Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8e87ad2b-4e20-36b7-902f-7dcc1a8fc6e8.roa
File: 8e87ad2b-4e20-36b7-902f-7dcc1a8fc6e8.roa (raw, json)
Hash identifier: oI62qFsX15sDcXyEjeUz0phhnAE98q3+DYRy3nDUE1c=
Subject key identifier: BE:3A:FF:97:AC:1C:41:C1:CA:E6:EC:CD:2C:60:2C:81:40:8C:D4:2E
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858492134433C19341BC1F4C91400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8e87ad2b-4e20-36b7-902f-7dcc1a8fc6e8.roa
Signing time: Sun 09 Mar 2025 10:20:48 +0000
ROA not before: Sun 09 Mar 2025 10:20:48 +0000
ROA not after: Sat 07 Jun 2025 10:20:48 +0000
asID: 36522
IP address blocks: 204.101.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:43:3c:19:34:1b:c1:f4:c9:14:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:48 2025 GMT
Not After : Jun 7 10:20:48 2025 GMT
Subject: CN=a49c02f5-77b1-433b-9ef8-3bd812b9fbb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:84:62:c0:34:10:42:06:7e:64:63:d8:a1:0e:
d2:0d:d4:2d:bb:48:57:8d:1d:5e:a1:52:86:9d:f9:
9c:89:d2:5e:56:fd:99:a7:ce:6b:0a:0c:97:a8:0c:
ae:1c:45:85:63:59:e8:ae:0a:d5:ab:b8:8d:36:95:
0b:31:a0:bd:3e:6e:d3:e4:b5:3b:d0:bf:26:7c:f7:
cc:14:8b:fd:07:0c:85:0d:74:ec:62:41:a8:32:0b:
7d:5e:3d:f0:18:2f:9d:1e:4b:ca:0f:e0:6a:80:b6:
99:4f:09:71:9e:7b:90:85:32:86:d9:55:9e:70:bb:
d5:a2:bd:9b:24:05:45:aa:e0:02:4e:fd:0a:ff:8e:
d6:2c:aa:1e:14:bb:3b:1a:3b:b8:7d:51:26:8c:b8:
1c:d7:1d:24:87:4f:20:88:3b:83:62:32:91:14:41:
c0:d4:d8:c6:25:93:1b:75:15:62:be:58:aa:72:a7:
b5:c3:43:77:cf:87:f3:15:cb:a9:10:1c:b2:14:ec:
ff:bf:90:72:61:52:c7:27:d2:e8:c6:56:55:3f:55:
25:3b:d2:46:6b:51:eb:b7:db:3a:2b:1f:71:a6:37:
8e:90:9c:a3:48:8c:3a:a9:ce:2b:f4:2e:d5:82:9f:
fe:59:f2:b6:f1:64:26:39:5b:59:dc:68:fd:33:c6:
cf:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3A:FF:97:AC:1C:41:C1:CA:E6:EC:CD:2C:60:2C:81:40:8C:D4:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8e87ad2b-4e20-36b7-902f-7dcc1a8fc6e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.174.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:b4:bf:da:27:2e:77:b7:8a:dd:95:16:a9:e4:ed:7b:7b:33:
39:d5:d3:6e:c5:0a:f5:55:0e:fe:86:dc:a2:5d:b4:fc:13:c1:
8e:90:13:95:37:a7:94:fb:3b:b7:e8:34:65:d9:dd:9c:74:c0:
f5:a3:3e:9b:46:95:47:1b:cc:94:41:d7:27:66:cb:9d:96:3b:
8c:b1:e8:6f:c4:0a:a8:7c:8d:07:34:33:5e:bf:a0:c6:f2:86:
ef:98:7e:d7:e1:36:73:c1:a8:60:61:72:17:31:b4:76:6b:cf:
5e:82:21:df:fd:fd:37:77:a0:98:b7:66:77:52:b4:ca:5c:e6:
41:30:2f:93:69:8a:ba:eb:fa:91:50:8e:c0:58:fc:26:ce:29:
57:dc:7a:f9:74:dc:0f:44:40:48:1b:30:27:64:23:b8:51:a1:
9c:51:be:9d:52:78:84:d2:e0:0a:fa:65:d5:01:84:19:3d:c4:
3f:64:6a:af:b4:e8:18:90:b0:f4:60:a4:ea:71:8d:ba:16:5c:
5d:7d:4c:86:7e:32:7d:9f:12:c7:d5:ad:a0:bf:fb:19:f0:86:
54:ba:42:6f:26:f5:c5:e3:d4:b8:b7:b6:c8:59:25:67:74:88:
e0:3a:cb:47:2b:2d:ff:f1:e8:f3:9c:4a:0d:4e:7c:80:1e:fb:
e6:6e:a4:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhNEM8GTQbwfTJFAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDMwOTEwMjA0OFoXDTI1MDYwNzEwMjA0OFowLzEtMCsGA1UEAxMk
YTQ5YzAyZjUtNzdiMS00MzNiLTllZjgtM2JkODEyYjlmYmIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloRiwDQQQgZ+ZGPYoQ7SDdQtu0hXjR1eoVKG
nfmcidJeVv2Zp85rCgyXqAyuHEWFY1norgrVq7iNNpULMaC9Pm7T5LU70L8mfPfM
FIv9BwyFDXTsYkGoMgt9Xj3wGC+dHkvKD+BqgLaZTwlxnnuQhTKG2VWecLvVor2b
JAVFquACTv0K/47WLKoeFLs7Gju4fVEmjLgc1x0kh08giDuDYjKRFEHA1NjGJZMb
dRVivliqcqe1w0N3z4fzFcupEByyFOz/v5ByYVLHJ9LoxlZVP1UlO9JGa1Hrt9s6
Kx9xpjeOkJyjSIw6qc4r9C7Vgp/+WfK28WQmOVtZ3Gj9M8bPywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL46/5esHEHByubszSxgLIFAjNQuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvOGU4N2FkMmItNGUyMC0z
NmI3LTkwMmYtN2RjYzFhOGZjNmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGWuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACa0v9onLne3it2VFqnk7Xt7MznV027FCvVVDv6G3KJdtPwTwY6QE5U3
p5T7O7foNGXZ3Zx0wPWjPptGlUcbzJRB1ydmy52WO4yx6G/ECqh8jQc0M16/oMby
hu+YftfhNnPBqGBhchcxtHZrz16CId/9/Td3oJi3ZndStMpc5kEwL5Npirrr+pFQ
jsBY/CbOKVfcevl03A9EQEgbMCdkI7hRoZxRvp1SeITS4Ar6ZdUBhBk9xD9kaq+0
6BiQsPRgpOpxjboWXF19TIZ+Mn2fEsfVraC/+xnwhlS6Qm8m9cXj1Li3tshZJWd0
iOA6y0crLf/x6POcSg1OfIAe++ZupHY=
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:14 2025 by rpki-client