Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/899994a8-13ca-3d0d-a979-c8aec1502933.roa
File: 899994a8-13ca-3d0d-a979-c8aec1502933.roa (raw, json)
Hash identifier: GTqnLKh6DN6unF7FNfbbNDeAT2oSG79zufomGe8BE8I=
Subject key identifier: 89:87:8A:F2:8C:9A:80:12:C8:92:CC:BC:09:0A:6F:A7:63:01:9A:22
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921343F1C9B5BD400BED6C200
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/899994a8-13ca-3d0d-a979-c8aec1502933.roa
Signing time: Sun 09 Mar 2025 10:20:46 +0000
ROA not before: Sun 09 Mar 2025 10:20:46 +0000
ROA not after: Sat 07 Jun 2025 10:20:46 +0000
asID: 36522
IP address blocks: 204.101.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:3f:1c:9b:5b:d4:00:be:d6:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:46 2025 GMT
Not After : Jun 7 10:20:46 2025 GMT
Subject: CN=d3f582a0-7957-4f1b-b0f3-06cac80f5974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b7:ff:3e:1d:bf:33:97:99:77:90:66:7f:0e:
49:88:a9:7c:ba:3c:22:72:dd:e8:3f:56:3f:d9:e3:
5d:40:5b:72:81:a7:c9:7c:17:ea:c1:99:03:78:27:
a7:89:73:91:3f:98:af:d6:3b:b7:5e:28:51:72:3b:
11:eb:8b:5f:ad:81:8c:26:45:36:0c:f3:d1:d4:0a:
87:4f:ae:a1:55:95:10:dc:af:64:52:ae:31:62:55:
07:64:eb:a5:4f:80:2a:8d:66:ef:be:ce:34:6f:3a:
37:a4:ac:a0:5a:0b:46:cf:5e:1f:01:8e:29:82:f5:
f1:99:d3:c8:91:45:d3:dd:ea:f6:92:0e:3d:d2:c1:
e5:63:0d:0b:ea:d8:41:b2:a1:9f:ff:d4:d2:52:c3:
28:2c:c1:12:90:67:c7:9c:62:79:4b:e3:a7:ce:31:
96:99:4d:09:9b:bf:66:3b:53:8e:aa:c5:b0:64:a0:
2f:a2:45:32:69:69:c2:c7:27:5a:3c:c5:5d:e2:1f:
6b:ec:34:53:3a:cc:ff:97:d1:5f:2b:1c:c1:b0:2f:
23:35:b3:76:98:8f:9f:60:ba:91:97:45:a7:62:36:
d5:55:1b:e6:b1:0e:26:5f:73:9d:d7:ae:b1:95:40:
d7:9b:c3:84:31:1a:32:3e:f4:74:ce:04:67:4e:f1:
8d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:87:8A:F2:8C:9A:80:12:C8:92:CC:BC:09:0A:6F:A7:63:01:9A:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/899994a8-13ca-3d0d-a979-c8aec1502933.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.85.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:63:65:59:7c:d9:ef:98:92:bc:29:dc:5a:13:a6:25:05:0e:
42:e4:7b:ba:5d:5b:09:ef:63:4d:7e:74:ed:bd:f0:df:4b:df:
07:b0:78:c4:25:26:f7:ea:81:9d:58:5b:39:0f:65:02:6a:b5:
68:39:c9:ca:27:38:dd:6c:de:7a:67:b1:76:d0:8d:06:e2:f0:
a8:4e:b6:9c:9f:3b:74:50:11:ad:ac:d3:13:71:16:fd:7f:fb:
ee:f6:67:9c:f0:a1:15:fb:12:79:ec:4c:1f:20:22:f9:c5:06:
b0:6f:9e:b7:5c:64:f6:fa:1f:c0:23:0d:60:49:39:df:1d:b2:
5c:e4:4a:ec:5e:a0:23:b4:ac:a5:b5:fb:4a:00:17:94:c4:8a:
9b:81:ca:3a:44:ed:3c:ee:b6:cf:b9:d9:fa:4f:cb:3d:c8:3b:
2d:67:1d:83:1a:e6:53:ad:50:09:2f:d6:7c:03:f7:03:76:23:
07:46:b6:b7:30:d9:ef:01:1a:8b:51:c1:7e:a0:c3:51:82:d2:
a6:1f:f1:aa:82:a8:41:8a:bc:f4:b9:df:25:49:f1:9f:7b:1b:
83:01:52:18:6d:fe:b3:a0:a4:93:6f:52:f8:b1:d2:9a:5d:c3:
ee:8c:d3:89:d8:49:b2:f1:25:01:f4:92:d5:0b:a5:4b:90:07:
19:30:ec:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhND8cm1vUAL7WwgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDMwOTEwMjA0NloXDTI1MDYwNzEwMjA0NlowLzEtMCsGA1UEAxMk
ZDNmNTgyYTAtNzk1Ny00ZjFiLWIwZjMtMDZjYWM4MGY1OTc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirf/Ph2/M5eZd5Bmfw5JiKl8ujwict3oP1Y/
2eNdQFtygafJfBfqwZkDeCeniXORP5iv1ju3XihRcjsR64tfrYGMJkU2DPPR1AqH
T66hVZUQ3K9kUq4xYlUHZOulT4AqjWbvvs40bzo3pKygWgtGz14fAY4pgvXxmdPI
kUXT3er2kg490sHlYw0L6thBsqGf/9TSUsMoLMESkGfHnGJ5S+OnzjGWmU0Jm79m
O1OOqsWwZKAvokUyaWnCxydaPMVd4h9r7DRTOsz/l9FfKxzBsC8jNbN2mI+fYLqR
l0WnYjbVVRvmsQ4mX3Od166xlUDXm8OEMRoyPvR0zgRnTvGNHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFImHivKMmoASyJLMvAkKb6djAZoiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvODk5OTk0YTgtMTNjYS0z
ZDBkLWE5NzktYzhhZWMxNTAyOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGVVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADpjZVl82e+Ykrwp3FoTpiUFDkLke7pdWwnvY01+dO298N9L3weweMQl
JvfqgZ1YWzkPZQJqtWg5yconON1s3npnsXbQjQbi8KhOtpyfO3RQEa2s0xNxFv1/
++72Z5zwoRX7EnnsTB8gIvnFBrBvnrdcZPb6H8AjDWBJOd8dslzkSuxeoCO0rKW1
+0oAF5TEipuByjpE7Tzuts+52fpPyz3IOy1nHYMa5lOtUAkv1nwD9wN2IwdGtrcw
2e8BGotRwX6gw1GC0qYf8aqCqEGKvPS53yVJ8Z97G4MBUhht/rOgpJNvUvix0ppd
w+6M04nYSbLxJQH0ktULpUuQBxkw7N8=
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:03 2025 by rpki-client