Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb21062f-d6fa-3483-b12a-b59d46844060.roa
File: cb21062f-d6fa-3483-b12a-b59d46844060.roa (raw, json)
Hash identifier: kg8oF6N1OCiHRDdAHJxrgUFZLnasyLDbIyR5eiJsH94=
Subject key identifier: 08:37:7E:CD:A2:48:B4:C5:F7:15:7E:EA:9F:C2:2E:85:BA:7C:1C:02
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB17D8493AB418FCF6EB740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb21062f-d6fa-3483-b12a-b59d46844060.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33651
IP address blocks: 71.198.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b1:7d:84:93:ab:41:8f:cf:6e:b7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=008870ca-2bd9-446d-9ad5-763bb89d08e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b2:ee:4e:a3:46:16:2d:5a:07:27:08:c7:7b:
ca:ca:14:40:03:4b:08:ef:87:a1:46:36:2d:20:42:
38:39:23:71:a0:52:c6:e3:50:34:56:3c:ad:b8:d6:
b7:5e:74:25:a7:8b:cf:3a:90:4f:5e:13:7f:0a:4a:
f7:a6:50:41:c7:e9:b0:ab:fe:23:1a:ba:28:db:57:
37:08:cc:de:29:6a:6c:8b:fd:1f:27:02:f1:f1:c2:
8a:d6:f3:38:34:c9:89:75:46:a1:6d:c9:75:e5:5d:
f0:93:eb:7e:ba:55:b5:78:4d:44:8f:27:57:70:f8:
e5:23:e0:75:f7:ca:69:99:ef:f2:5a:33:67:8f:be:
07:03:c6:56:eb:80:aa:8d:9c:3c:16:dc:e1:cd:aa:
38:d6:10:fb:b1:08:e2:ae:4c:55:d0:ca:dc:31:8d:
3e:ba:9a:0c:c6:07:ea:ca:3d:b8:6d:8b:1d:50:27:
87:dd:a0:56:a7:27:00:3e:80:53:66:6c:ea:fb:da:
5b:be:dc:cf:be:a4:7c:50:41:1f:f4:3a:af:dc:ca:
db:ed:89:fd:41:6d:60:e9:e5:e7:f8:f5:21:f3:c8:
62:79:90:20:b6:9f:61:b0:b4:d5:59:4f:45:4e:c1:
65:37:9b:e3:fa:25:ae:52:67:a4:a7:01:b8:b1:1a:
1f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:37:7E:CD:A2:48:B4:C5:F7:15:7E:EA:9F:C2:2E:85:BA:7C:1C:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb21062f-d6fa-3483-b12a-b59d46844060.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.198.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:49:61:f2:6b:74:7e:41:66:3e:83:22:4a:e0:0d:d5:f3:3b:
d8:0a:e9:c3:fb:79:55:41:f5:75:31:be:4e:56:cf:d6:ea:6f:
a9:aa:4a:16:e1:ed:da:30:9e:94:2e:bf:99:d1:22:5e:34:16:
56:4d:99:9a:f4:50:6a:84:fb:44:d5:ed:2d:0d:37:b2:bb:5f:
13:25:dd:a4:87:f0:4e:c5:3a:90:60:b4:af:52:e2:22:71:eb:
6d:9e:b1:05:dc:58:46:1d:85:18:52:04:46:24:4b:1a:51:d3:
ef:46:d8:e1:d4:d2:dd:6e:96:92:b5:bd:7e:bb:1f:a4:3b:b8:
0e:9b:ea:96:8b:02:5d:b4:b2:71:9c:86:8b:5c:aa:b0:9c:ad:
15:e9:28:de:7f:3f:e3:f4:d7:ac:15:6a:69:76:cc:d8:7e:3d:
d2:76:31:ff:b5:b2:28:b0:79:fa:f7:c1:7b:87:a4:5e:d0:49:
8b:66:87:a0:b4:73:98:52:b1:13:80:8d:ae:6d:bd:79:ee:12:
8b:d7:ba:91:24:a7:c4:a6:03:6b:7e:be:30:c4:82:f9:cf:51:
e5:46:2c:57:31:57:f0:d3:33:95:17:2e:67:85:b2:47:33:2d:
43:35:5a:19:51:8f:be:04:44:1c:c7:50:de:f9:dc:3a:93:9f:
84:37:36:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssX2Ek6tBj89ut0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
MDA4ODcwY2EtMmJkOS00NDZkLTlhZDUtNzYzYmI4OWQwOGU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbLuTqNGFi1aBycIx3vKyhRAA0sI74ehRjYt
IEI4OSNxoFLG41A0VjytuNa3XnQlp4vPOpBPXhN/Ckr3plBBx+mwq/4jGroo21c3
CMzeKWpsi/0fJwLx8cKK1vM4NMmJdUahbcl15V3wk+t+ulW1eE1EjydXcPjlI+B1
98ppme/yWjNnj74HA8ZW64CqjZw8Ftzhzao41hD7sQjirkxV0MrcMY0+upoMxgfq
yj24bYsdUCeH3aBWpycAPoBTZmzq+9pbvtzPvqR8UEEf9Dqv3Mrb7Yn9QW1g6eXn
+PUh88hieZAgtp9hsLTVWU9FTsFlN5vj+iWuUmekpwG4sRofGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAg3fs2iSLTF9xV+6p/CLoW6fBwCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2IyMTA2MmYtZDZmYS0z
NDgzLWIxMmEtYjU5ZDQ2ODQ0MDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8YAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHBJYfJrdH5BZj6DIkrgDdXzO9gK6cP7eVVB9XUxvk5Wz9bqb6mqShbh
7downpQuv5nRIl40FlZNmZr0UGqE+0TV7S0NN7K7XxMl3aSH8E7FOpBgtK9S4iJx
622esQXcWEYdhRhSBEYkSxpR0+9G2OHU0t1ulpK1vX67H6Q7uA6b6paLAl20snGc
hotcqrCcrRXpKN5/P+P016wVaml2zNh+PdJ2Mf+1siiwefr3wXuHpF7QSYtmh6C0
c5hSsROAja5tvXnuEovXupEkp8SmA2t+vjDEgvnPUeVGLFcxV/DTM5UXLmeFskcz
LUM1WhlRj74ERBzHUN753DqTn4Q3Nuk=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:24:26 2025 by rpki-client