Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/06aa229e-21d5-3132-8604-c88f6941821b.roa
File: 06aa229e-21d5-3132-8604-c88f6941821b.roa (raw, json)
Hash identifier: qRmHK0LSQVbr138CJDOxBL+bX1qbjRHky5y8ZfxFHC0=
Subject key identifier: 4E:A5:06:22:B5:14:0B:CE:5B:53:09:39:C0:E7:E6:83:56:76:02:21
Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
Certificate serial: 010D0C9F4328584950F965174F0807E359D83140
Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/06aa229e-21d5-3132-8604-c88f6941821b.roa
Signing time: Wed 26 Mar 2025 13:00:53 +0000
ROA not before: Wed 26 Mar 2025 13:00:53 +0000
ROA not after: Tue 24 Jun 2025 13:00:53 +0000
asID: 46432
IP address blocks: 208.88.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:50:f9:65:17:4f:08:07:e3:59:d8:31:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
Validity
Not Before: Mar 26 13:00:53 2025 GMT
Not After : Jun 24 13:00:53 2025 GMT
Subject: CN=26371361-1079-48f4-85e3-dc81b1381c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2a:6e:6d:43:85:eb:e1:fc:a4:40:b0:0f:5a:
83:46:6f:d7:af:c3:75:2d:6d:1f:5b:f4:d7:dd:61:
78:17:28:92:07:e3:cd:8c:00:9c:73:e1:6d:4b:f7:
4e:84:57:d8:b0:8a:8d:19:34:01:3f:89:e1:7b:28:
77:fc:55:b7:0a:40:03:86:1b:de:96:44:7c:96:84:
58:14:f4:31:1a:17:37:20:d4:22:1e:b0:d5:87:4c:
46:6a:ac:aa:c8:53:b8:3f:23:0a:d0:33:ea:a2:61:
18:73:f9:88:59:c6:85:7a:eb:ca:a8:42:a2:b3:a9:
24:e4:eb:98:5d:6d:4e:11:c0:3a:f6:fd:4b:e0:89:
e3:d5:49:8e:46:db:e1:c0:73:17:01:4b:3b:99:0c:
b5:82:70:e3:e2:d0:38:dc:a5:aa:a2:24:c9:0c:9c:
c5:07:01:95:10:a2:28:b9:9f:a5:46:13:23:46:b3:
b7:9a:89:f1:98:49:fb:7a:1b:9f:2f:28:f3:a1:79:
6d:ca:58:14:67:cb:59:ff:6c:b2:c5:34:7b:bf:6b:
30:5d:30:5f:e6:31:26:4d:24:40:b9:bc:d7:d8:f9:
2b:2c:89:b1:f8:5d:55:57:23:34:da:b0:f3:38:30:
ce:1a:5e:be:e9:34:ae:28:35:02:3d:12:10:5d:79:
89:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A5:06:22:B5:14:0B:CE:5B:53:09:39:C0:E7:E6:83:56:76:02:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/06aa229e-21d5-3132-8604-c88f6941821b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl
X509v3 Authority Key Identifier:
keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
sbgp-ipAddrBlock: critical
IPv4:
208.88.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:6a:6b:e0:7d:cf:b7:de:d4:c1:71:1e:15:34:a1:d3:f0:78:
f9:c8:b0:19:a3:2e:cd:6a:fd:1c:1f:32:e5:6a:f9:66:33:a9:
ef:ab:0b:fa:36:66:7e:24:6e:0d:5b:02:a1:ac:dd:08:c9:a0:
89:f4:b0:eb:af:09:8e:de:c9:dd:34:e2:62:4f:8a:be:9d:44:
40:2b:66:0c:71:e2:da:9f:83:65:e8:ef:ae:64:43:57:19:8c:
7e:3f:eb:01:aa:28:80:43:a3:0d:f9:a3:8e:73:de:9a:9e:9e:
95:2a:19:b5:08:d4:55:df:41:b0:2d:0f:a7:ea:56:fb:aa:b9:
7e:8c:2b:56:73:27:7f:dc:b4:a5:c5:6b:da:7a:f5:e6:30:6d:
7d:2d:8b:fe:9c:08:3f:e4:ba:18:b1:a2:80:6d:84:77:89:8b:
5a:64:b4:fe:7a:44:e5:4b:ed:03:10:44:29:cc:16:df:53:39:
73:02:67:e7:77:4c:56:77:1e:4d:97:e9:ac:e9:e0:61:5d:be:
5e:c3:08:c2:4e:4d:38:16:ad:f5:d8:95:4e:44:1b:f7:bf:0d:
58:72:9e:20:d6:5d:14:81:e3:d4:90:42:38:d5:79:88:71:fa:
50:22:c7:34:5a:d8:9f:e0:44:71:ea:68:b2:18:f1:e6:63:b2:
b3:97:1d:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElQ+WUXTwgH41nYMUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm
Yjg1MB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk
MjYzNzEzNjEtMTA3OS00OGY0LTg1ZTMtZGM4MWIxMzgxYzRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ypubUOF6+H8pECwD1qDRm/Xr8N1LW0fW/TX
3WF4FyiSB+PNjACcc+FtS/dOhFfYsIqNGTQBP4nheyh3/FW3CkADhhvelkR8loRY
FPQxGhc3INQiHrDVh0xGaqyqyFO4PyMK0DPqomEYc/mIWcaFeuvKqEKis6kk5OuY
XW1OEcA69v1L4Inj1UmORtvhwHMXAUs7mQy1gnDj4tA43KWqoiTJDJzFBwGVEKIo
uZ+lRhMjRrO3monxmEn7ehufLyjzoXltylgUZ8tZ/2yyxTR7v2swXTBf5jEmTSRA
ubzX2PkrLImx+F1VVyM02rDzODDOGl6+6TSuKDUCPRIQXXmJEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE6lBiK1FAvOW1MJOcDn5oNWdgIhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw
ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvMDZhYTIyOWUtMjFkNS0z
MTMyLTg2MDQtYzg4ZjY5NDE4MjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh
NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm
ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1
Y2U3ZmZiODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fj2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHZqa+B9z7fe1MFxHhU0odPwePnIsBmjLs1q/RwfMuVq+WYzqe+rC/o2
Zn4kbg1bAqGs3QjJoIn0sOuvCY7eyd004mJPir6dREArZgxx4tqfg2Xo765kQ1cZ
jH4/6wGqKIBDow35o45z3pqenpUqGbUI1FXfQbAtD6fqVvuquX6MK1ZzJ3/ctKXF
a9p69eYwbX0ti/6cCD/kuhixooBthHeJi1pktP56ROVL7QMQRCnMFt9TOXMCZ+d3
TFZ3Hk2X6azp4GFdvl7DCMJOTTgWrfXYlU5EG/e/DVhyniDWXRSB49SQQjjVeYhx
+lAixzRa2J/gRHHqaLIY8eZjsrOXHUY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:45:56 2025 by rpki-client