Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/66b4a2d8-966a-3fbe-8312-e69e1b795cac.roa
File: 66b4a2d8-966a-3fbe-8312-e69e1b795cac.roa (raw, json)
Hash identifier: HHkVE71Lf/oysUJ0lMLBTyPMCyMgfm2iVQ6JruLUDzU=
Subject key identifier: 71:43:9A:07:94:10:D0:B4:92:44:92:85:98:58:48:D0:82:C3:CC:3B
Certificate issuer: /CN=4cbd1783-5272-4e33-b882-bdd928a5e339
Certificate serial: 010D0C9F43285848B35B6ABA7A31B6CA0B115700
Authority key identifier: 04:7C:80:53:0E:B8:46:12:A9:2C:71:B3:A8:DC:CA:6D:5A:DC:59:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/66b4a2d8-966a-3fbe-8312-e69e1b795cac.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 212238
IP address blocks: 209.198.10.0/24 maxlen: 24
209.198.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:6a:ba:7a:31:b6:ca:0b:11:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cbd1783-5272-4e33-b882-bdd928a5e339
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=8c37b23d-8498-478b-8efb-3791d439ba40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3f:2a:5e:82:86:c8:29:3d:07:7f:cc:a3:de:
7e:6d:bb:fc:fa:d6:41:93:08:ea:06:d0:99:7c:54:
e7:3a:de:54:ce:e9:36:be:6a:9a:25:fc:ec:26:ee:
cb:81:5a:40:bd:c8:9f:47:5a:c1:e0:13:84:54:a4:
c2:ff:7d:7d:2a:9d:9c:7c:6d:ec:bc:77:25:d7:1a:
66:c4:27:b2:99:49:c1:7d:95:80:2f:15:11:59:31:
49:7d:59:f7:dc:76:0f:02:17:1f:3f:ef:76:43:4d:
fc:50:a7:d3:31:a5:72:9d:9d:3b:32:72:9b:f2:4b:
9a:e5:ff:bf:94:e0:66:83:f7:1e:0b:6a:c2:de:5b:
61:12:d5:13:b7:da:2a:0d:94:49:7e:f0:b5:02:85:
92:f5:28:bd:de:e5:5b:ce:64:11:7c:ec:32:d6:70:
21:ba:4a:c2:c1:8c:21:84:89:75:96:34:53:6d:19:
b3:1b:8e:66:10:27:0b:49:be:75:e0:5f:35:9f:1f:
84:93:94:86:81:0d:94:2f:06:99:7d:66:0a:7e:0f:
5d:8f:f1:a5:4f:e4:ff:47:39:63:1d:3e:a6:0d:5a:
e4:9b:7e:69:3a:63:63:50:f8:ef:3d:e6:1d:5a:82:
bf:dd:8e:ae:4d:65:51:05:ca:b7:bc:27:99:0c:e7:
a0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:43:9A:07:94:10:D0:B4:92:44:92:85:98:58:48:D0:82:C3:CC:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/66b4a2d8-966a-3fbe-8312-e69e1b795cac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/4cbd1783-5272-4e33-b882-bdd928a5e339.crl
X509v3 Authority Key Identifier:
keyid:04:7C:80:53:0E:B8:46:12:A9:2C:71:B3:A8:DC:CA:6D:5A:DC:59:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339.cer
sbgp-ipAddrBlock: critical
IPv4:
209.198.10.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:40:20:31:97:bc:0e:37:bb:6b:6b:f3:64:32:f1:81:d2:e2:
2c:3f:1e:de:ea:10:5f:a9:2f:86:4c:ea:05:e7:ff:94:8f:15:
