Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/10e52542-640a-3f87-b65b-eb5f1cca66a1.roa
File: 10e52542-640a-3f87-b65b-eb5f1cca66a1.roa (raw, json)
Hash identifier: ufkMJ+g+H0W0F+cM2PnlW6VJVOm+TJxpr7UnYOOAqCE=
Subject key identifier: 15:81:17:50:20:26:72:78:0B:FE:C5:70:42:CE:77:50:57:6B:4D:95
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848B1BA3AFF56CE4DB72C6CEF80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/10e52542-640a-3f87-b65b-eb5f1cca66a1.roa
Signing time: Tue 28 Jan 2025 12:00:12 +0000
ROA not before: Tue 28 Jan 2025 12:00:12 +0000
ROA not after: Mon 28 Apr 2025 11:00:12 +0000
asID: 208485
IP address blocks: 172.94.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:ba:3a:ff:56:ce:4d:b7:2c:6c:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 28 12:00:12 2025 GMT
Not After : Apr 28 11:00:12 2025 GMT
Subject: CN=6837e8e1-dbb7-465b-86e1-71d6e15c78c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0c:6d:1d:ca:08:01:16:92:1d:2e:79:62:62:
f8:5a:f4:9c:da:88:3f:1c:00:d6:61:2d:6b:8c:86:
a3:d2:01:f7:e3:b1:98:1d:93:0f:50:68:97:ed:83:
63:19:bd:f4:ae:ce:8e:fe:0f:ac:5e:d1:04:48:17:
36:2e:63:80:4e:a9:33:52:a5:1b:3c:b3:36:0b:3a:
76:63:e7:44:71:b6:df:da:16:5b:cc:0d:f3:5f:cf:
83:87:05:73:c1:b8:05:20:f1:22:05:5f:58:cf:4f:
24:02:a8:a4:bc:9c:1b:5f:69:74:ef:89:eb:36:9f:
18:e6:01:69:05:94:08:a1:f8:9d:45:d8:63:c8:22:
b1:1a:cc:3b:ee:18:f1:8f:07:31:f1:75:ad:45:e6:
1e:5a:c2:af:dc:80:77:82:e2:0e:25:e7:b0:4d:5b:
ed:1a:df:73:cf:ee:5c:96:e4:ec:88:96:45:b8:48:
7a:40:3f:c0:77:f3:bc:8a:95:e1:b2:54:03:a5:82:
b8:6e:0a:22:ae:83:e1:77:f1:cd:38:61:aa:27:e8:
73:23:b8:31:db:b9:56:3d:4a:f8:d5:fd:34:5c:64:
06:e1:8c:a8:04:18:67:4f:d1:2a:1a:96:5d:e5:57:
f2:f8:bd:58:5f:54:4f:be:23:4e:80:25:4f:1f:ee:
5d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:81:17:50:20:26:72:78:0B:FE:C5:70:42:CE:77:50:57:6B:4D:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/10e52542-640a-3f87-b65b-eb5f1cca66a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:d7:9c:2b:3f:69:68:97:5c:89:b6:30:d5:b0:90:98:5d:d4:
2d:08:7f:1d:b3:0c:0f:f7:7b:ce:33:86:68:2e:c6:f9:3e:ec:
99:26:d8:6e:79:ff:13:d8:4d:80:aa:97:4f:13:23:b1:8f:24:
d0:e9:0f:bc:bc:66:91:91:94:db:3f:e4:90:04:2d:91:08:8e:
c6:72:0c:51:3b:52:84:a2:07:ea:88:c4:6f:43:fa:7d:0b:71:
cd:e8:35:3c:ab:60:9e:16:37:7c:2f:68:97:51:04:e7:c0:aa:
12:8c:74:08:61:68:a5:13:57:10:22:77:dd:1d:be:30:b8:d3:
64:48:a4:90:64:49:d9:1f:9d:fd:2e:2a:d8:b0:e0:b0:a1:56:
36:c1:bf:82:7d:72:fe:82:a7:a9:11:4c:21:f3:f8:13:ca:21:
92:15:4d:48:b2:71:50:cc:9e:68:13:8c:e1:77:1c:8f:ad:81:
e8:96:54:7e:ff:c0:88:0d:da:3f:dc:b0:ca:7b:44:3d:f7:fa:
8b:64:d4:16:ce:eb:90:b7:41:4a:57:75:9e:8d:58:96:fe:b5:
31:cc:2c:01:cc:d3:26:0f:a9:71:c2:6f:28:0c:26:04:a0:49:
17:7e:a3:31:fd:de:ec:a8:83:c6:df:4f:40:53:2b:83:ec:c6:
65:38:6d:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEixujr/Vs5Ntyxs74AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDEyODEyMDAxMloXDTI1MDQyODExMDAxMlowLzEtMCsGA1UEAxMk
NjgzN2U4ZTEtZGJiNy00NjViLTg2ZTEtNzFkNmUxNWM3OGMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwxtHcoIARaSHS55YmL4WvSc2og/HADWYS1r
jIaj0gH347GYHZMPUGiX7YNjGb30rs6O/g+sXtEESBc2LmOATqkzUqUbPLM2Czp2
Y+dEcbbf2hZbzA3zX8+DhwVzwbgFIPEiBV9Yz08kAqikvJwbX2l074nrNp8Y5gFp
BZQIofidRdhjyCKxGsw77hjxjwcx8XWtReYeWsKv3IB3guIOJeewTVvtGt9zz+5c
luTsiJZFuEh6QD/Ad/O8ipXhslQDpYK4bgoiroPhd/HNOGGqJ+hzI7gx27lWPUr4
1f00XGQG4YyoBBhnT9EqGpZd5Vfy+L1YX1RPviNOgCVPH+5ddwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBWBF1AgJnJ4C/7FcELOd1BXa02VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTBlNTI1NDItNjQwYS0z
Zjg3LWI2NWItZWI1ZjFjY2E2NmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF53MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACvXnCs/aWiXXIm2MNWwkJhd1C0Ifx2zDA/3e84zhmguxvk+7Jkm2G55
/xPYTYCql08TI7GPJNDpD7y8ZpGRlNs/5JAELZEIjsZyDFE7UoSiB+qIxG9D+n0L
cc3oNTyrYJ4WN3wvaJdRBOfAqhKMdAhhaKUTVxAid90dvjC402RIpJBkSdkfnf0u
Ktiw4LChVjbBv4J9cv6Cp6kRTCHz+BPKIZIVTUiycVDMnmgTjOF3HI+tgeiWVH7/
wIgN2j/csMp7RD33+otk1BbO65C3QUpXdZ6NWJb+tTHMLAHM0yYPqXHCbygMJgSg
SRd+ozH93uyog8bfT0BTK4PsxmU4bd0=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:23 2025 by rpki-client