Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0426ee1e-c925-39bb-b48e-4ca686717e3d.roa
File: 0426ee1e-c925-39bb-b48e-4ca686717e3d.roa (raw, json)
Hash identifier: R/REHtSSJj9nVq+xbC8RRx4j3NZM6iyt02vduhBv4FU=
Subject key identifier: 3C:C5:34:BD:96:F6:23:8C:11:EA:7E:12:C0:8B:D2:1C:3F:A0:1B:57
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F4328584957F3FCB2CF7DD6C11D4F85E0
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0426ee1e-c925-39bb-b48e-4ca686717e3d.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 62651
IP address blocks: 216.131.72.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f3:fc:b2:cf:7d:d6:c1:1d:4f:85:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=4237b240-5d78-439e-970e-5f5d70270b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d2:2c:13:ad:39:e7:a7:19:06:0b:c2:0b:7a:
8b:3a:4c:7c:b5:b0:cc:92:e7:be:9d:62:73:a6:22:
01:0b:b7:09:2f:fc:60:8b:a3:f9:7f:d6:11:54:b6:
82:62:d3:13:44:b3:59:66:41:68:a3:0a:42:fc:2e:
da:0c:28:95:79:67:5a:75:53:5c:83:8b:ac:d1:91:
41:d1:62:13:dd:bf:04:2d:41:1c:e2:5c:60:0e:dc:
73:e1:03:25:61:7e:f3:0d:f3:58:cc:84:1a:9f:d7:
7b:19:a6:52:91:98:8f:56:2b:f4:e5:75:62:e9:b6:
b4:ce:4b:2a:07:22:cd:bf:de:47:ec:01:d8:0b:76:
28:15:40:2d:64:91:89:49:c2:dd:7c:0d:9c:85:4b:
ef:fb:ef:9a:28:8c:4d:d1:6c:92:b2:dd:38:f7:e8:
43:c4:39:55:f9:79:d0:c1:f9:b8:14:06:ad:54:fd:
62:23:d5:b0:39:97:9d:67:a1:1c:3c:be:55:25:a2:
ea:15:7a:a8:bc:d7:a1:e6:5f:18:d7:54:58:9b:b6:
98:89:c3:0a:75:48:0c:1f:83:6d:87:75:e8:34:41:
12:16:61:f6:c5:ea:1e:08:8a:46:4a:22:56:46:0b:
77:6a:69:e1:90:d3:0c:c9:94:43:2c:09:6e:65:7f:
a5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C5:34:BD:96:F6:23:8C:11:EA:7E:12:C0:8B:D2:1C:3F:A0:1B:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0426ee1e-c925-39bb-b48e-4ca686717e3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv4:
216.131.72.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:b0:cf:ae:8f:ba:14:ad:dd:36:0a:4b:1a:28:fc:7c:77:aa:
f9:52:d0:ce:b0:46:23:66:23:37:80:e4:a4:56:21:74:2f:45:
e0:13:a8:c5:8f:45:a1:3b:45:9b:d6:a8:e4:38:52:fa:eb:e6:
51:1a:34:12:f9:ca:ff:19:f5:bc:b4:dc:f6:87:b3:89:47:41:
e1:42:c1:66:c5:6d:da:e1:4c:f0:e0:b1:51:2c:c0:74:71:2e:
cf:59:af:8e:82:ec:72:e7:8e:94:92:ed:76:46:26:73:fa:7f:
8c:91:cb:81:97:19:19:23:51:25:61:d0:6d:f9:a7:1c:d8:41:
0e:4c:0d:07:89:c9:6f:76:b0:e8:cd:52:78:f1:fe:4f:50:27:
39:72:98:2a:11:82:39:1b:e8:2f:4e:f6:d2:1c:82:8c:08:9f:
86:c4:b3:8d:fe:99:31:66:e2:e0:58:7c:47:8b:01:6a:f3:a8:
bd:c3:4b:c1:f4:28:4b:ea:f4:d3:89:02:51:b5:de:d5:e3:82:
8b:7e:9c:a5:0a:de:c5:e6:48:b6:92:6f:c2:84:7a:e2:ec:41:
0b:1e:3c:78:20:d6:75:8b:40:40:80:6b:79:af:2f:fd:9f:eb:
a9:ba:02:34:4f:43:71:a3:76:6e:22:43:3f:fb:13:55:97:c3:
9c:4b:d3:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX8/yyz33WwR1PheAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk
NDIzN2IyNDAtNWQ3OC00MzllLTk3MGUtNWY1ZDcwMjcwYjU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9tIsE60556cZBgvCC3qLOkx8tbDMkue+nWJz
piIBC7cJL/xgi6P5f9YRVLaCYtMTRLNZZkFoowpC/C7aDCiVeWdadVNcg4us0ZFB
0WIT3b8ELUEc4lxgDtxz4QMlYX7zDfNYzIQan9d7GaZSkZiPViv05XVi6ba0zksq
ByLNv95H7AHYC3YoFUAtZJGJScLdfA2chUvv+++aKIxN0WySst049+hDxDlV+XnQ
wfm4FAatVP1iI9WwOZedZ6EcPL5VJaLqFXqovNeh5l8Y11RYm7aYicMKdUgMH4Nt
h3XoNEESFmH2xeoeCIpGSiJWRgt3amnhkNMMyZRDLAluZX+lcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDzFNL2W9iOMEep+EsCL0hw/oBtXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMDQyNmVlMWUtYzkyNS0z
OWJiLWI0OGUtNGNhNjg2NzE3ZTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2INIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHewz66PuhSt3TYKSxoo/Hx3qvlS0M6wRiNmIzeA5KRWIXQvReATqMWP
RaE7RZvWqOQ4Uvrr5lEaNBL5yv8Z9by03PaHs4lHQeFCwWbFbdrhTPDgsVEswHRx
Ls9Zr46C7HLnjpSS7XZGJnP6f4yRy4GXGRkjUSVh0G35pxzYQQ5MDQeJyW92sOjN
Unjx/k9QJzlymCoRgjkb6C9O9tIcgowIn4bEs43+mTFm4uBYfEeLAWrzqL3DS8H0
KEvq9NOJAlG13tXjgot+nKUK3sXmSLaSb8KEeuLsQQsePHgg1nWLQECAa3mvL/2f
66m6AjRPQ3Gjdm4iQz/7E1WXw5xL0wo=
-----END CERTIFICATE-----
Generated at Fri Apr 11 05:39:33 2025 by rpki-client