Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/49f4f873-e26d-3c89-be18-a10d45ad89e3.roa
File: 49f4f873-e26d-3c89-be18-a10d45ad89e3.roa (raw, json)
Hash identifier: u2ZAgUB3IPSfxJcqFxsYRuaaAxgOWd8khfwpV/CdxME=
Subject key identifier: F0:0F:40:82:BF:6D:72:77:1F:7B:8C:64:81:AC:EB:10:34:B1:37:C5
Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial: 010D0C9F432858495ABEE182390D73D2414F7F00
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/49f4f873-e26d-3c89-be18-a10d45ad89e3.roa
Signing time: Sun 30 Mar 2025 01:00:47 +0000
ROA not before: Sun 30 Mar 2025 01:00:47 +0000
ROA not after: Sat 28 Jun 2025 01:00:47 +0000
asID: 55044
IP address blocks: 67.130.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5a:be:e1:82:39:0d:73:d2:41:4f:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Validity
Not Before: Mar 30 01:00:47 2025 GMT
Not After : Jun 28 01:00:47 2025 GMT
Subject: CN=15a2da5b-b77e-4b98-b9c1-f37bff9baad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:44:d8:a9:d6:a5:c4:f9:5f:51:a0:db:44:a3:
ab:ad:ca:4d:8b:eb:9e:c3:78:8a:88:88:6d:3c:f3:
7a:26:ae:22:93:a5:c5:ae:5a:2c:9d:a3:5f:83:73:
bb:e2:66:fd:36:15:8c:df:a1:37:71:5e:e0:9d:57:
65:49:13:f0:f6:1b:2a:70:7e:38:00:fa:76:ee:56:
9a:b7:b6:7d:93:16:d5:4e:25:60:9b:b1:81:5a:f3:
41:60:15:65:33:96:50:69:1d:88:a5:fa:24:cf:c4:
c4:93:97:ab:78:50:a0:9b:c9:55:a3:f7:26:24:61:
ea:da:7a:0e:9b:e8:fd:74:24:00:ab:9d:c3:bc:15:
52:bb:13:b0:bb:3b:5a:a7:fc:b0:b9:c3:ac:d0:ce:
93:98:71:db:d0:9c:af:33:60:03:43:0e:54:8b:f9:
fd:2f:ec:7e:53:ae:22:12:78:3d:20:5f:a7:ca:08:
cb:15:c4:08:ce:03:9a:b2:a4:3e:d4:cb:fa:24:55:
62:24:ce:70:77:7f:81:23:f1:08:ff:90:a6:f9:8e:
eb:52:fe:51:a3:e6:1c:a3:b5:eb:6d:97:8c:3d:2a:
2c:77:07:cc:94:4e:ba:b8:fa:6b:6f:d4:de:a4:92:
ac:bc:68:d5:a4:23:a1:8f:cd:92:0c:a3:01:c4:aa:
73:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0F:40:82:BF:6D:72:77:1F:7B:8C:64:81:AC:EB:10:34:B1:37:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/49f4f873-e26d-3c89-be18-a10d45ad89e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
X509v3 Authority Key Identifier:
keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
sbgp-ipAddrBlock: critical
IPv4:
67.130.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:3f:f8:66:5c:7e:19:7a:61:e7:4d:5d:43:93:de:9a:95:05:
75:42:54:31:8c:48:09:0e:7b:24:bd:a5:35:64:fe:1c:0a:85:
94:91:43:a1:74:4a:2d:af:52:b3:f6:20:b0:c3:b8:88:44:4f:
42:23:9b:38:63:ca:e2:9e:df:9e:ec:bd:2c:23:0b:71:41:e4:
8d:86:30:1f:6f:e8:b4:b3:b9:19:67:d9:5f:f3:1e:b9:da:58:
76:03:8a:3d:5e:52:f7:23:c7:90:a7:5d:d5:25:08:5b:81:af:
cb:2d:92:1c:e4:15:bb:cc:1e:80:11:d9:71:e3:87:59:23:1a:
e3:57:6b:05:a0:71:64:e2:ee:03:4f:da:f5:0f:95:7c:a4:44:
19:1c:40:67:7a:a5:f7:e8:19:9c:d4:d7:ed:34:2d:86:31:74:
5c:d9:d7:69:fd:b3:25:f0:7b:1e:1e:f5:cd:ba:b4:0c:b6:2a:
82:30:b1:cc:a8:d5:a1:98:7c:49:33:38:ce:82:43:27:19:ef:
62:ca:7d:00:94:b6:b6:78:0f:f1:6f:57:db:ab:f0:d5:ff:d3:
c7:58:9e:bb:c9:96:5a:6d:a2:6e:1f:44:bf:c4:bf:af:11:c1:
41:1c:70:ef:12:a4:a2:e4:ba:20:c2:67:cc:05:4f:cf:7f:3b:
97:f0:44:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavuGCOQ1z0kFPfwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm
M2VjMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk
MTVhMmRhNWItYjc3ZS00Yjk4LWI5YzEtZjM3YmZmOWJhYWQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkTYqdalxPlfUaDbRKOrrcpNi+uew3iKiIht
PPN6Jq4ik6XFrlosnaNfg3O74mb9NhWM36E3cV7gnVdlSRPw9hsqcH44APp27laa
t7Z9kxbVTiVgm7GBWvNBYBVlM5ZQaR2Ipfokz8TEk5ereFCgm8lVo/cmJGHq2noO
m+j9dCQAq53DvBVSuxOwuztap/ywucOs0M6TmHHb0JyvM2ADQw5Ui/n9L+x+U64i
Eng9IF+nygjLFcQIzgOasqQ+1Mv6JFViJM5wd3+BI/EI/5Cm+Y7rUv5Ro+Yco7Xr
bZeMPSosdwfMlE66uPprb9TepJKsvGjVpCOhj82SDKMBxKpzHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPAPQIK/bXJ3H3uMZIGs6xA0sTfFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3
YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvNDlmNGY4NzMtZTI2ZC0z
Yzg5LWJlMTgtYTEwZDQ1YWQ4OWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5
MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0
ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm
ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ4JHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH8/+GZcfhl6YedNXUOT3pqVBXVCVDGMSAkOeyS9pTVk/hwKhZSRQ6F0
Si2vUrP2ILDDuIhET0IjmzhjyuKe357svSwjC3FB5I2GMB9v6LSzuRln2V/zHrna
WHYDij1eUvcjx5CnXdUlCFuBr8stkhzkFbvMHoAR2XHjh1kjGuNXawWgcWTi7gNP
2vUPlXykRBkcQGd6pffoGZzU1+00LYYxdFzZ12n9syXwex4e9c26tAy2KoIwscyo
1aGYfEkzOM6CQycZ72LKfQCUtrZ4D/FvV9ur8NX/08dYnrvJllptom4fRL/Ev68R
wUEccO8SpKLkuiDCZ8wFT89/O5fwRJU=
-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:42 2025 by rpki-client on console.sobornost.net