Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/a468cae4-4d9c-382f-8572-d90d29d27e8c.roa
File: a468cae4-4d9c-382f-8572-d90d29d27e8c.roa (raw, json)
Hash identifier: FBAI5gg7g0cWLSl9j2YkMjPmyLaoHbkvrmjAqpCwlt0=
Subject key identifier: 2D:DC:67:38:05:C8:97:C7:CB:78:4E:0F:61:CE:23:99:1A:60:DA:72
Certificate issuer: /CN=6c0836c5-0c38-41a2-917d-c9df009f1a31
Certificate serial: 010D0C9F4328584950F96E313C7C5A7881928520
Authority key identifier: 8E:80:0D:8E:4D:40:B5:8B:65:6F:70:EE:C6:05:6F:BB:47:39:00:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/a468cae4-4d9c-382f-8572-d90d29d27e8c.roa
Signing time: Wed 26 Mar 2025 13:00:53 +0000
ROA not before: Wed 26 Mar 2025 13:00:53 +0000
ROA not after: Tue 24 Jun 2025 13:00:53 +0000
asID: 26277
IP address blocks: 64.235.41.0/24 maxlen: 24
64.235.43.0/24 maxlen: 24
64.235.45.0/24 maxlen: 24
64.235.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:50:f9:6e:31:3c:7c:5a:78:81:92:85:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c0836c5-0c38-41a2-917d-c9df009f1a31
Validity
Not Before: Mar 26 13:00:53 2025 GMT
Not After : Jun 24 13:00:53 2025 GMT
Subject: CN=35ee59fc-0179-470e-ad2d-8a7a63b81139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:19:c9:74:a1:22:e7:57:69:4f:d5:2e:95:16:
3f:28:17:cf:a4:44:1b:cb:f8:37:9a:b5:02:05:36:
a7:af:2b:74:a2:41:fc:85:5e:04:b4:b7:c4:3d:10:
38:5f:bc:23:79:f7:21:85:36:8b:ab:f9:77:02:ed:
ff:ba:fb:15:85:e4:98:d3:82:d0:73:ca:2d:a5:cf:
c6:89:4b:e1:7e:14:04:c9:95:93:19:c3:dd:06:92:
a7:d1:a6:58:52:94:86:e5:d1:a2:ed:d8:d1:59:97:
5b:f2:54:6f:10:74:f3:9b:26:7c:fe:3a:c6:77:fc:
b1:b8:14:1f:31:2e:94:6f:90:8d:be:72:e9:81:91:
7d:37:75:f8:22:b0:6f:97:ed:72:cd:e9:de:32:3f:
4b:23:50:d8:a0:c5:59:8e:73:12:98:70:df:5f:92:
99:33:46:46:83:b9:1a:07:f6:14:6c:2e:95:37:d3:
ff:0a:e6:d9:e9:a7:66:14:7e:0b:f2:b1:16:26:e7:
b4:de:a0:3e:47:85:ae:d9:d3:13:68:80:e8:c9:81:
59:7c:17:e6:b9:4a:c2:30:e8:64:4f:0f:f7:21:2f:
37:e6:da:61:fc:8b:62:c8:a1:9e:66:20:7f:c2:85:
cc:95:f0:dc:87:25:b4:18:2f:27:ab:30:09:63:b0:
be:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DC:67:38:05:C8:97:C7:CB:78:4E:0F:61:CE:23:99:1A:60:DA:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/a468cae4-4d9c-382f-8572-d90d29d27e8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/6c0836c5-0c38-41a2-917d-c9df009f1a31.crl
X509v3 Authority Key Identifier:
keyid:8E:80:0D:8E:4D:40:B5:8B:65:6F:70:EE:C6:05:6F:BB:47:39:00:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31.cer
sbgp-ipAddrBlock: critical
IPv4:
64.235.41.0/24
64.235.43.0/24
64.235.45.0/24
