Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/c2688585-4217-31ae-8687-7381f6e36d31.roa
File: c2688585-4217-31ae-8687-7381f6e36d31.roa (raw, json)
Hash identifier: jW83EnUSFqZmztTSwyge98PcFXHLb8tdCzINvnsQ+7E=
Subject key identifier: 99:7F:A2:1E:19:C3:06:20:91:22:8A:85:D8:AB:F7:85:CB:F2:84:03
Certificate issuer: /CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f
Certificate serial: 010D0C9F432858491ED6EB2CE1DFBEDBEB78AB80
Authority key identifier: 3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/c2688585-4217-31ae-8687-7381f6e36d31.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 59253
IP address blocks: 167.253.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:eb:2c:e1:df:be:db:eb:78:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=fc1e17d8-56da-48d6-a054-ef78000dc4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:82:ec:4a:3f:13:50:c5:ba:f1:48:b2:ea:20:
7a:0d:9c:c1:ac:d9:e7:79:f7:fa:d7:af:bf:bb:0a:
9a:08:3f:e2:59:d9:b2:32:81:e1:2f:76:18:f5:6a:
d0:cf:68:38:16:64:b7:b8:aa:e6:19:4f:d0:36:43:
86:5a:7b:14:77:8f:d3:f1:a7:9d:3f:09:82:49:64:
66:4d:03:04:5d:4f:9b:9d:a1:05:34:7a:16:9d:a1:
b6:42:29:1f:fa:d6:f5:c7:57:8d:04:02:eb:0c:d4:
c6:fc:97:e0:9c:42:d4:5a:fb:55:17:db:a3:14:39:
61:40:0c:4e:e0:2f:93:25:1a:88:b6:fc:2e:a9:ee:
8d:5b:06:6b:2e:37:eb:02:15:2d:ff:ce:be:58:b4:
a7:d4:82:90:a4:44:9c:0d:4d:fa:6f:cd:1a:65:2e:
b7:52:42:fc:6c:a2:cd:c7:4a:34:5a:7c:5d:5d:de:
fa:39:ee:57:ce:4c:b8:83:71:5c:1f:1b:f7:c5:6c:
a6:a1:d0:7e:c4:b7:76:cb:f9:8c:99:c7:d5:34:38:
5d:5a:0d:97:85:a5:2f:35:76:ee:9d:f4:3b:f0:1d:
39:cb:7b:f5:49:ee:f4:63:5c:70:7c:8b:54:13:0d:
91:6b:2b:95:b1:52:35:28:a9:83:d9:f9:5c:c4:d7:
78:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7F:A2:1E:19:C3:06:20:91:22:8A:85:D8:AB:F7:85:CB:F2:84:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/c2688585-4217-31ae-8687-7381f6e36d31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl
X509v3 Authority Key Identifier:
keyid:3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer
sbgp-ipAddrBlock: critical
IPv4:
167.253.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:0f:7c:c3:4b:67:0d:b7:88:e1:60:fb:02:fd:2a:af:a1:f3:
f1:ef:77:33:69:47:6a:52:70:19:e3:42:88:0b:b3:38:0c:e9:
f3:db:56:e7:a6:a0:2d:be:94:42:90:c9:bd:e0:04:e4:1d:63:
6a:d7:45:2e:1c:36:9d:41:9e:b2:25:63:45:8c:62:70:a2:cd:
1a:47:6d:64:c9:35:3f:fd:93:1f:25:21:4c:f2:e6:1e:a7:1d:
c2:d8:b7:82:93:47:e4:d3:63:30:81:4d:74:46:38:91:ef:20:
be:e4:64:99:b9:26:66:a1:be:38:44:8d:dd:9a:de:c5:ea:93:
5f:ab:79:4f:38:95:d2:02:b3:b8:e6:77:6a:db:dc:98:3c:f4:
0e:2d:f4:f5:f9:03:94:c8:36:9e:82:2d:2c:19:40:ae:7d:d5:
c4:30:d4:7c:98:ae:51:6c:45:94:d6:d8:60:a3:59:e1:11:50:
09:92:db:9b:25:70:9a:28:93:24:d3:e1:d6:c7:9d:40:b9:52:
df:90:b7:15:ec:62:39:24:4b:5e:ef:fa:72:16:e5:86:22:30:
01:37:7b:61:6e:86:4f:ca:45:7d:5a:2f:47:3a:63:e1:cf:32:
01:20:c8:07:51:d4:cf:23:ad:b9:83:02:2b:0c:eb:02:e2:21:
2b:4f:73:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1uss4d++2+t4q4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTNiOTg2MTYtZTRmOC00Yzc2LTg0MTAtY2I0YjZkOTNj
ODVmMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk
ZmMxZTE3ZDgtNTZkYS00OGQ2LWEwNTQtZWY3ODAwMGRjNGU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4LsSj8TUMW68Uiy6iB6DZzBrNnneff616+/
uwqaCD/iWdmyMoHhL3YY9WrQz2g4FmS3uKrmGU/QNkOGWnsUd4/T8aedPwmCSWRm
TQMEXU+bnaEFNHoWnaG2Qikf+tb1x1eNBALrDNTG/JfgnELUWvtVF9ujFDlhQAxO
4C+TJRqItvwuqe6NWwZrLjfrAhUt/86+WLSn1IKQpEScDU36b80aZS63UkL8bKLN
x0o0WnxdXd76Oe5Xzky4g3FcHxv3xWymodB+xLd2y/mMmcfVNDhdWg2XhaUvNXbu
nfQ78B05y3v1Se70Y1xwfItUEw2RayuVsVI1KKmD2flcxNd4QwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJl/oh4ZwwYgkSKKhdir94XL8oQDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hM2I5
ODYxNi1lNGY4LTRjNzYtODQxMC1jYjRiNmQ5M2M4NWYvYzI2ODg1ODUtNDIxNy0z
MWFlLTg2ODctNzM4MWY2ZTM2ZDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTNiOTg2MTYtZTRmOC00Yzc2LTg0
MTAtY2I0YjZkOTNjODVmL2EzYjk4NjE2LWU0ZjgtNGM3Ni04NDEwLWNiNGI2ZDkz
Yzg1Zi5jcmwwHwYDVR0jBBgwFoAUO+HB9azWjjCuxozloUMTYHSe2F4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hM2I5ODYxNi1lNGY4LTRjNzYtODQxMC1jYjRi
NmQ5M2M4NWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/2eMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALMPfMNLZw23iOFg+wL9Kq+h8/HvdzNpR2pScBnjQogLszgM6fPbVuem
oC2+lEKQyb3gBOQdY2rXRS4cNp1BnrIlY0WMYnCizRpHbWTJNT/9kx8lIUzy5h6n
HcLYt4KTR+TTYzCBTXRGOJHvIL7kZJm5JmahvjhEjd2a3sXqk1+reU84ldICs7jm
d2rb3Jg89A4t9PX5A5TINp6CLSwZQK591cQw1HyYrlFsRZTW2GCjWeERUAmS25sl
cJookyTT4dbHnUC5Ut+QtxXsYjkkS17v+nIW5YYiMAE3e2Fuhk/KRX1aL0c6Y+HP
MgEgyAdR1M8jrbmDAisM6wLiIStPc04=
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:13:03 2025 by rpki-client