Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02/0c4283ac-14aa-387e-b239-7dcb28c3a3d6.roa
File: 0c4283ac-14aa-387e-b239-7dcb28c3a3d6.roa (raw, json)
Hash identifier: mJ8tMnpd87201bFyJITGXZFg1jTW12CdpKEUrV1hD0A=
Subject key identifier: 3B:1F:A5:53:05:78:8D:47:AD:1F:8A:5E:9C:E9:E7:17:B9:F4:E2:DC
Certificate issuer: /CN=7d556317-cc4f-4b83-86b0-25d4f92c6d02
Certificate serial: 010D0C9F432858491AA6B38E7B1AEAA9053243C4
Authority key identifier: DC:9F:B7:A1:34:BF:07:73:0D:1A:DD:4D:25:46:CA:54:4E:43:B0:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02/0c4283ac-14aa-387e-b239-7dcb28c3a3d6.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 2497
IP address blocks: 192.70.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:b3:8e:7b:1a:ea:a9:05:32:43:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d556317-cc4f-4b83-86b0-25d4f92c6d02
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=5de51f54-7568-4d67-9d20-416caf01b6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:af:7d:a9:46:7a:68:6e:cd:b2:38:47:ff:e0:
62:8f:2d:2e:db:72:d9:86:d5:83:f0:68:f8:86:fb:
2d:b2:98:65:82:ba:0a:52:34:96:2f:1d:81:7a:94:
8e:38:a9:95:6a:ad:54:6d:f3:a4:a6:af:10:94:c4:
56:c3:d6:39:61:eb:59:c2:21:6e:b7:65:f0:e2:6f:
37:14:54:93:23:63:12:a2:39:7f:5c:9c:38:64:a3:
3c:13:d8:bd:00:8d:48:00:f4:35:a1:f8:81:fd:62:
9e:3d:13:c9:a1:81:c0:0b:62:58:51:3f:0a:88:d7:
1d:3b:37:cf:2f:f3:7a:57:28:9a:bc:2c:f7:8f:e4:
f0:64:d0:4d:06:39:f2:a8:f0:07:98:07:c0:7c:3f:
a3:dc:c7:41:41:8f:ac:9a:87:9b:c9:a0:d9:fc:8d:
df:92:02:2b:bb:c4:69:00:18:c5:82:ba:78:35:e8:
6c:d6:0e:cf:c7:7e:29:34:9d:2e:90:0c:a3:d6:d2:
e7:f2:dd:42:ca:ff:8a:5f:2b:2b:f9:0f:86:ad:ca:
68:b8:c2:ec:35:5d:af:49:7e:59:69:fc:69:d9:80:
cc:96:a6:2e:04:7e:46:3c:72:2d:05:21:65:39:20:
27:3b:0b:29:07:86:fc:07:c4:fb:e0:69:54:90:cd:
e0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1F:A5:53:05:78:8D:47:AD:1F:8A:5E:9C:E9:E7:17:B9:F4:E2:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02/0c4283ac-14aa-387e-b239-7dcb28c3a3d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02/7d556317-cc4f-4b83-86b0-25d4f92c6d02.crl
X509v3 Authority Key Identifier:
keyid:DC:9F:B7:A1:34:BF:07:73:0D:1A:DD:4D:25:46:CA:54:4E:43:B0:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02.cer
sbgp-ipAddrBlock: critical
IPv4:
192.70.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c6:a0:3d:5c:b6:c6:c2:be:50:4e:b8:d6:ae:e9:f0:5f:04:2a:
16:e5:30:d1:59:98:8b:a8:aa:70:af:97:d0:8a:e1:95:c4:ea:
