Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e81231dc-d420-3b6c-95af-db7fa80b9b2a.roa
File: e81231dc-d420-3b6c-95af-db7fa80b9b2a.roa (raw, json)
Hash identifier: O5qFvqJyqtCs8No4M9f/X4haY/IZ/PRM4nfU47ltZ6g=
Subject key identifier: EA:F0:7D:A9:B8:E3:9A:96:C1:8B:EE:AB:80:75:87:A2:19:CC:A3:D6
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D16E88B90900E523DD5E80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e81231dc-d420-3b6c-95af-db7fa80b9b2a.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 47.224.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:6e:88:b9:09:00:e5:23:dd:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=c72f157e-9bca-4002-9e55-43063f1bb1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:42:9c:42:c4:cf:9f:82:ad:b5:65:a4:16:33:
c5:e1:11:5e:f6:2e:9d:30:89:88:1b:af:c9:81:58:
8a:92:20:e6:b8:e1:2d:e1:65:d0:37:84:d5:79:0d:
d0:09:53:2d:47:df:13:c7:26:3c:0c:72:2b:9f:cd:
58:cf:14:0e:c2:5e:b7:aa:d0:e1:9a:41:c9:a1:3d:
bf:a3:93:93:87:a9:19:a7:4d:c3:bf:d5:22:cd:5e:
8b:52:76:be:9c:38:b9:ff:2a:ca:1a:45:62:1b:65:
a0:1c:ac:e1:af:52:17:c7:01:66:4d:1d:f3:08:5a:
4e:4e:3f:a1:3e:5e:15:35:96:d3:13:82:fe:dd:5a:
a7:d1:75:5e:4c:ee:aa:aa:9d:12:50:8c:03:69:bf:
23:f1:58:75:79:4b:9e:81:fe:b8:0a:86:48:51:03:
ac:8f:c8:0a:fd:2e:e5:4d:5d:33:32:c1:cc:cf:54:
d9:9e:32:e9:c0:24:02:f8:66:ac:1f:82:1e:9a:76:
fb:cd:9d:42:5e:2c:22:81:5c:f8:5b:9b:18:99:2b:
63:02:7d:5b:04:78:59:03:1a:2f:12:69:bd:6f:2a:
f1:13:a8:9d:ed:92:52:97:56:63:8e:62:e0:ce:e5:
03:cc:d9:09:fc:91:53:c6:3b:54:f5:18:e2:1c:d1:
5d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F0:7D:A9:B8:E3:9A:96:C1:8B:EE:AB:80:75:87:A2:19:CC:A3:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e81231dc-d420-3b6c-95af-db7fa80b9b2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
47.224.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:a0:13:b4:72:66:ea:1c:d8:c0:02:ba:75:1c:4d:bb:4b:80:
d1:80:f0:0c:1c:f6:55:5a:1d:71:97:59:34:a2:45:0b:3c:1d:
55:fb:8e:65:e3:88:90:f4:6c:ba:3f:2b:20:1f:22:f1:c4:2f:
ec:6c:c7:17:cf:42:b6:dc:db:12:b3:bc:ae:c9:4e:38:62:a6:
b4:ba:87:ad:45:7b:40:4d:5c:a1:28:61:a2:f4:70:a9:ab:4f:
65:1e:b1:1b:19:56:d0:d2:72:d8:c8:a3:cd:b3:4c:bc:07:1c:
a8:26:51:ef:cd:b5:85:71:75:fe:df:5e:4d:76:56:8b:18:af:
31:9e:2f:e4:2e:2e:de:53:a4:cb:4b:4d:14:8c:40:12:b8:4d:
54:7d:17:a1:71:26:b0:0b:ea:84:50:4e:61:39:09:18:64:75:
9d:a6:e5:64:3c:84:c8:a1:4f:63:5f:30:82:53:77:6b:cc:08:
76:62:88:bc:9b:30:4c:0e:40:5f:b0:58:0c:0e:07:7a:b9:e3:
68:97:7a:e1:51:6e:db:63:15:e9:55:34:07:fd:4f:32:ed:be:
9e:0e:24:d0:50:b8:15:58:4e:99:39:c4:83:29:02:10:5a:fc:
7f:8a:d8:6f:4e:73:32:b4:c1:d1:9e:2d:86:18:36:75:8f:27:
3f:f6:45:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0W6IuQkA5SPdXoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
YzcyZjE1N2UtOWJjYS00MDAyLTllNTUtNDMwNjNmMWJiMWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUKcQsTPn4KttWWkFjPF4RFe9i6dMImIG6/J
gViKkiDmuOEt4WXQN4TVeQ3QCVMtR98TxyY8DHIrn81YzxQOwl63qtDhmkHJoT2/
o5OTh6kZp03Dv9UizV6LUna+nDi5/yrKGkViG2WgHKzhr1IXxwFmTR3zCFpOTj+h
Pl4VNZbTE4L+3Vqn0XVeTO6qqp0SUIwDab8j8Vh1eUuegf64CoZIUQOsj8gK/S7l
TV0zMsHMz1TZnjLpwCQC+GasH4Iemnb7zZ1CXiwigVz4W5sYmStjAn1bBHhZAxov
Emm9byrxE6id7ZJSl1ZjjmLgzuUDzNkJ/JFTxjtU9RjiHNFdEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOrwfam445qWwYvuq4B1h6IZzKPWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZTgxMjMxZGMtZDQyMC0z
YjZjLTk1YWYtZGI3ZmE4MGI5YjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHL+AAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMCgE7RyZuoc2MACunUcTbtLgNGA8Awc9lVaHXGXWTSiRQs8HVX7jmXj
iJD0bLo/KyAfIvHEL+xsxxfPQrbc2xKzvK7JTjhiprS6h61Fe0BNXKEoYaL0cKmr
T2UesRsZVtDSctjIo82zTLwHHKgmUe/NtYVxdf7fXk12VosYrzGeL+QuLt5TpMtL
TRSMQBK4TVR9F6FxJrAL6oRQTmE5CRhkdZ2m5WQ8hMihT2NfMIJTd2vMCHZiiLyb
MEwOQF+wWAwOB3q542iXeuFRbttjFelVNAf9TzLtvp4OJNBQuBVYTpk5xIMpAhBa
/H+K2G9OczK0wdGeLYYYNnWPJz/2RWA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:42:40 2025 by rpki-client