Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a725e940-6637-3306-a3a1-f7abc3c20a45.roa
File: a725e940-6637-3306-a3a1-f7abc3c20a45.roa (raw, json)
Hash identifier: EWY51qGsspeQZT2fHN8247I/gbp223F81ABRoWBayIM=
Subject key identifier: 95:CA:8B:6E:DB:AB:40:19:A8:EB:E0:8F:7A:13:2E:7C:04:1B:70:9D
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F432858493C093A2DC9EDBDD3A0573AC0
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a725e940-6637-3306-a3a1-f7abc3c20a45.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 21949
IP address blocks: 206.253.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:3a:2d:c9:ed:bd:d3:a0:57:3a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=62d0c9fa-c616-4849-8303-7ba551983eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:31:a0:2e:d8:8c:c1:71:fd:fa:c8:7c:40:67:
3f:a6:17:dc:c0:7a:0c:2d:c7:6c:ad:93:8e:e7:93:
6a:17:ae:a5:ce:c4:dc:64:d1:4f:4d:82:71:12:31:
4b:33:e5:23:94:b0:96:9b:b2:75:4b:f2:ad:da:02:
a3:00:ff:c3:62:cc:af:f5:74:7f:12:73:9c:08:7a:
96:81:86:b2:b2:b1:86:13:05:0d:a0:10:7c:ed:47:
5b:8a:55:6d:42:43:46:5e:a7:42:eb:85:8e:ed:e6:
66:50:f1:b3:12:32:32:93:15:d9:3b:32:7c:91:7d:
0f:05:49:91:78:40:85:8b:e9:77:41:7e:9f:e2:be:
ad:93:2d:aa:d2:7c:80:8f:79:19:7b:f1:a8:27:59:
92:2e:09:a1:f4:78:e0:2d:48:ff:b0:78:22:37:61:
e0:62:cf:94:15:1e:ef:45:58:45:f7:e0:81:22:4e:
e4:d7:13:0c:b7:fe:8a:e9:53:30:13:8d:52:fc:cc:
ea:95:57:45:3e:59:43:6e:5a:16:5a:ba:2f:71:b8:
2a:7d:64:c3:64:2d:a5:9b:f9:05:08:6c:f2:29:68:
1d:25:b4:5d:dc:3a:7a:fd:80:77:eb:a8:fb:c7:f2:
1a:0c:06:c7:d3:9b:27:fc:ee:ad:5a:9b:85:52:cc:
ad:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CA:8B:6E:DB:AB:40:19:A8:EB:E0:8F:7A:13:2E:7C:04:1B:70:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a725e940-6637-3306-a3a1-f7abc3c20a45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
206.253.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:75:b0:27:c3:21:9a:03:9e:6c:c3:ab:99:cb:0b:06:9d:d7:
95:28:38:58:66:b2:0b:79:a1:e2:38:6e:b9:c5:29:5a:c7:94:
94:dd:94:2b:47:c3:d2:ae:86:58:08:59:06:23:d6:f9:12:dd:
b1:ed:48:b2:65:48:d5:28:90:f4:72:21:c4:a2:08:12:38:41:
ac:03:fb:c4:89:18:ec:cf:0f:e5:a1:5a:58:75:a0:1e:ad:1b:
8d:24:2a:91:34:91:9b:c8:9f:b5:07:c7:2b:14:06:30:aa:c6:
a6:f0:ad:88:c4:df:e4:e1:95:2a:b3:85:cf:be:f8:db:d3:de:
fe:18:c1:54:0c:9f:e2:98:d9:c7:fc:12:2d:ca:37:22:de:35:
d7:0a:c4:e2:34:a0:61:d0:94:27:42:5c:99:c5:9e:95:ef:a4:
d6:c9:4c:5f:3f:6e:5a:93:e3:e4:cf:c7:5e:3e:99:de:6d:7e:
85:29:f9:e5:c0:05:bc:7b:f7:63:2f:83:69:e0:4a:38:dc:49:
58:68:03:bd:b2:66:5e:50:c9:40:76:e6:55:e8:09:cc:b2:e1:
e5:85:ad:20:18:ef:ad:29:d9:3b:4a:3a:b2:54:5c:c2:55:41:
71:c7:91:d3:9e:73:4e:d8:46:1a:09:ca:b0:3f:bc:3b:d3:6e:
02:4b:d4:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CTotye2906BXOsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx
YzViMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk
NjJkMGM5ZmEtYzYxNi00ODQ5LTgzMDMtN2JhNTUxOTgzZWI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjGgLtiMwXH9+sh8QGc/phfcwHoMLcdsrZOO
55NqF66lzsTcZNFPTYJxEjFLM+UjlLCWm7J1S/Kt2gKjAP/DYsyv9XR/EnOcCHqW
gYaysrGGEwUNoBB87UdbilVtQkNGXqdC64WO7eZmUPGzEjIykxXZOzJ8kX0PBUmR
eECFi+l3QX6f4r6tky2q0nyAj3kZe/GoJ1mSLgmh9HjgLUj/sHgiN2HgYs+UFR7v
RVhF9+CBIk7k1xMMt/6K6VMwE41S/MzqlVdFPllDbloWWrovcbgqfWTDZC2lm/kF
CGzyKWgdJbRd3Dp6/YB366j7x/IaDAbH05sn/O6tWpuFUsytIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJXKi27bq0AZqOvgj3oTLnwEG3CdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx
NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvYTcyNWU5NDAtNjYzNy0z
MzA2LWEzYTEtZjdhYmMzYzIwYTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx
MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk
MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk
MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzv2IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJJ1sCfDIZoDnmzDq5nLCwad15UoOFhmsgt5oeI4brnFKVrHlJTdlCtH
w9KuhlgIWQYj1vkS3bHtSLJlSNUokPRyIcSiCBI4QawD+8SJGOzPD+WhWlh1oB6t
G40kKpE0kZvIn7UHxysUBjCqxqbwrYjE3+ThlSqzhc+++NvT3v4YwVQMn+KY2cf8
Ei3KNyLeNdcKxOI0oGHQlCdCXJnFnpXvpNbJTF8/blqT4+TPx14+md5tfoUp+eXA
Bbx792Mvg2ngSjjcSVhoA72yZl5QyUB25lXoCcyy4eWFrSAY760p2TtKOrJUXMJV
QXHHkdOec07YRhoJyrA/vDvTbgJL1CM=
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:09:40 2025 by rpki-client