Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/875aebfb-12ca-3518-8fb5-da8aa746b43f.roa
File: 875aebfb-12ca-3518-8fb5-da8aa746b43f.roa (raw, json)
Hash identifier: GL/cJBfh6Sbr72ofOA4/yYQuxi++ujHc1xK7Mk3pjag=
Subject key identifier: 92:0C:40:F9:9D:2C:96:90:01:95:80:72:7C:52:4F:E6:89:DF:07:A2
Certificate issuer: /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
Certificate serial: 010D0C9F4328584925B3A7129A644BD497FA4700
Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/875aebfb-12ca-3518-8fb5-da8aa746b43f.roa
Signing time: Tue 11 Mar 2025 01:00:40 +0000
ROA not before: Tue 11 Mar 2025 01:00:40 +0000
ROA not after: Mon 09 Jun 2025 01:00:40 +0000
asID: 16509
IP address blocks: 65.62.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:25:b3:a7:12:9a:64:4b:d4:97:fa:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
Validity
Not Before: Mar 11 01:00:40 2025 GMT
Not After : Jun 9 01:00:40 2025 GMT
Subject: CN=4478ec84-3080-4369-ad93-5797e3f4cb56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:3c:d4:ed:58:9c:c2:fa:73:b7:8a:40:7f:
8d:cc:03:74:fd:ce:5f:50:fc:87:ad:0e:6c:77:74:
0f:5c:af:6f:50:ca:9b:9a:b1:15:13:70:e6:00:c3:
d9:ba:96:10:b1:4b:70:0f:43:ee:cf:98:4a:b1:82:
12:61:22:74:a5:ce:b8:86:06:95:55:76:43:7b:cc:
3d:95:b8:48:7e:89:1a:45:84:ac:3b:e5:2f:0b:73:
9e:c9:03:a0:68:f3:de:28:1c:f5:b8:de:31:b1:ea:
aa:e0:d3:ad:d4:1c:ca:7f:73:05:17:06:e1:3e:27:
74:a2:c8:51:4c:0b:94:dc:4d:a9:d2:d8:eb:c5:49:
e8:95:42:a9:0e:55:78:11:6b:ec:c7:74:e2:e3:b7:
50:43:e7:14:42:72:cd:1d:98:96:4e:6f:dc:7d:85:
3a:31:07:47:62:61:3e:ce:76:74:4b:b7:9b:de:6d:
28:67:58:2e:13:dd:51:1d:bb:27:c2:52:fd:3c:cc:
81:b1:40:71:9d:f5:5b:e2:41:14:8f:91:4a:67:06:
90:43:dc:b2:48:38:2e:e1:70:3b:e3:ab:19:7d:71:
6e:fc:c6:6f:e4:0a:0d:fe:6c:06:1e:34:1d:0f:35:
24:14:dc:dd:8b:84:d9:75:af:84:8a:46:7a:6e:55:
8c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0C:40:F9:9D:2C:96:90:01:95:80:72:7C:52:4F:E6:89:DF:07:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/875aebfb-12ca-3518-8fb5-da8aa746b43f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl
X509v3 Authority Key Identifier:
keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
sbgp-ipAddrBlock: critical
IPv4:
65.62.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:13:3f:0e:18:a1:e2:86:6b:a9:06:e3:87:f8:d6:d2:3c:7b:
dc:d8:aa:ef:32:75:12:26:d4:da:2b:db:3d:d5:9e:f0:ad:ac:
30:b9:58:70:fe:f3:57:90:d7:dc:de:9c:e7:bb:75:60:5a:a2:
dc:74:16:e7:3b:a2:28:a6:8d:80:25:e3:5d:e6:4b:b9:34:ca:
bd:6f:fe:fc:5a:70:c5:39:fe:a8:8b:9f:de:aa:0f:99:4c:f8:
83:b9:bb:de:f0:10:8d:a1:d2:36:39:97:bb:c0:3e:cf:68:6e:
dd:26:b9:89:36:d8:07:f7:01:05:45:bb:b2:95:af:9b:5d:40:
29:fc:c5:df:12:5e:84:d4:2f:bd:e7:5e:a6:d4:3c:49:d8:ac:
5b:50:94:b4:15:2e:3c:51:09:48:92:f5:e6:95:6a:cb:d3:a1:
a2:d8:45:a3:a1:84:13:b6:c3:71:d8:bf:9d:79:e0:28:7a:10:
5d:cb:b3:0c:51:69:8a:c6:db:1d:42:be:87:78:3a:bc:41:e5:
09:b4:17:3f:b3:db:4d:b6:70:f7:f0:5e:f9:98:7b:7a:b6:cc:
86:09:3f:d8:7c:fd:bc:2c:55:48:2b:48:cd:31:bb:80:70:32:
b1:77:b3:53:a8:2e:a7:73:59:06:2a:30:d4:97:ac:2d:9d:c6:
22:7c:97:53
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkls6cSmmRL1Jf6RwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzdmZDI1YTItMzA0MS00MzFkLWE2YTktYzQwOWI0Mjgz
NWExMB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk
NDQ3OGVjODQtMzA4MC00MzY5LWFkOTMtNTc5N2UzZjRjYjU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfc81O1YnML6c7eKQH+NzAN0/c5fUPyHrQ5s
d3QPXK9vUMqbmrEVE3DmAMPZupYQsUtwD0Puz5hKsYISYSJ0pc64hgaVVXZDe8w9
lbhIfokaRYSsO+UvC3OeyQOgaPPeKBz1uN4xseqq4NOt1BzKf3MFFwbhPid0oshR
TAuU3E2p0tjrxUnolUKpDlV4EWvsx3Ti47dQQ+cUQnLNHZiWTm/cfYU6MQdHYmE+
znZ0S7eb3m0oZ1guE91RHbsnwlL9PMyBsUBxnfVb4kEUj5FKZwaQQ9yySDgu4XA7
46sZfXFu/MZv5AoN/mwGHjQdDzUkFNzdi4TZda+EikZ6blWMwwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJIMQPmdLJaQAZWAcnxST+aJ3weiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Zk
MjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5YjQyODM1YTEvODc1YWViZmItMTJjYS0z
NTE4LThmYjUtZGE4YWE3NDZiNDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdmZDI1YTItMzA0MS00MzFkLWE2
YTktYzQwOWI0MjgzNWExL2M3ZmQyNWEyLTMwNDEtNDMxZC1hNmE5LWM0MDliNDI4
MzVhMS5jcmwwHwYDVR0jBBgwFoAUNXEKw9dxeaFzg95nCkio4CDv6IUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2ZkMjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5
YjQyODM1YTEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBQT4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAThM/Dhih4oZrqQbjh/jW0jx73Niq7zJ1EibU2ivbPdWe8K2sMLlYcP7z
V5DX3N6c57t1YFqi3HQW5zuiKKaNgCXjXeZLuTTKvW/+/FpwxTn+qIuf3qoPmUz4
g7m73vAQjaHSNjmXu8A+z2hu3Sa5iTbYB/cBBUW7spWvm11AKfzF3xJehNQvvede
ptQ8SdisW1CUtBUuPFEJSJL15pVqy9OhothFo6GEE7bDcdi/nXngKHoQXcuzDFFp
isbbHUK+h3g6vEHlCbQXP7PbTbZw9/Be+Zh7erbMhgk/2Hz9vCxVSCtIzTG7gHAy
sXezU6gup3NZBiow1JesLZ3GInyXUw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:00:27 2025 by rpki-client