Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e60a71e6-925c-38fb-895d-6c6bc9931cf4.roa
File: e60a71e6-925c-38fb-895d-6c6bc9931cf4.roa (raw, json)
Hash identifier: snf+VHynSyvrHh0T7EBmK+67GfUdc1Q4VR1/3gioT1c=
Subject key identifier: D7:75:AD:4C:DE:9F:4C:BC:FB:5F:BE:10:3E:B3:F8:F4:7F:1D:DC:E5
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848AECCF4AB04C0CE5159480D00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e60a71e6-925c-38fb-895d-6c6bc9931cf4.roa
Signing time: Mon 27 Jan 2025 10:50:30 +0000
ROA not before: Mon 27 Jan 2025 10:50:30 +0000
ROA not after: Sun 27 Apr 2025 09:50:30 +0000
asID: 208485
IP address blocks: 172.94.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ae:cc:f4:ab:04:c0:ce:51:59:48:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 27 10:50:30 2025 GMT
Not After : Apr 27 09:50:30 2025 GMT
Subject: CN=192bd6f4-a6bf-4d88-9c6b-c569a9134717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ed:cd:1b:9a:49:0c:2a:85:11:da:f4:8f:8c:
13:21:e3:90:66:e3:7d:74:6b:0c:a0:1b:a4:d5:6a:
17:50:ed:a0:24:e6:86:de:72:a5:d8:7d:69:6e:c2:
98:35:fe:d4:32:58:9d:e5:27:0d:82:c9:a3:6b:3d:
ac:7d:7e:65:32:04:0d:fb:df:03:95:16:d4:88:42:
8b:81:f2:fc:66:44:94:d5:7a:4e:c1:0b:23:06:2f:
7b:b4:a3:13:a9:5a:23:87:43:1c:29:61:fe:80:48:
b9:72:a5:6d:ec:20:64:12:46:9c:4a:4d:ac:6d:2b:
c3:da:09:86:54:76:55:b5:8a:8c:c9:4d:50:ad:29:
b5:f5:f9:e9:da:a1:79:42:ab:d4:5b:91:27:99:d7:
97:7d:2d:30:f9:c8:e9:43:ec:58:f3:05:c5:97:8c:
d6:ff:b6:c6:13:e4:b4:09:e3:32:c7:48:7d:8c:df:
93:e1:ab:e5:11:5d:98:c7:33:bc:ae:a3:00:ac:db:
4b:94:f4:ad:b7:1a:f6:7a:a5:a3:23:62:c6:36:d5:
aa:c2:fa:f0:d0:22:2a:a4:2a:80:32:10:79:e2:75:
eb:39:7b:f2:63:7f:a2:f3:43:04:ce:ea:4c:f3:58:
81:d1:2c:b1:a1:d7:92:5c:a2:83:f1:fa:f4:8a:7e:
bc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:75:AD:4C:DE:9F:4C:BC:FB:5F:BE:10:3E:B3:F8:F4:7F:1D:DC:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e60a71e6-925c-38fb-895d-6c6bc9931cf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:63:8f:24:1a:f5:8b:28:8b:4b:0c:82:f6:d8:f8:49:4a:27:
ed:9a:5c:95:15:58:08:2b:8b:79:51:5e:e3:8e:cf:34:ba:c6:
61:c3:c6:3c:4b:be:a8:9f:d3:b7:46:5a:4b:48:2e:5f:10:da:
6a:25:25:5a:13:e8:4a:8b:1e:a4:89:78:4b:0c:6e:60:4b:25:
f3:1f:eb:f6:e6:e0:ed:7c:d3:82:50:b3:62:0b:fa:63:e2:77:
38:54:67:59:46:74:4f:36:1d:e7:64:ff:00:75:af:46:a4:e1:
fb:2d:04:52:08:9d:53:86:47:fb:a9:f1:ff:04:80:f1:b9:78:
f7:4a:de:6e:06:a3:b8:44:44:40:e8:9f:80:36:e4:c6:d0:34:
2c:3e:f6:69:c5:aa:f5:ed:4b:f9:78:74:68:62:b4:2d:14:2d:
1b:ee:40:5b:0f:a2:9d:c4:f2:25:0a:65:38:97:0d:a6:f8:b2:
db:8b:e9:cf:eb:51:d9:fe:a3:2b:98:54:68:81:c6:5f:ea:be:
aa:52:49:84:65:51:49:aa:bc:44:14:4b:6a:77:9f:f0:17:b6:
e5:20:94:1e:29:76:ef:94:f1:c5:39:8f:1e:cb:c7:bc:c8:ac:
a2:a4:27:06:27:28:53:e8:2f:b2:58:5e:be:2e:42:7d:5b:89:
dd:2a:c5:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiuzPSrBMDOUVlIDQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDEyNzEwNTAzMFoXDTI1MDQyNzA5NTAzMFowLzEtMCsGA1UEAxMk
MTkyYmQ2ZjQtYTZiZi00ZDg4LTljNmItYzU2OWE5MTM0NzE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu3NG5pJDCqFEdr0j4wTIeOQZuN9dGsMoBuk
1WoXUO2gJOaG3nKl2H1pbsKYNf7UMlid5ScNgsmjaz2sfX5lMgQN+98DlRbUiEKL
gfL8ZkSU1XpOwQsjBi97tKMTqVojh0McKWH+gEi5cqVt7CBkEkacSk2sbSvD2gmG
VHZVtYqMyU1QrSm19fnp2qF5QqvUW5EnmdeXfS0w+cjpQ+xY8wXFl4zW/7bGE+S0
CeMyx0h9jN+T4avlEV2YxzO8rqMArNtLlPSttxr2eqWjI2LGNtWqwvrw0CIqpCqA
MhB54nXrOXvyY3+i80MEzupM81iB0SyxodeSXKKD8fr0in68IQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNd1rUzen0y8+1++ED6z+PR/HdzlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZTYwYTcxZTYtOTI1Yy0z
OGZiLTg5NWQtNmM2YmM5OTMxY2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF5jjyQa9Ysoi0sMgvbY+ElKJ+2aXJUVWAgri3lRXuOOzzS6xmHDxjxL
vqif07dGWktILl8Q2molJVoT6EqLHqSJeEsMbmBLJfMf6/bm4O1804JQs2IL+mPi
dzhUZ1lGdE82Hedk/wB1r0ak4fstBFIInVOGR/up8f8EgPG5ePdK3m4Go7hEREDo
n4A25MbQNCw+9mnFqvXtS/l4dGhitC0ULRvuQFsPop3E8iUKZTiXDab4stuL6c/r
Udn+oyuYVGiBxl/qvqpSSYRlUUmqvEQUS2p3n/AXtuUglB4pdu+U8cU5jx7Lx7zI
rKKkJwYnKFPoL7JYXr4uQn1bid0qxew=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:07 2025 by rpki-client