Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e1a1cca9-cd8b-3746-af45-b452aa2a7fff.roa
File: e1a1cca9-cd8b-3746-af45-b452aa2a7fff.roa (raw, json)
Hash identifier: aFKX8xHp5HJp9NVvPs6mrIIIXirp9pw9MXfcjqD1Uac=
Subject key identifier: 22:FE:EB:91:F4:DE:98:95:99:07:C3:0A:9E:F7:51:13:B8:A4:F7:52
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F4328584953C414C78CC87DAA61B48480
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e1a1cca9-cd8b-3746-af45-b452aa2a7fff.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 0
IP address blocks: 192.101.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:14:c7:8c:c8:7d:aa:61:b4:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=fc44148d-1875-41d3-a532-6f358354ab66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:13:1e:d9:3e:aa:97:bb:ed:7d:82:fb:2b:32:
b7:33:6b:b3:c7:fe:26:62:da:89:f8:3d:cc:71:8b:
88:e9:c4:3c:e1:7e:0d:0a:fb:a5:03:b9:21:2f:ac:
d9:37:a9:e9:13:a7:d8:92:0d:4a:45:f1:15:38:74:
c9:85:50:5d:0e:fe:d5:bb:e0:79:a0:5c:3f:8c:1d:
3f:45:4a:59:fe:54:66:8a:d4:25:a8:55:da:41:d3:
09:ac:0d:3c:6b:e7:13:e5:06:ac:03:1c:cb:8d:0b:
c8:39:41:fa:c8:0c:54:55:81:d4:f9:46:29:5f:8a:
fb:71:5f:f8:f7:de:5d:c3:7e:2d:45:0f:75:87:a3:
ee:f3:57:73:41:16:9a:6e:bc:b3:36:f6:9a:74:f5:
71:71:34:01:3c:a5:25:88:fd:eb:a7:90:3f:b1:75:
77:1a:0d:dd:ba:4e:01:ec:9e:6a:a3:0b:5b:40:8c:
4c:87:c2:40:11:38:41:0d:9c:8b:d9:c5:96:22:00:
b5:69:e8:0c:3c:f0:c4:bf:81:93:e9:16:4e:47:60:
68:9f:5a:3b:5c:3b:9c:4f:dd:1f:a1:d0:71:95:fd:
6b:89:2f:75:36:56:7b:e3:1c:05:3f:c2:da:a1:9d:
ec:84:02:9f:98:43:fc:a4:3d:fa:03:3b:a6:41:35:
31:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FE:EB:91:F4:DE:98:95:99:07:C3:0A:9E:F7:51:13:B8:A4:F7:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e1a1cca9-cd8b-3746-af45-b452aa2a7fff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
192.101.193.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:8c:8c:a4:84:e9:2e:55:d8:e2:f4:e0:68:84:45:eb:0a:2c:
60:f9:2a:ca:45:24:82:51:d0:be:04:5d:28:b8:c0:44:51:0c:
b8:b5:22:db:70:ac:a5:d2:fc:4d:f5:7e:dd:82:f9:4e:30:d2:
09:09:20:7a:f2:a3:ef:8d:c3:dc:fa:4a:f5:7a:d7:ba:34:97:
05:95:67:e8:e2:c3:de:a1:a5:30:d1:5c:aa:5e:fc:ba:da:31:
fe:53:e6:e2:92:ff:cb:cc:7d:9d:b6:47:1a:2a:87:c3:ba:d9:
cc:62:d8:24:13:03:8d:5d:a5:8a:33:8e:75:bd:ba:6e:7a:3a:
8c:e4:58:29:d5:67:4a:10:aa:fa:b8:5b:40:9b:7c:03:68:24:
db:2f:07:c3:13:86:ea:ac:7c:fd:8c:9d:5b:b0:e2:d6:bd:80:
96:29:c0:38:7e:0a:82:f6:90:3b:34:13:f8:a4:b7:78:5a:f9:
ea:4c:90:45:a2:f3:1f:d4:88:a9:bc:3f:39:c1:63:7d:16:89:
80:47:93:4d:13:ea:6c:0c:48:74:16:12:ea:64:bb:a8:cb:d8:
ac:ef:86:65:0a:d7:a3:0a:8f:bc:24:8b:84:e7:62:e6:42:c5:
80:46:60:42:26:22:89:4f:7a:e0:ee:39:78:23:79:b1:4c:bb:
18:5b:fb:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxBTHjMh9qmG0hIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5
YzIwMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZmM0NDE0OGQtMTg3NS00MWQzLWE1MzItNmYzNTgzNTRhYjY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBMe2T6ql7vtfYL7KzK3M2uzx/4mYtqJ+D3M
cYuI6cQ84X4NCvulA7khL6zZN6npE6fYkg1KRfEVOHTJhVBdDv7Vu+B5oFw/jB0/
RUpZ/lRmitQlqFXaQdMJrA08a+cT5QasAxzLjQvIOUH6yAxUVYHU+UYpX4r7cV/4
995dw34tRQ91h6Pu81dzQRaabryzNvaadPVxcTQBPKUliP3rp5A/sXV3Gg3duk4B
7J5qowtbQIxMh8JAEThBDZyL2cWWIgC1aegMPPDEv4GT6RZOR2Bon1o7XDucT90f
odBxlf1riS91NlZ74xwFP8LaoZ3shAKfmEP8pD36AzumQTUxdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCL+65H03piVmQfDCp73URO4pPdSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx
MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvZTFhMWNjYTktY2Q4Yi0z
NzQ2LWFmNDUtYjQ1MmFhMmE3ZmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi
M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi
OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm
YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGXBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAuMjKSE6S5V2OL04GiEResKLGD5KspFJIJR0L4EXSi4wERRDLi1Ittw
rKXS/E31ft2C+U4w0gkJIHryo++Nw9z6SvV617o0lwWVZ+jiw96hpTDRXKpe/Lra
Mf5T5uKS/8vMfZ22Rxoqh8O62cxi2CQTA41dpYozjnW9um56OozkWCnVZ0oQqvq4
W0CbfANoJNsvB8MThuqsfP2MnVuw4ta9gJYpwDh+CoL2kDs0E/ikt3ha+epMkEWi
8x/UiKm8PznBY30WiYBHk00T6mwMSHQWEupku6jL2KzvhmUK16MKj7wki4TnYuZC
xYBGYEImIolPeuDuOXgjebFMuxhb+4g=
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:41:33 2025 by rpki-client