Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08340f91-5c11-3164-9641-ece7f93755e1.roa
File: 08340f91-5c11-3164-9641-ece7f93755e1.roa (raw, json)
Hash identifier: wvK3eH3gC9AEvKBVXUvO1LGy9onIP2igDwV5NNTNvdo=
Subject key identifier: 2B:B8:F8:22:00:35:6F:72:54:36:F8:4E:9A:1E:82:02:22:EE:6E:3E
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584929E3CDA9F600ADC18879BF00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08340f91-5c11-3164-9641-ece7f93755e1.roa
Signing time: Wed 12 Mar 2025 13:00:53 +0000
ROA not before: Wed 12 Mar 2025 13:00:53 +0000
ROA not after: Tue 10 Jun 2025 13:00:53 +0000
asID: 9009
IP address blocks: 172.94.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:29:e3:cd:a9:f6:00:ad:c1:88:79:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 12 13:00:53 2025 GMT
Not After : Jun 10 13:00:53 2025 GMT
Subject: CN=f824aa25-0d9f-4848-a114-679a4c5b5ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:48:3a:14:07:ad:57:ee:b4:23:b2:60:d8:
fb:46:82:d5:f3:f2:54:2b:df:53:45:72:77:0e:a9:
1a:31:fd:51:86:eb:0e:4f:17:f8:1e:9b:56:0c:34:
5c:02:ea:c1:d5:10:36:1e:8d:f9:cf:a4:7c:2b:e2:
ab:13:48:b1:a2:76:00:4c:df:34:94:f6:d6:ac:4b:
99:46:81:17:02:59:e6:3a:22:22:1f:c9:51:37:98:
3d:d0:bf:e1:62:c9:cf:59:5f:1e:61:78:c2:b6:1a:
72:56:4e:b5:f2:8f:23:e6:e7:1b:d3:8e:f8:5c:fa:
25:99:5a:7a:36:b6:59:3f:50:8a:e9:f0:eb:92:04:
59:cc:20:3e:77:35:c9:5d:de:33:f7:e5:38:7b:51:
8b:1c:60:12:9c:90:f3:14:7e:27:7a:fa:91:c3:6a:
73:c8:84:ca:14:fc:b9:dc:c6:6e:b2:f3:42:b8:3d:
40:8f:00:e2:e5:7e:c5:e6:21:01:46:88:2d:16:c8:
ad:31:7b:05:aa:ca:be:c4:9d:b3:f0:e6:0a:aa:6b:
23:41:0d:44:4d:c4:d4:ba:16:41:7e:0f:24:aa:b6:
8b:6b:82:8e:76:9e:09:4c:08:99:87:93:7a:e9:01:
13:0b:ba:56:e5:9b:ec:5c:25:b6:7a:95:08:79:58:
de:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B8:F8:22:00:35:6F:72:54:36:F8:4E:9A:1E:82:02:22:EE:6E:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08340f91-5c11-3164-9641-ece7f93755e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:1a:33:18:c2:d6:77:b1:11:c7:10:dd:16:a3:4f:17:b4:c8:
91:cd:b8:60:24:3e:42:8f:89:3b:25:d2:a8:c9:63:86:33:98:
d4:4e:74:ae:3d:cc:15:a4:9d:37:5f:dd:eb:a3:d4:74:f6:c2:
93:73:56:7e:03:ab:0a:e8:5a:4a:da:53:04:fc:fa:b1:fd:9a:
4a:af:7e:fc:52:2f:13:bb:9b:12:28:90:d1:f3:9d:57:00:ac:
35:85:21:cf:76:34:bb:ea:ec:16:bb:dc:5d:ad:37:80:ba:10:
4d:21:99:94:1a:83:ac:72:bf:c1:20:f2:c7:58:e9:59:d8:ee:
78:81:fa:5f:52:af:a6:05:44:d1:ed:54:04:db:41:ce:67:f8:
a8:7d:51:37:04:11:4a:0f:59:a2:f6:46:23:46:46:49:89:26:
2f:86:3d:ff:8c:53:a5:fa:62:36:62:43:03:be:83:06:91:f7:
30:4c:53:60:db:9a:69:79:24:d4:80:6f:ae:3f:e1:94:d5:0a:
fd:61:c7:9a:46:a6:dc:d4:a5:b0:4b:fd:ba:29:d7:f3:3a:40:
b9:cf:18:96:cb:9a:64:19:9e:51:20:2b:ca:0a:b6:1a:75:4a:
66:a2:1f:5f:fb:21:fc:f2:fa:08:e6:a0:b6:4b:6a:07:06:62:
4d:b6:d1:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkp482p9gCtwYh5vwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk
ZjgyNGFhMjUtMGQ5Zi00ODQ4LWExMTQtNjc5YTRjNWI1Y2UzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiNIOhQHrVfutCOyYNj7RoLV8/JUK99TRXJ3
DqkaMf1RhusOTxf4HptWDDRcAurB1RA2Ho35z6R8K+KrE0ixonYATN80lPbWrEuZ
RoEXAlnmOiIiH8lRN5g90L/hYsnPWV8eYXjCthpyVk618o8j5ucb0474XPolmVp6
NrZZP1CK6fDrkgRZzCA+dzXJXd4z9+U4e1GLHGASnJDzFH4nevqRw2pzyITKFPy5
3MZusvNCuD1AjwDi5X7F5iEBRogtFsitMXsFqsq+xJ2z8OYKqmsjQQ1ETcTUuhZB
fg8kqraLa4KOdp4JTAiZh5N66QETC7pW5ZvsXCW2epUIeVjegQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCu4+CIANW9yVDb4TpoeggIi7m4+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDgzNDBmOTEtNWMxMS0z
MTY0LTk2NDEtZWNlN2Y5Mzc1NWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4mMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGoaMxjC1nexEccQ3RajTxe0yJHNuGAkPkKPiTsl0qjJY4YzmNROdK49
zBWknTdf3euj1HT2wpNzVn4DqwroWkraUwT8+rH9mkqvfvxSLxO7mxIokNHznVcA
rDWFIc92NLvq7Ba73F2tN4C6EE0hmZQag6xyv8Eg8sdY6VnY7niB+l9Sr6YFRNHt
VATbQc5n+Kh9UTcEEUoPWaL2RiNGRkmJJi+GPf+MU6X6YjZiQwO+gwaR9zBMU2Db
mml5JNSAb64/4ZTVCv1hx5pGptzUpbBL/bop1/M6QLnPGJbLmmQZnlEgK8oKthp1
SmaiH1/7Ifzy+gjmoLZLagcGYk220WU=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:43 2025 by rpki-client