Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a51c1b71-2da2-3a9f-a71f-e15c934cc7e3.roa
File: a51c1b71-2da2-3a9f-a71f-e15c934cc7e3.roa (raw, json)
Hash identifier: aSos7oKVWi7GX5VENjB9smO6nQb3WFdDMZRs/3roY0o=
Subject key identifier: 7D:D7:63:41:C4:05:48:C8:DC:97:3B:68:E9:4B:66:C8:0C:F0:FF:8E
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848F7C13C3EBDCE6E14D95FBE00
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a51c1b71-2da2-3a9f-a71f-e15c934cc7e3.roa
Signing time: Sat 22 Feb 2025 14:00:52 +0000
ROA not before: Sat 22 Feb 2025 14:00:52 +0000
ROA not after: Fri 23 May 2025 13:00:52 +0000
asID: 203
IP address blocks: 20.134.192.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f7:c1:3c:3e:bd:ce:6e:14:d9:5f:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Feb 22 14:00:52 2025 GMT
Not After : May 23 13:00:52 2025 GMT
Subject: CN=3540569a-3a7e-47da-acd5-5795992599dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:24:f9:e1:1a:51:f4:39:6d:a1:b8:66:15:44:
4f:3a:fd:fa:53:4f:90:65:91:6d:ae:23:6d:3d:64:
8c:6e:ac:37:7f:87:be:46:c7:ac:fb:74:33:24:2e:
5b:fa:07:1b:9b:e3:b6:d3:48:c8:a0:6b:b1:2c:f9:
6a:c2:5f:59:28:b4:88:a9:f8:96:2a:d7:1c:78:9c:
5d:e3:d1:7f:7a:30:ce:52:ce:d2:28:e2:c6:03:cf:
52:a0:74:14:78:65:7f:6c:06:b7:79:94:49:d6:80:
9e:bb:77:00:9c:d3:5e:9b:c8:3b:70:94:e9:12:90:
05:5e:9b:cb:68:1e:2d:ee:25:05:8d:30:12:4a:23:
db:c6:d8:4b:b5:61:0a:ea:a9:15:58:42:46:e1:91:
35:7d:73:6e:02:2c:9b:31:72:5e:46:2a:ae:48:d7:
41:57:55:9a:27:31:7b:d4:0d:50:03:6f:21:a8:d4:
59:08:f9:46:a0:cf:63:46:b8:47:7e:95:5b:c8:dc:
0e:53:1b:7a:d3:b5:7d:f8:6d:bd:43:e5:d3:d3:40:
5b:b0:6d:aa:e9:6d:21:d5:22:43:21:9b:2d:87:ec:
69:a2:44:30:b8:68:df:6f:17:0a:a5:7b:84:e2:86:
ba:43:4d:f2:14:37:0b:09:1e:15:64:22:80:2b:a9:
f1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D7:63:41:C4:05:48:C8:DC:97:3B:68:E9:4B:66:C8:0C:F0:FF:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a51c1b71-2da2-3a9f-a71f-e15c934cc7e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.134.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:b3:4e:9b:66:cf:40:ef:fe:34:88:e5:b3:b2:56:c0:f3:e7:
5e:38:6c:11:e8:56:8c:b9:00:d6:58:a3:36:cf:9f:b5:1e:3e:
a4:b2:39:13:20:9f:84:73:b5:6a:25:f1:a8:76:b0:81:67:bc:
ca:6c:40:a1:52:83:ad:72:a6:49:a5:7b:14:4c:34:ad:15:e9:
ae:ca:f8:d1:68:d4:0a:79:b1:41:5b:8f:d9:88:fd:44:59:94:
b7:13:4e:93:d1:64:06:b1:80:bf:e7:b8:10:b4:1f:5d:ae:be:
d9:45:c8:80:62:4c:41:58:14:ae:3d:46:30:66:15:a0:ec:e2:
f1:f4:27:0d:f4:48:78:e4:ff:5f:ff:8f:fc:c6:9b:d6:4a:f0:
30:51:08:24:9e:ce:bc:e1:c7:62:16:29:dd:63:bc:5e:c7:e8:
f2:b0:b6:2f:70:14:d2:e8:9c:3a:ba:2b:76:2b:30:81:b8:2e:
94:c8:32:aa:28:19:e2:25:1e:22:55:bc:f1:9b:10:d3:f2:bc:
af:5d:13:57:5d:af:98:ab:10:4e:7f:c4:3c:72:5a:2a:a7:53:
12:91:7b:96:c0:ac:1c:e0:b4:29:a0:1c:32:0e:c0:ea:b8:5a:
85:af:3d:de:cf:64:05:1a:55:28:98:05:23:e2:ac:3a:92:0a:
f6:d5:8f:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj3wTw+vc5uFNlfvgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI1MDIyMjE0MDA1MloXDTI1MDUyMzEzMDA1MlowLzEtMCsGA1UEAxMk
MzU0MDU2OWEtM2E3ZS00N2RhLWFjZDUtNTc5NTk5MjU5OWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiT54RpR9DltobhmFURPOv36U0+QZZFtriNt
PWSMbqw3f4e+Rses+3QzJC5b+gcbm+O200jIoGuxLPlqwl9ZKLSIqfiWKtcceJxd
49F/ejDOUs7SKOLGA89SoHQUeGV/bAa3eZRJ1oCeu3cAnNNem8g7cJTpEpAFXpvL
aB4t7iUFjTASSiPbxthLtWEK6qkVWEJG4ZE1fXNuAiybMXJeRiquSNdBV1WaJzF7
1A1QA28hqNRZCPlGoM9jRrhHfpVbyNwOUxt607V9+G29Q+XT00BbsG2q6W0h1SJD
IZsth+xpokQwuGjfbxcKpXuE4oa6Q03yFDcLCR4VZCKAK6nxcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH3XY0HEBUjI3Jc7aOlLZsgM8P+OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYTUxYzFiNzEtMmRhMi0z
YTlmLWE3MWYtZTE1YzkzNGNjN2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIbAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABuzTptmz0Dv/jSI5bOyVsDz5144bBHoVoy5ANZYozbPn7UePqSyORMg
n4RztWol8ah2sIFnvMpsQKFSg61ypkmlexRMNK0V6a7K+NFo1Ap5sUFbj9mI/URZ
lLcTTpPRZAaxgL/nuBC0H12uvtlFyIBiTEFYFK49RjBmFaDs4vH0Jw30SHjk/1//
j/zGm9ZK8DBRCCSezrzhx2IWKd1jvF7H6PKwti9wFNLonDq6K3YrMIG4LpTIMqoo
GeIlHiJVvPGbENPyvK9dE1ddr5irEE5/xDxyWiqnUxKRe5bArBzgtCmgHDIOwOq4
WoWvPd7PZAUaVSiYBSPirDqSCvbVj08=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:47 2025 by rpki-client