Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa3b6995-9785-3575-bff7-b5cdbab92144.roa
File: aa3b6995-9785-3575-bff7-b5cdbab92144.roa (raw, json)
Hash identifier: zb6W3iqPpTSYW+AyNBafY0DpVfjGvjkePgTz0xF399g=
Subject key identifier: 05:22:81:C8:E0:A5:C3:DD:6D:69:ED:8D:9E:C8:DE:80:3A:59:43:3D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F6F455C64D2C9770F37F20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa3b6995-9785-3575-bff7-b5cdbab92144.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 24.61.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:f4:55:c6:4d:2c:97:70:f3:7f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=94bac32b-672c-4bd8-9e1e-cf8f6cf4b908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:33:12:0f:9e:c9:ff:df:73:0b:a9:1e:e3:95:
10:a8:0d:e4:e9:ab:41:59:2d:29:ec:8e:0a:50:81:
9e:c7:a5:94:10:d0:d6:04:df:82:38:95:c9:dc:fe:
02:3f:bf:b9:bc:9b:75:4c:92:8b:4e:55:13:d0:19:
68:5e:84:7d:44:54:33:ce:6d:63:f4:8b:92:d9:91:
32:f8:fe:6b:32:9b:01:28:b8:dd:4b:26:49:f4:e4:
d9:6f:d1:62:70:4b:07:ed:3c:6b:1f:59:3f:17:22:
aa:43:de:0a:57:b4:62:8d:e0:3e:e0:5e:35:2c:16:
ae:f7:71:21:e7:97:0c:fb:5d:70:06:79:f9:39:8c:
7c:c6:bd:a5:0d:f5:3a:87:8e:91:f8:24:0d:d0:80:
0f:e9:ca:7b:ad:1d:2c:e2:4b:62:1e:2f:eb:f5:30:
85:1a:8c:18:c8:ef:bf:a3:c6:f7:50:a2:08:8d:e1:
ac:3b:4d:5c:be:df:57:96:43:90:73:20:ff:bb:3b:
cc:5b:e0:b5:c6:6c:11:12:aa:4a:29:86:81:b1:63:
57:ed:56:2d:36:4f:4a:11:8a:fc:b4:c5:1b:c7:85:
71:ad:52:6e:f8:19:61:d1:9a:f1:94:cd:42:1e:ea:
6a:72:6e:5f:03:84:6c:bc:ac:02:d7:fe:62:ac:7e:
83:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:22:81:C8:E0:A5:C3:DD:6D:69:ED:8D:9E:C8:DE:80:3A:59:43:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa3b6995-9785-3575-bff7-b5cdbab92144.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.61.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:0d:4e:3e:4d:63:81:e2:27:a6:5e:0e:eb:00:4f:84:47:74:
89:af:5c:d2:3d:13:1a:c2:ec:29:41:1e:c2:52:26:e9:45:88:
2b:a3:95:55:0e:c1:8f:ab:d9:7b:89:31:e5:bf:93:3e:b9:ac:
67:c8:ea:67:bf:16:9c:b8:31:17:15:b0:05:a8:62:01:ac:69:
2a:7b:66:a3:87:ca:bf:ac:82:ae:e5:a4:b6:db:88:35:c5:34:
5a:ff:26:20:f8:35:09:9d:81:3c:f5:40:c2:28:02:26:c0:b1:
5f:10:1f:58:8e:33:c4:4c:2f:ac:91:95:b7:d4:9c:f2:12:74:
67:d7:aa:05:86:2f:21:4d:75:4c:25:3b:cc:3c:00:6e:8c:e0:
9d:d8:aa:94:94:ff:61:35:0b:83:64:59:82:4d:a2:08:e4:a6:
63:aa:17:5b:22:c6:6d:43:9f:5d:3a:8d:aa:fa:b5:24:03:c4:
f4:86:30:f8:e8:0e:1a:4c:6f:85:f6:04:cd:60:ec:09:e6:6c:
4a:d6:7e:45:18:ad:52:a4:f1:9f:e3:b0:91:81:9d:74:8b:f4:
e7:49:26:d9:df:45:a8:57:3a:9c:96:2f:71:61:2a:1a:ce:1f:
c7:e1:a7:a4:d9:cb:c0:ca:ec:ca:3c:28:c8:be:99:68:36:00:
ca:26:4f:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09vRVxk0sl3DzfyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
OTRiYWMzMmItNjcyYy00YmQ4LTllMWUtY2Y4ZjZjZjRiOTA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzMSD57J/99zC6ke45UQqA3k6atBWS0p7I4K
UIGex6WUENDWBN+COJXJ3P4CP7+5vJt1TJKLTlUT0BloXoR9RFQzzm1j9IuS2ZEy
+P5rMpsBKLjdSyZJ9OTZb9FicEsH7TxrH1k/FyKqQ94KV7RijeA+4F41LBau93Eh
55cM+11wBnn5OYx8xr2lDfU6h46R+CQN0IAP6cp7rR0s4ktiHi/r9TCFGowYyO+/
o8b3UKIIjeGsO01cvt9XlkOQcyD/uzvMW+C1xmwREqpKKYaBsWNX7VYtNk9KEYr8
tMUbx4VxrVJu+Blh0ZrxlM1CHupqcm5fA4RsvKwC1/5irH6DrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAUigcjgpcPdbWntjZ7I3oA6WUM9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWEzYjY5OTUtOTc4NS0z
NTc1LWJmZjctYjVjZGJhYjkyMTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGD0UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA8NTj5NY4HiJ6ZeDusAT4RHdImvXNI9ExrC7ClBHsJSJulFiCujlVUO
wY+r2XuJMeW/kz65rGfI6me/Fpy4MRcVsAWoYgGsaSp7ZqOHyr+sgq7lpLbbiDXF
NFr/JiD4NQmdgTz1QMIoAibAsV8QH1iOM8RML6yRlbfUnPISdGfXqgWGLyFNdUwl
O8w8AG6M4J3YqpSU/2E1C4NkWYJNogjkpmOqF1sixm1Dn106jar6tSQDxPSGMPjo
DhpMb4X2BM1g7AnmbErWfkUYrVKk8Z/jsJGBnXSL9OdJJtnfRahXOpyWL3FhKhrO
H8fhp6TZy8DK7Mo8KMi+mWg2AMomTyU=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:01:55 2025 by rpki-client