22:33:35:a4:93:69:3c:e6:69:83:31:06:35:b6:59:7e:9a:80:
a2:6b:2c:8e:48:6c:60:86:99:98:b8:ed:81:15:99:23:c6:41:
81:68:98:ee:a5:d1:0d:37:fa:76:fc:b6:3d:a6:c5:a8:d3:55:
7a:1c:17:4b:ec:b3:c9:de:dd:1e:36:13:e9:11:ee:b1:8a:6d:
a2:ad:57:d3:41:30:9f:fe:f7:30:e9:39:f2:fd:e6:dc:c8:ae:
24:aa:50:2f:8a:ae:4a:d3:27:2f:d4:30:49:a4:0a:22:b4:f6:
56:eb:ed:66:ff:4b:56:a1:8c:ae:e2:2b:ae:9c:30:be:5e:d8:
73:68:c2:c4:1a:ab:fc:36:07:ac:2c:eb:9a:f5:cf:f1:7d:bc:
b8:2e:65:45:a8:64:50:ac:5f:fc:5f:2e:45:76:15:f6:46:50:
57:06:d0:3e:1c:8b:2a:bb:8f:58:57:22:df:3c:7f:85:0f:c8:
0f:0d:fd:9b:23:86:c6:42:c6:f2:1a:d8:84:9a:46:08:9b:0f:
cb:0d:7b:79:96:d7:da:08:74:56:fd:d2:27:63:46:5d:c0:7f:
53:bb:5b:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaprOOexrqqQUyQ8QwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2Q1NTYzMTctY2M0Zi00YjgzLTg2YjAtMjVkNGY5MmM2
ZDAyMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk
NWRlNTFmNTQtNzU2OC00ZDY3LTlkMjAtNDE2Y2FmMDFiNmM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAla99qUZ6aG7NsjhH/+Bijy0u23LZhtWD8Gj4
hvstsphlgroKUjSWLx2BepSOOKmVaq1UbfOkpq8QlMRWw9Y5YetZwiFut2Xw4m83
FFSTI2MSojl/XJw4ZKM8E9i9AI1IAPQ1ofiB/WKePRPJoYHAC2JYUT8KiNcdOzfP
L/N6VyiavCz3j+TwZNBNBjnyqPAHmAfAfD+j3MdBQY+smoebyaDZ/I3fkgIru8Rp
ABjFgrp4Nehs1g7Px34pNJ0ukAyj1tLn8t1Cyv+KXysr+Q+GrcpouMLsNV2vSX5Z
afxp2YDMlqYuBH5GPHItBSFlOSAnOwspB4b8B8T74GlUkM3gZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDsfpVMFeI1HrR+KXpzp5xe59OLcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZDU1
NjMxNy1jYzRmLTRiODMtODZiMC0yNWQ0ZjkyYzZkMDIvMGM0MjgzYWMtMTRhYS0z
ODdlLWIyMzktN2RjYjI4YzNhM2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2Q1NTYzMTctY2M0Zi00YjgzLTg2
YjAtMjVkNGY5MmM2ZDAyLzdkNTU2MzE3LWNjNGYtNGI4My04NmIwLTI1ZDRmOTJj
NmQwMi5jcmwwHwYDVR0jBBgwFoAU3J+3oTS/B3MNGt1NJUbKVE5DsHAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZDU1NjMxNy1jYzRmLTRiODMtODZiMC0yNWQ0
ZjkyYzZkMDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEaDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMagPVy2xsK+UE641q7p8F8EKhblMNFZmIuoqnCvl9CK4ZXE6iIzNaST
aTzmaYMxBjW2WX6agKJrLI5IbGCGmZi47YEVmSPGQYFomO6l0Q03+nb8tj2mxajT
VXocF0vss8ne3R42E+kR7rGKbaKtV9NBMJ/+9zDpOfL95tzIriSqUC+KrkrTJy/U
MEmkCiK09lbr7Wb/S1ahjK7iK66cML5e2HNowsQaq/w2B6ws65r1z/F9vLguZUWo
ZFCsX/xfLkV2FfZGUFcG0D4ciyq7j1hXIt88f4UPyA8N/ZsjhsZCxvIa2ISaRgib
D8sNe3mW19oIdFb90idjRl3Af1O7WzE=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:34:22 2025 by rpki-client