Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5612fc31-f950-45ed-88e4-c18bd8b0d916/81ff7325-f97f-3d2d-b0f3-8b40ac775bec.roa
File: 81ff7325-f97f-3d2d-b0f3-8b40ac775bec.roa (raw, json)
Hash identifier: 1V1ikCySAu9X9LK76vEND/vXEv+gtCWSBP75d282qMs=
Subject key identifier: 47:1D:4D:EB:87:32:3F:8A:5A:0B:1E:F5:F1:B5:A5:F3:E2:C4:8C:07
Certificate issuer: /CN=5612fc31-f950-45ed-88e4-c18bd8b0d916
Certificate serial: 010D0C9F4328584953C4196ABD96BCA73DAA2300
Authority key identifier: 32:05:A7:8D:81:AE:52:08:38:44:66:F2:B3:6C:D4:6F:7E:AA:50:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5612fc31-f950-45ed-88e4-c18bd8b0d916.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5612fc31-f950-45ed-88e4-c18bd8b0d916/81ff7325-f97f-3d2d-b0f3-8b40ac775bec.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 36861
IP address blocks: 204.58.156.0/22 maxlen: 24
204.58.160.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:19:6a:bd:96:bc:a7:3d:aa:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5612fc31-f950-45ed-88e4-c18bd8b0d916
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=746aaa67-aa7b-48ed-b3a4-a04b7c2bc6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e9:dc:49:63:df:ac:20:e9:f7:2c:eb:00:b9:
22:80:66:a8:a4:ca:82:2a:87:e2:16:6b:b7:c1:44:
3e:4e:e0:73:2c:9f:3f:b1:13:7a:b7:d2:86:c5:a6:
5f:16:87:26:74:da:85:e3:c4:a0:eb:02:e5:b0:bf:
cb:8b:58:fc:81:b1:ea:7b:1c:8e:92:06:ad:db:76:
72:e3:05:90:b0:0b:d0:09:45:65:97:db:41:6f:d0:
7e:3a:df:2c:ad:81:3e:1f:67:e5:7b:e7:8f:15:a4:
69:da:0e:ef:ef:b3:ba:a1:a5:1b:27:ad:75:77:e6:
4d:aa:50:c2:9b:1b:92:16:3b:26:1e:58:98:18:94:
13:91:61:a6:c4:1d:c1:06:f2:27:d4:94:42:8c:c8:
73:7a:fa:78:1c:bb:de:c0:b6:f2:08:ef:74:d7:79:
c5:aa:3a:d2:ff:b8:ad:35:b1:6b:d7:50:e6:6b:44:
59:e0:37:08:2e:30:7a:ce:ff:90:a5:8d:61:f4:09:
99:c8:e8:92:b1:f1:48:90:20:65:33:eb:f6:5f:57:
dd:33:09:0c:a1:30:01:f0:9a:4f:23:11:48:d4:10:
a5:83:2c:f6:81:f8:d1:a1:60:99:18:c1:6e:ca:5c:
ce:18:23:b3:f0:9f:61:e2:09:a2:01:34:a9:89:9e:
62:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1D:4D:EB:87:32:3F:8A:5A:0B:1E:F5:F1:B5:A5:F3:E2:C4:8C:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5612fc31-f950-45ed-88e4-c18bd8b0d916/81ff7325-f97f-3d2d-b0f3-8b40ac775bec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5612fc31-f950-45ed-88e4-c18bd8b0d916/5612fc31-f950-45ed-88e4-c18bd8b0d916.crl
X509v3 Authority Key Identifier:
keyid:32:05:A7:8D:81:AE:52:08:38:44:66:F2:B3:6C:D4:6F:7E:AA:50:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5612fc31-f950-45ed-88e4-c18bd8b0d916.cer
sbgp-ipAddrBlock: critical
IPv4:
