Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/67aa11e0-08b1-3729-8732-afed74543a62.roa
File: 67aa11e0-08b1-3729-8732-afed74543a62.roa (raw, json)
Hash identifier: wpIna7fGJrzKaSNl/ayHMhtvNf6KS/xpyYcsIlK5b2w=
Subject key identifier: 90:39:16:1C:18:44:FC:E5:CE:12:BA:C0:F9:28:F7:E5:1E:98:10:E6
Certificate issuer: /CN=1a8794d9-eb16-4b3c-b869-96971b72a93b
Certificate serial: 010D0C9F432858492CB20DACA429E90F91977B40
Authority key identifier: 58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/67aa11e0-08b1-3729-8732-afed74543a62.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 27217
IP address blocks: 52.119.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b2:0d:ac:a4:29:e9:0f:91:97:7b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a8794d9-eb16-4b3c-b869-96971b72a93b
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=b1cf34b7-d387-4485-9bc6-a8a575240282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:9e:a2:76:26:4f:fa:7d:f1:93:f0:41:92:
3b:cf:4e:68:66:e6:8a:06:36:0a:03:7f:3d:e0:d9:
35:9c:78:c3:73:02:a5:4b:14:65:4f:ab:73:c9:03:
16:fe:4e:86:7c:05:37:9f:cc:78:2a:08:1a:40:74:
d8:db:0e:3c:d2:28:00:4d:c7:69:56:43:39:f8:68:
70:9a:a0:de:09:33:24:64:c4:02:99:cb:88:56:d3:
52:b3:61:45:94:b6:4b:a5:19:df:ba:dd:43:f0:33:
6f:05:73:38:d3:cc:7a:c7:1c:29:1a:98:80:c6:f5:
a9:4f:13:9d:e8:3e:a2:67:31:12:87:28:72:05:85:
5a:15:06:e9:d1:f7:b3:35:ef:2e:e8:39:52:c5:98:
b2:a8:fd:fa:8b:e5:cc:ab:d2:17:43:f2:00:17:39:
6c:32:ca:8c:85:89:0f:01:62:97:75:66:0e:4d:40:
7d:4e:d4:db:87:cb:c6:1a:78:90:a2:b0:5e:8a:85:
51:e8:b9:a2:2a:76:24:7d:75:fa:fb:d7:c5:79:01:
e6:75:40:cd:24:75:37:f0:d3:8d:56:45:7c:fe:1e:
bb:62:3f:ac:fb:e1:ad:3e:ce:0c:89:d5:c3:06:a9:
c9:dc:34:32:1a:1b:30:d5:5d:8a:fd:b0:b3:83:ee:
97:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:39:16:1C:18:44:FC:E5:CE:12:BA:C0:F9:28:F7:E5:1E:98:10:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/67aa11e0-08b1-3729-8732-afed74543a62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl
X509v3 Authority Key Identifier:
keyid:58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer
sbgp-ipAddrBlock: critical
IPv4:
52.119.10.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:e7:aa:3d:21:8e:28:d3:74:bc:c1:ef:5a:05:4c:ef:94:5e:
51:b1:0b:06:94:d9:68:59:dd:ca:35:31:6f:d8:55:c3:24:59:
ed:25:14:83:cc:13:1c:60:b5:ff:df:c4:77:ab:fd:1f:f6:26:
b1:aa:29:2a:05:79:ba:46:bb:17:74:ff:f9:a3:0e:63:39:8f:
96:91:7b:e6:4b:74:f2:9f:50:60:e1:e7:32:6f:d9:71:93:bd:
c2:18:b4:4e:4a:cd:93:f5:1a:a5:57:4e:0d:f8:b8:52:c0:3b:
66:02:73:b1:9d:6a:74:61:f1:04:46:65:f6:c9:1d:ae:d6:8c:
ec:e4:5c:ff:64:8d:df:cb:bb:4a:ec:d4:13:5d:62:d5:33:72:
71:46:d5:aa:7a:62:4f:18:e6:60:b7:6a:4b:1d:b9:1b:ec:c1:
8b:9c:9c:5d:1e:da:f9:61:36:5d:c0:19:9f:38:ae:f6:0b:af:
2f:c9:c6:d3:0a:81:2f:73:bf:b9:f4:33:93:ad:43:f8:06:23:
e4:5c:53:bc:a0:c5:b1:46:13:9e:da:a8:45:62:9c:a3:1e:47:
4f:1f:bc:32:16:45:a0:1f:c7:f6:41:8f:cf:d6:b2:22:56:93:
93:4e:f2:44:a0:03:c9:ea:af:ba:46:fb:2c:b8:1e:14:7a:ac:
36:20:38:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssg2spCnpD5GXe0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWE4Nzk0ZDktZWIxNi00YjNjLWI4NjktOTY5NzFiNzJh
OTNiMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
YjFjZjM0YjctZDM4Ny00NDg1LTliYzYtYThhNTc1MjQwMjgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa2eonYmT/p98ZPwQZI7z05oZuaKBjYKA389
4Nk1nHjDcwKlSxRlT6tzyQMW/k6GfAU3n8x4KggaQHTY2w480igATcdpVkM5+Ghw
mqDeCTMkZMQCmcuIVtNSs2FFlLZLpRnfut1D8DNvBXM408x6xxwpGpiAxvWpTxOd
6D6iZzEShyhyBYVaFQbp0fezNe8u6DlSxZiyqP36i+XMq9IXQ/IAFzlsMsqMhYkP
AWKXdWYOTUB9TtTbh8vGGniQorBeioVR6LmiKnYkfXX6+9fFeQHmdUDNJHU38NON
VkV8/h67Yj+s++GtPs4MidXDBqnJ3DQyGhsw1V2K/bCzg+6XLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJA5FhwYRPzlzhK6wPko9+UemBDmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3
OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3MWI3MmE5M2IvNjdhYTExZTAtMDhiMS0z
NzI5LTg3MzItYWZlZDc0NTQzYTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWE4Nzk0ZDktZWIxNi00YjNjLWI4
NjktOTY5NzFiNzJhOTNiLzFhODc5NGQ5LWViMTYtNGIzYy1iODY5LTk2OTcxYjcy
YTkzYi5jcmwwHwYDVR0jBBgwFoAUWGSrqLbG9Ghvh86IX/GHzHvf2y0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3
MWI3MmE5M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHcKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADHnqj0hjijTdLzB71oFTO+UXlGxCwaU2WhZ3co1MW/YVcMkWe0lFIPM
Exxgtf/fxHer/R/2JrGqKSoFebpGuxd0//mjDmM5j5aRe+ZLdPKfUGDh5zJv2XGT
vcIYtE5KzZP1GqVXTg34uFLAO2YCc7GdanRh8QRGZfbJHa7WjOzkXP9kjd/Lu0rs
1BNdYtUzcnFG1ap6Yk8Y5mC3aksduRvswYucnF0e2vlhNl3AGZ84rvYLry/JxtMK
gS9zv7n0M5OtQ/gGI+RcU7ygxbFGE57aqEVinKMeR08fvDIWRaAfx/ZBj8/WsiJW
k5NO8kSgA8nqr7pG+yy4HhR6rDYgOGU=
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:07:34 2025 by rpki-client