Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4c543a3f-ff83-32cf-b711-7abee46913d7.roa
File: 4c543a3f-ff83-32cf-b711-7abee46913d7.roa (raw, json)
Hash identifier: w/zbvyQSje/U+QPUjA9ROigzJOTAR9ZrN7iFeqVVdGA=
Subject key identifier: 00:27:4C:7A:FB:59:12:BA:CE:D1:36:DA:98:64:46:11:AB:5E:71:93
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848FFCC3A56B7AA274B66EAFD00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4c543a3f-ff83-32cf-b711-7abee46913d7.roa
Signing time: Tue 25 Feb 2025 11:09:31 +0000
ROA not before: Tue 25 Feb 2025 11:09:31 +0000
ROA not after: Mon 26 May 2025 10:09:31 +0000
asID: 30036
IP address blocks: 192.119.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ff:cc:3a:56:b7:aa:27:4b:66:ea:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 25 11:09:31 2025 GMT
Not After : May 26 10:09:31 2025 GMT
Subject: CN=07bbb4ae-09e1-4809-a410-c91b47ca69d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:17:e8:58:eb:06:2e:f0:30:28:79:50:05:4e:
bc:a2:2d:c1:bf:ff:5c:87:1f:f8:29:a3:69:a8:22:
09:c0:03:b5:43:6f:84:0f:90:a1:cf:4b:6f:28:83:
e6:c3:48:00:ca:c7:84:23:75:25:74:df:4b:bb:3d:
3c:4a:af:f3:3b:17:57:9a:f4:3f:0d:6d:b2:1c:51:
1d:cf:1a:5a:c5:78:ea:83:72:08:bd:68:aa:bb:a6:
79:27:8d:dc:bb:ee:02:2e:57:4a:4c:ca:bb:03:54:
7e:91:db:ca:c1:4f:cf:cc:eb:f5:14:a4:ab:1e:02:
a1:4e:75:4b:88:e4:b4:3a:ca:ad:b0:9b:83:d8:b2:
dd:a8:7b:80:ae:c8:c0:54:f3:f8:0f:de:e7:ea:1d:
af:d0:f7:5c:05:0a:82:8a:ae:94:e7:00:ec:a9:3d:
50:e3:09:38:a3:77:cd:77:48:cc:a4:c3:bc:ca:79:
f1:80:df:ef:b1:15:37:85:27:f5:fc:18:5e:c3:55:
04:45:80:ec:fb:ea:00:f3:79:31:76:65:e0:9f:9b:
6d:c9:de:c0:bb:15:53:f4:67:7a:b9:7e:a6:eb:81:
e6:5b:85:3b:08:c3:15:c5:7d:35:88:ce:05:de:46:
13:83:e2:39:bf:89:65:8d:d5:15:3a:5c:06:a3:09:
7c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:27:4C:7A:FB:59:12:BA:CE:D1:36:DA:98:64:46:11:AB:5E:71:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4c543a3f-ff83-32cf-b711-7abee46913d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
192.119.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:64:2c:2b:1a:d7:81:ec:ff:84:2f:90:fa:02:3f:71:e5:67:
09:6e:71:97:7a:b5:f9:d3:67:47:61:a3:94:a2:8f:f7:14:3d:
fc:90:69:c3:ec:f5:41:f7:75:f6:a0:de:c6:88:9b:47:9f:f2:
95:2a:ed:ee:64:36:31:61:05:c8:0a:f5:ff:d7:8b:3d:ec:b4:
e9:48:80:b7:12:be:ef:d9:1f:95:6a:2a:b7:15:40:f6:a3:b5:
c3:3b:d7:f1:0a:25:8c:09:60:04:9d:33:58:9c:35:5c:5f:69:
c0:6e:97:d2:32:ab:9c:1d:45:db:16:2f:93:92:0a:40:ef:73:
f9:45:b6:03:2e:39:d6:c3:b5:d6:1f:59:16:f8:ed:1d:e2:51:
6d:99:9b:a2:2b:ee:60:3c:da:bc:04:34:f0:83:4b:f6:fe:91:
9e:51:f0:14:ae:7d:2e:e3:ad:72:ca:e7:b0:c0:29:74:24:07:
58:d2:c2:d7:31:49:a7:44:72:54:51:49:5d:5d:75:4b:ef:87:
c5:69:e8:02:4c:7b:68:fc:82:72:66:11:6c:0f:fc:e6:53:0d:
f3:6f:87:9d:ac:36:1b:6c:bb:e5:9f:a4:69:68:53:4f:b4:98:
54:4e:b4:98:ff:03:13:45:ff:12:d3:4d:67:f6:32:cb:a9:dc:
c0:8a:e5:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj/zDpWt6onS2bq/QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDIyNTExMDkzMVoXDTI1MDUyNjEwMDkzMVowLzEtMCsGA1UEAxMk
MDdiYmI0YWUtMDllMS00ODA5LWE0MTAtYzkxYjQ3Y2E2OWQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBfoWOsGLvAwKHlQBU68oi3Bv/9chx/4KaNp
qCIJwAO1Q2+ED5Chz0tvKIPmw0gAyseEI3UldN9Luz08Sq/zOxdXmvQ/DW2yHFEd
zxpaxXjqg3IIvWiqu6Z5J43cu+4CLldKTMq7A1R+kdvKwU/PzOv1FKSrHgKhTnVL
iOS0OsqtsJuD2LLdqHuArsjAVPP4D97n6h2v0PdcBQqCiq6U5wDsqT1Q4wk4o3fN
d0jMpMO8ynnxgN/vsRU3hSf1/Bhew1UERYDs++oA83kxdmXgn5ttyd7AuxVT9Gd6
uX6m64HmW4U7CMMVxX01iM4F3kYTg+I5v4lljdUVOlwGowl8cQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAAnTHr7WRK6ztE22phkRhGrXnGTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNGM1NDNhM2YtZmY4My0z
MmNmLWI3MTEtN2FiZWU0NjkxM2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHf4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADBkLCsa14Hs/4QvkPoCP3HlZwlucZd6tfnTZ0dho5Sij/cUPfyQacPs
9UH3dfag3saIm0ef8pUq7e5kNjFhBcgK9f/Xiz3stOlIgLcSvu/ZH5VqKrcVQPaj
tcM71/EKJYwJYASdM1icNVxfacBul9Iyq5wdRdsWL5OSCkDvc/lFtgMuOdbDtdYf
WRb47R3iUW2Zm6Ir7mA82rwENPCDS/b+kZ5R8BSufS7jrXLK57DAKXQkB1jSwtcx
SadEclRRSV1ddUvvh8Vp6AJMe2j8gnJmEWwP/OZTDfNvh52sNhtsu+WfpGloU0+0
mFROtJj/AxNF/xLTTWf2Msup3MCK5aQ=
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:03:46 2025 by rpki-client