64.235.61.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:bb:27:37:d5:a8:2c:36:a0:37:56:b4:cb:09:c1:63:a0:3e:
18:b1:85:d8:71:aa:8a:9d:00:2b:aa:a2:3a:ec:63:87:d5:95:
c6:f4:23:25:57:42:bb:04:43:9b:6e:1b:b7:6e:19:4f:21:7a:
c7:6c:bd:49:0b:c8:67:9e:8a:57:04:90:cf:20:df:df:7e:01:
42:ba:81:02:b7:28:87:89:04:ba:18:b1:20:78:90:5c:b2:47:
b1:b6:93:a1:96:b0:8c:42:5c:e0:ba:61:4c:f4:70:dd:d8:8e:
d0:2a:96:62:15:dd:a4:fb:51:7e:6c:ff:36:d5:1b:2a:13:da:
2a:d0:1a:13:bf:42:a9:1c:3b:9e:dc:ce:6e:d4:05:1b:12:95:
ad:35:38:e3:d0:82:b0:7f:41:22:4e:11:5d:57:5c:82:20:05:
f1:9a:60:1c:82:b7:bf:70:b2:83:a2:74:32:0e:3d:f4:32:82:
e3:29:d2:2b:1f:5f:df:08:06:ed:a0:5f:7d:77:96:b2:ce:6f:
fc:c9:ed:15:52:da:ab:e6:d9:2f:a9:86:05:56:7c:db:46:48:
59:2d:7b:32:8c:d2:4a:52:bb:8b:13:e5:46:84:e3:a0:d4:1d:
a6:ab:1f:c1:d3:07:82:14:1e:08:87:87:6f:35:2e:ee:b6:8d:
00:2a:26:e5
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWElQ+W4xPHxaeIGShSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmMwODM2YzUtMGMzOC00MWEyLTkxN2QtYzlkZjAwOWYx
YTMxMB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk
MzVlZTU5ZmMtMDE3OS00NzBlLWFkMmQtOGE3YTYzYjgxMTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBnJdKEi51dpT9UulRY/KBfPpEQby/g3mrUC
BTanryt0okH8hV4EtLfEPRA4X7wjefchhTaLq/l3Au3/uvsVheSY04LQc8otpc/G
iUvhfhQEyZWTGcPdBpKn0aZYUpSG5dGi7djRWZdb8lRvEHTzmyZ8/jrGd/yxuBQf
MS6Ub5CNvnLpgZF9N3X4IrBvl+1yzeneMj9LI1DYoMVZjnMSmHDfX5KZM0ZGg7ka
B/YUbC6VN9P/CubZ6admFH4L8rEWJue03qA+R4Wu2dMTaIDoyYFZfBfmuUrCMOhk
Tw/3IS835tph/ItiyKGeZiB/woXMlfDchyW0GC8nqzAJY7C+bwIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFC3cZzgFyJfHy3hOD2HOI5kaYNpyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82YzA4
MzZjNS0wYzM4LTQxYTItOTE3ZC1jOWRmMDA5ZjFhMzEvYTQ2OGNhZTQtNGQ5Yy0z
ODJmLTg1NzItZDkwZDI5ZDI3ZThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmMwODM2YzUtMGMzOC00MWEyLTkx
N2QtYzlkZjAwOWYxYTMxLzZjMDgzNmM1LTBjMzgtNDFhMi05MTdkLWM5ZGYwMDlm
MWEzMS5jcmwwHwYDVR0jBBgwFoAUjoANjk1AtYtlb3DuxgVvu0c5AJowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82YzA4MzZjNS0wYzM4LTQxYTItOTE3ZC1jOWRm
MDA5ZjFhMzEuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAQOspAwQA
QOsrAwQAQOstAwQAQOs9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEi7JzfVqCw2oDdWtMsJwWOgPhixhdhx
qoqdACuqojrsY4fVlcb0IyVXQrsEQ5tuG7duGU8hesdsvUkLyGeeilcEkM8g399+
AUK6gQK3KIeJBLoYsSB4kFyyR7G2k6GWsIxCXOC6YUz0cN3YjtAqlmIV3aT7UX5s
/zbVGyoT2irQGhO/QqkcO57czm7UBRsSla01OOPQgrB/QSJOEV1XXIIgBfGaYByC
t79wsoOidDIOPfQyguMp0isfX98IBu2gX313lrLOb/zJ7RVS2qvm2S+phgVWfNtG
SFktezKM0kpSu4sT5UaE46DUHaarH8HTB4IUHgiHh281Lu62jQAqJuU=
-----END CERTIFICATE-----
Generated at Fri Apr 4 15:56:41 2025 by rpki-client