204.58.156.0-204.58.167.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:3a:d2:67:15:3c:fa:ef:81:a4:a0:06:08:26:64:b7:a5:24:
54:85:fd:35:1b:4c:44:ab:c7:bc:1a:bd:7c:5d:79:2a:4f:b0:
89:3e:cf:de:94:7f:f5:79:e1:f2:e2:b6:c2:d6:00:a4:7b:5e:
dc:7c:b8:ce:0b:2c:61:d6:d2:c6:66:a6:04:f7:40:7a:62:48:
34:d5:2d:8c:b2:4b:54:0e:99:9a:8a:f9:15:66:ff:a6:18:14:
16:eb:4c:76:44:59:31:dc:5f:d2:b5:bf:c3:7f:37:e1:d4:67:
fc:bd:b6:9e:e7:2d:60:64:b9:00:a0:b4:d2:2a:f2:da:30:3d:
09:40:ff:1b:59:7b:ad:09:99:d4:5b:cf:5b:29:60:da:5a:4d:
40:3d:cc:fb:52:9c:54:2f:d2:5b:d1:5a:93:5e:0f:30:09:a7:
da:00:14:c0:b4:ce:98:99:1a:2f:ec:3b:c3:e4:44:50:4b:bb:
f4:45:3d:22:6c:9f:bf:af:b4:92:23:f1:8a:3c:17:ba:45:2a:
0f:0e:1c:3f:1b:42:82:2d:df:11:33:6a:17:8f:26:ed:ee:d1:
bd:03:0b:0a:1e:5b:7f:e4:57:ac:ef:ad:d0:12:38:35:a0:98:
ac:87:62:fc:bb:20:67:fe:63:de:a9:03:19:91:b2:43:ea:b2:
85:b3:27:05
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWElTxBlqvZa8pz2qIwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTYxMmZjMzEtZjk1MC00NWVkLTg4ZTQtYzE4YmQ4YjBk
OTE2MB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
NzQ2YWFhNjctYWE3Yi00OGVkLWIzYTQtYTA0YjdjMmJjNmNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+ncSWPfrCDp9yzrALkigGaopMqCKofiFmu3
wUQ+TuBzLJ8/sRN6t9KGxaZfFocmdNqF48Sg6wLlsL/Li1j8gbHqexyOkgat23Zy
4wWQsAvQCUVll9tBb9B+Ot8srYE+H2fle+ePFaRp2g7v77O6oaUbJ611d+ZNqlDC
mxuSFjsmHliYGJQTkWGmxB3BBvIn1JRCjMhzevp4HLvewLbyCO9013nFqjrS/7it
NbFr11Dma0RZ4DcILjB6zv+QpY1h9AmZyOiSsfFIkCBlM+v2X1fdMwkMoTAB8JpP
IxFI1BClgyz2gfjRoWCZGMFuylzOGCOz8J9h4gmiATSpiZ5ivQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFEcdTeuHMj+KWgse9fG1pfPixIwHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81NjEy
ZmMzMS1mOTUwLTQ1ZWQtODhlNC1jMThiZDhiMGQ5MTYvODFmZjczMjUtZjk3Zi0z
ZDJkLWIwZjMtOGI0MGFjNzc1YmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTYxMmZjMzEtZjk1MC00NWVkLTg4
ZTQtYzE4YmQ4YjBkOTE2LzU2MTJmYzMxLWY5NTAtNDVlZC04OGU0LWMxOGJkOGIw
ZDkxNi5jcmwwHwYDVR0jBBgwFoAUMgWnjYGuUgg4RGbys2zUb36qUMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC81NjEyZmMzMS1mOTUwLTQ1ZWQtODhlNC1jMThi
ZDhiMGQ5MTYuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALMOpwD
BAPMOqAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAUzrSZxU8+u+BpKAGCCZkt6UkVIX9NRtMRKvHvBq9fF15
Kk+wiT7P3pR/9Xnh8uK2wtYApHte3Hy4zgssYdbSxmamBPdAemJINNUtjLJLVA6Z
mor5FWb/phgUFutMdkRZMdxf0rW/w3834dRn/L22nuctYGS5AKC00iry2jA9CUD/
G1l7rQmZ1FvPWylg2lpNQD3M+1KcVC/SW9Fak14PMAmn2gAUwLTOmJkaL+w7w+RE
UEu79EU9Imyfv6+0kiPxijwXukUqDw4cPxtCgi3fETNqF48m7e7RvQMLCh5bf+RX
rO+t0BI4NaCYrIdi/LsgZ/5j3qkDGZGyQ+qyhbMnBQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:22:22 2025 by rpki-client