Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e901e58-06c0-3a1a-a8fa-aa55080b17fe.roa
File: 2e901e58-06c0-3a1a-a8fa-aa55080b17fe.roa (raw, json)
Hash identifier: PpW3+d+6FiO+eJ/QQoARmg8eYIXzNPZje8vFDcE9kiI=
Subject key identifier: A1:D6:D2:5A:95:4B:0F:83:60:80:2C:D7:EF:69:A8:9C:BD:C5:35:9F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAEC0507A0D9C2D92D05240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e901e58-06c0-3a1a-a8fa-aa55080b17fe.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33659
IP address blocks: 24.0.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:c0:50:7a:0d:9c:2d:92:d0:52:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=e1ccefaf-6214-444c-959c-095a7094b5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:02:0b:50:57:a2:43:1e:ee:bd:74:44:80:5a:
fd:9c:85:27:33:a5:9b:72:58:61:30:2a:37:88:0a:
7d:3d:01:a8:f0:0c:ab:2c:31:ba:f0:88:6e:50:bb:
83:77:3f:c8:dc:ad:8d:fa:18:ba:a3:48:a2:49:82:
e5:2d:3f:05:5d:39:a6:ed:fc:0d:52:15:6f:a1:cb:
12:4a:b5:eb:1a:7f:60:92:18:fe:e9:23:fc:82:e9:
11:6a:ea:be:36:2c:d1:26:33:3d:8c:b8:12:ef:8c:
24:fd:85:5b:10:4a:90:1d:c6:81:02:9e:c7:55:29:
d0:26:af:08:5c:06:f4:dd:fb:8a:59:50:43:e6:27:
37:c4:70:5a:8b:c8:7d:b4:f9:50:01:b0:a1:92:2a:
21:34:9c:72:26:ea:65:b2:2d:9a:e6:71:3c:94:83:
e9:cd:ad:cd:31:b8:7f:60:a6:21:f5:ce:21:39:c4:
41:27:9f:30:b3:84:1c:8d:dd:c6:4c:72:34:5d:21:
19:88:fd:c6:db:7f:d7:fa:87:34:40:5e:92:5e:08:
91:0f:5c:c6:18:29:c2:0f:94:b5:14:84:12:ac:24:
1a:d7:2a:84:15:78:71:5b:e3:fb:5f:bc:46:ba:ef:
3a:2e:0d:fd:86:f3:9b:74:53:39:22:d9:3b:99:ab:
5f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D6:D2:5A:95:4B:0F:83:60:80:2C:D7:EF:69:A8:9C:BD:C5:35:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e901e58-06c0-3a1a-a8fa-aa55080b17fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.0.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:74:dd:59:29:16:c7:11:8d:4e:27:74:38:fd:62:78:64:66:
e0:8a:b3:46:50:30:ba:12:9a:8a:7f:b8:ba:93:75:01:aa:d9:
03:34:2f:e5:76:6b:fd:f6:5b:2b:c1:47:eb:8e:63:79:0c:5f:
41:4a:7f:3a:38:67:ac:f9:32:c0:1c:c9:f8:ff:6c:95:cf:a8:
8f:a0:a9:ad:45:10:cf:d6:9c:38:8b:11:06:64:60:33:7c:2e:
69:c6:40:bc:4f:e4:4d:04:95:c5:8c:f9:2b:af:41:20:8f:d4:
d5:da:12:26:f4:f4:29:80:4f:53:e1:e0:cc:67:0e:f5:aa:7f:
53:01:0a:51:9e:f4:db:ad:bf:d6:44:e6:62:8b:ab:b9:c8:a8:
28:3d:81:16:32:a0:52:1c:96:e7:8c:4d:26:5e:14:7d:e2:30:
61:39:d1:51:10:78:4e:41:13:c5:a7:fb:4b:b0:12:4f:75:11:
05:f1:59:f6:f5:14:37:60:ff:96:d0:3d:b8:a0:b9:07:eb:1a:
be:20:48:d7:a0:6a:ab:a8:4f:90:6a:8f:aa:cd:ff:6b:8b:9e:
57:12:76:34:a3:94:8a:c5:ec:98:d7:df:bd:d6:36:e7:53:6d:
37:aa:62:b9:1d:ac:ef:e8:2c:8f:b1:40:b6:8a:af:73:40:5c:
8b:19:c4:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrsBQeg2cLZLQUkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZTFjY2VmYWYtNjIxNC00NDRjLTk1OWMtMDk1YTcwOTRiNWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQILUFeiQx7uvXREgFr9nIUnM6WbclhhMCo3
iAp9PQGo8AyrLDG68IhuULuDdz/I3K2N+hi6o0iiSYLlLT8FXTmm7fwNUhVvocsS
SrXrGn9gkhj+6SP8gukRauq+NizRJjM9jLgS74wk/YVbEEqQHcaBAp7HVSnQJq8I
XAb03fuKWVBD5ic3xHBai8h9tPlQAbChkiohNJxyJuplsi2a5nE8lIPpza3NMbh/
YKYh9c4hOcRBJ58ws4Qcjd3GTHI0XSEZiP3G23/X+oc0QF6SXgiRD1zGGCnCD5S1
FIQSrCQa1yqEFXhxW+P7X7xGuu86Lg39hvObdFM5Itk7matf/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKHW0lqVSw+DYIAs1+9pqJy9xTWfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmU5MDFlNTgtMDZjMC0z
YTFhLWE4ZmEtYWE1NTA4MGIxN2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGAChMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEJ03VkpFscRjU4ndDj9YnhkZuCKs0ZQMLoSmop/uLqTdQGq2QM0L+V2
a/32WyvBR+uOY3kMX0FKfzo4Z6z5MsAcyfj/bJXPqI+gqa1FEM/WnDiLEQZkYDN8
LmnGQLxP5E0ElcWM+SuvQSCP1NXaEib09CmAT1Ph4MxnDvWqf1MBClGe9Nutv9ZE
5mKLq7nIqCg9gRYyoFIclueMTSZeFH3iMGE50VEQeE5BE8Wn+0uwEk91EQXxWfb1
FDdg/5bQPbiguQfrGr4gSNegaquoT5Bqj6rN/2uLnlcSdjSjlIrF7JjX373WNudT
bTeqYrkdrO/oLI+xQLaKr3NAXIsZxMQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:50:46 2025 by rpki-client