWQ0AHaWkWagxLNrM/KVDgyqhOp2Ym/EBZ3UfkVEzlS34TjOwd+dqfU21+8JEI
3W1dismWfpVfoFJpxZWXxerpk+/gV7LYldwP75ABNBtU9j8qjeS0KyQCkrWYfwM8
Or6v+l+zvJH/J2np+4Js/H8/QamwwKdSNDPzU1Yh46/bhzNIodbs9sjFcktqvHCQ
f+ayu7YDyXg02gj5Y+ZerbwAyCxsiZw5AIHLFCdl+MSuaHPt/O8R5WFqX1S+GYpn
M0QoC25vrqf+xc+w5a0fUw10Rw24W54=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:28:58 2025 by rpki-client