48:90:84:cf:15:4b:ec:84:24:58:00:de:b8:7c:59:91:7e:84:
9c:ce:ac:3f:97:c2:fe:db:91:29:34:43:4a:54:ec:88:e4:07:
cb:3b:db:1a:72:50:44:4f:64:34:5c:35:a4:53:6f:7e:58:14:
af:b6:37:d2:af:1f:6c:0a:fe:f4:8a:f9:95:f7:e3:06:5f:00:
ed:5b:dd:e1:4d:3b:bc:8f:42:8a:08:04:30:f3:65:48:7a:8d:
85:38:7d:b8:2e:f9:21:45:f5:75:19:a4:98:ef:77:cc:a2:cc:
89:37:7d:3d:64:63:ae:23:18:bc:3a:91:e9:ed:aa:bb:36:77:
ad:03:b8:fe:d7:97:3e:45:7f:a0:a2:51:77:8a:60:81:bc:e2:
be:14:33:a4:de:04:b6:ba:1c:65:56:09:4e:18:6c:7c:79:85:
24:c7:ff:19:06:35:86:f4:c0:4b:a0:e3:00:24:76:a8:d7:5a:
cc:40:7d:b1:d3:01:44:e3:49:e7:37:cd:d8:1f:be:a8:fb:80:
ad:61:86:5f:26:b8:a8:ee:7b:0c:fe:91:a1:03:71:fb:e6:31:
0b:db:b5:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW2q6ejG2ygsRVwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGNiZDE3ODMtNTI3Mi00ZTMzLWI4ODItYmRkOTI4YTVl
MzM5MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk
OGMzN2IyM2QtODQ5OC00NzhiLThlZmItMzc5MWQ0MzliYTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz8qXoKGyCk9B3/Mo95+bbv8+tZBkwjqBtCZ
fFTnOt5Uzuk2vmqaJfzsJu7LgVpAvcifR1rB4BOEVKTC/319Kp2cfG3svHcl1xpm
xCeymUnBfZWALxURWTFJfVn33HYPAhcfP+92Q038UKfTMaVynZ07MnKb8kua5f+/
lOBmg/ceC2rC3lthEtUTt9oqDZRJfvC1AoWS9Si93uVbzmQRfOwy1nAhukrCwYwh
hIl1ljRTbRmzG45mECcLSb514F81nx+Ek5SGgQ2ULwaZfWYKfg9dj/GlT+T/Rzlj
HT6mDVrkm35pOmNjUPjvPeYdWoK/3Y6uTWVRBcq3vCeZDOegRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHFDmgeUENC0kkSShZhYSNCCw8w7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80Y2Jk
MTc4My01MjcyLTRlMzMtYjg4Mi1iZGQ5MjhhNWUzMzkvNjZiNGEyZDgtOTY2YS0z
ZmJlLTgzMTItZTY5ZTFiNzk1Y2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGNiZDE3ODMtNTI3Mi00ZTMzLWI4
ODItYmRkOTI4YTVlMzM5LzRjYmQxNzgzLTUyNzItNGUzMy1iODgyLWJkZDkyOGE1
ZTMzOS5jcmwwHwYDVR0jBBgwFoAUBHyAUw64RhKpLHGzqNzKbVrcWU4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80Y2JkMTc4My01MjcyLTRlMzMtYjg4Mi1iZGQ5
MjhhNWUzMzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0cYKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAClAIDGXvA43u2tr82Qy8YHS4iw/Ht7qEF+pL4ZM6gXn/5SPFUiQhM8V
S+yEJFgA3rh8WZF+hJzOrD+Xwv7bkSk0Q0pU7IjkB8s72xpyUERPZDRcNaRTb35Y
FK+2N9KvH2wK/vSK+ZX34wZfAO1b3eFNO7yPQooIBDDzZUh6jYU4fbgu+SFF9XUZ
pJjvd8yizIk3fT1kY64jGLw6kentqrs2d60DuP7Xlz5Ff6CiUXeKYIG84r4UM6Te
BLa6HGVWCU4YbHx5hSTH/xkGNYb0wEug4wAkdqjXWsxAfbHTAUTjSec3zdgfvqj7
gK1hhl8muKjuewz+kaEDcfvmMQvbtak=
-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:49 2025 by rpki-client on console.sobornost.net