Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c374ff6-f1bd-3dd4-a01f-d51cf3d622c0.roa
File: 2c374ff6-f1bd-3dd4-a01f-d51cf3d622c0.roa (raw, json)
Hash identifier: QdqhhGzxtR+NItE2nhN2B4rFQxQvnnbGOLXiL8xPees=
Subject key identifier: F3:1D:12:50:5C:8E:89:B5:61:F2:41:A3:41:79:BD:59:66:60:D8:8D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F85B8C95F38453DFB25E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c374ff6-f1bd-3dd4-a01f-d51cf3d622c0.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 24.63.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:5b:8c:95:f3:84:53:df:b2:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=6700c7d8-bf0d-4e5b-b20d-928e450318d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0d:24:76:e8:70:cf:77:c3:68:b9:7c:0c:77:
da:89:29:2f:8f:07:8c:23:2c:92:d6:68:22:75:0e:
c5:61:93:18:46:ea:cd:d7:bc:d7:84:97:84:8b:fb:
cf:4f:32:d5:6f:9d:89:6e:1b:bb:c9:32:83:6a:d5:
f5:44:28:c8:27:c4:a0:d6:1e:9e:e8:c3:7a:fc:b8:
72:77:d3:fa:66:02:45:f2:75:0f:f1:80:3c:4a:5d:
20:41:23:c0:93:ee:7b:06:13:29:31:8a:2b:73:a8:
ae:34:e3:69:25:92:cb:7e:50:df:c6:fc:42:2f:fc:
f6:11:79:13:76:00:1d:52:f3:c9:b7:db:df:b2:93:
39:6f:90:f4:d3:48:e4:29:5c:be:64:17:0a:43:a0:
71:cb:51:9f:2e:f4:b1:c5:e3:21:61:52:9c:27:9c:
7f:76:2b:cc:90:9f:3b:4b:b2:e8:e6:dd:98:a3:a5:
6b:47:c9:9d:4a:ea:f2:ea:4e:77:b1:1b:c3:f5:c0:
08:91:e0:70:53:ff:14:ca:0e:ad:11:46:5e:be:48:
82:40:60:2a:8a:5c:b3:3a:09:a5:01:fc:9d:3b:2c:
a6:3c:d4:f9:86:6e:a8:c1:a7:58:0f:ea:1a:45:8b:
d3:82:39:41:be:c5:bb:fa:f7:cb:46:30:cb:5a:8b:
f3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1D:12:50:5C:8E:89:B5:61:F2:41:A3:41:79:BD:59:66:60:D8:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c374ff6-f1bd-3dd4-a01f-d51cf3d622c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.63.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:80:e6:14:9e:4e:c4:0e:50:4b:47:98:1c:3e:94:09:a6:a2:
0b:c5:f8:51:22:c4:ce:18:dd:4f:4c:23:d4:a6:84:5d:1a:a4:
0c:50:01:75:ed:7f:a0:b5:76:ef:f6:d4:d0:0d:ee:f5:c2:be:
63:fc:eb:61:f9:bc:fd:ba:20:07:9d:64:9e:c1:86:29:bb:c1:
96:a3:ba:72:0e:c2:e7:64:24:a6:d9:73:54:de:ea:10:3d:16:
7d:da:56:96:a7:eb:dc:41:2b:f1:29:47:1a:29:9a:82:f7:7e:
2b:96:a4:1a:9d:34:60:65:e1:a2:ba:ca:00:94:f0:27:c3:4a:
20:e7:90:99:ca:b5:2c:18:e2:c0:ce:e4:46:ff:c4:ca:43:c4:
bc:f1:4b:35:7a:26:71:b9:e5:e9:b5:2a:8d:2e:ea:83:6d:e2:
60:37:bd:12:f1:77:35:0e:c2:1f:52:84:fd:17:4b:c8:e9:72:
15:71:fe:72:72:fc:f1:fe:fe:3d:41:df:ab:cc:04:d1:64:31:
05:dc:84:f2:87:fa:6e:e3:4d:f6:b0:24:e6:8e:be:c1:e3:10:
17:d4:7a:1c:89:5a:7f:e4:69:e1:03:e8:93:30:f0:57:d0:cf:
b8:24:ef:5a:f2:de:3f:95:e1:23:31:c1:bb:8b:b5:47:76:d4:
a4:77:36:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+FuMlfOEU9+yXgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
NjcwMGM3ZDgtYmYwZC00ZTViLWIyMGQtOTI4ZTQ1MDMxOGQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQ0kduhwz3fDaLl8DHfaiSkvjweMIyyS1mgi
dQ7FYZMYRurN17zXhJeEi/vPTzLVb52Jbhu7yTKDatX1RCjIJ8Sg1h6e6MN6/Lhy
d9P6ZgJF8nUP8YA8Sl0gQSPAk+57BhMpMYorc6iuNONpJZLLflDfxvxCL/z2EXkT
dgAdUvPJt9vfspM5b5D000jkKVy+ZBcKQ6Bxy1GfLvSxxeMhYVKcJ5x/divMkJ87
S7Lo5t2Yo6VrR8mdSury6k53sRvD9cAIkeBwU/8Uyg6tEUZevkiCQGAqilyzOgml
AfydOyymPNT5hm6owadYD+oaRYvTgjlBvsW7+vfLRjDLWovzawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPMdElBcjom1YfJBo0F5vVlmYNiNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmMzNzRmZjYtZjFiZC0z
ZGQ0LWEwMWYtZDUxY2YzZDYyMmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGD/UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL+A5hSeTsQOUEtHmBw+lAmmogvF+FEixM4Y3U9MI9SmhF0apAxQAXXt
f6C1du/21NAN7vXCvmP862H5vP26IAedZJ7Bhim7wZajunIOwudkJKbZc1Te6hA9
Fn3aVpan69xBK/EpRxopmoL3fiuWpBqdNGBl4aK6ygCU8CfDSiDnkJnKtSwY4sDO
5Eb/xMpDxLzxSzV6JnG55em1Ko0u6oNt4mA3vRLxdzUOwh9ShP0XS8jpchVx/nJy
/PH+/j1B36vMBNFkMQXchPKH+m7jTfawJOaOvsHjEBfUehyJWn/kaeED6JMw8FfQ
z7gk71ry3j+V4SMxwbuLtUd21KR3NnU=
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:29:10 2025 by rpki-client