Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4c645004-5654-3403-b45f-d0b7069b81e6.roa
File: 4c645004-5654-3403-b45f-d0b7069b81e6.roa (raw, json)
Hash identifier: V+oq03CQ+sxrJT0yqxWjKPgH5Mx/Ya4wLWGsep9Ypqo=
Subject key identifier: 57:94:7B:F5:CA:6B:DD:97:42:5A:47:02:8B:54:F7:66:15:86:88:93
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F43285848DEA12040C8E54EA43BB71F40
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4c645004-5654-3403-b45f-d0b7069b81e6.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 25645
IP address blocks: 137.239.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:20:40:c8:e5:4e:a4:3b:b7:1f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=21ca3f70-6c53-4170-802a-4491d49acf67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0f:86:61:86:4a:37:ed:46:ca:d7:c5:a1:68:
de:e5:d9:0f:35:68:c4:69:90:e0:31:21:a1:6d:d7:
4b:7c:4d:86:a8:6e:95:20:94:90:6f:3d:ac:e1:50:
e0:aa:e3:d6:e6:c9:9c:c7:f5:7e:1d:9c:e9:90:5b:
bb:06:cd:07:ba:38:d6:67:eb:c1:0d:7a:5d:21:fe:
33:58:49:31:fa:de:a9:59:16:9f:c5:8e:a6:e8:78:
9b:53:ef:a4:0c:26:99:46:e9:de:3a:54:ed:80:6a:
31:2f:aa:17:67:b1:84:cb:9d:4d:29:3c:7a:60:52:
1a:0c:1e:77:24:77:f7:e3:84:d2:dd:f5:8c:e2:e0:
ac:b0:9e:c4:a8:d3:e9:7b:f5:74:57:47:e0:41:cf:
db:e9:79:4a:0d:0a:80:dc:28:9a:4d:1d:43:fa:d7:
b3:b8:6c:41:da:60:79:0f:ce:59:84:40:40:54:6f:
a6:51:2d:e9:76:70:66:f5:61:b0:22:f5:93:95:75:
ef:58:6c:99:96:53:5d:98:98:28:50:64:56:5d:21:
e3:30:e7:04:5f:0e:57:a7:01:d8:25:67:ac:ff:87:
eb:00:53:ab:7e:21:35:2f:87:99:57:d3:91:12:3d:
db:25:c8:88:67:dd:d6:f5:7f:4e:03:74:9e:e9:86:
79:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:94:7B:F5:CA:6B:DD:97:42:5A:47:02:8B:54:F7:66:15:86:88:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4c645004-5654-3403-b45f-d0b7069b81e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv4:
137.239.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:3f:78:3d:a2:8e:d7:ec:1f:31:51:e3:8b:06:40:6b:36:be:
4e:48:a2:37:7c:2b:19:c2:d2:04:55:66:b3:80:1a:a6:69:e6:
40:af:56:17:71:6d:31:04:0f:0d:bc:15:21:db:35:e6:de:24:
be:cd:73:20:04:80:47:e1:58:5a:37:4c:bc:91:1f:37:f1:65:
58:53:9a:6f:81:d0:08:f2:54:85:fc:13:a9:fd:e9:44:85:2a:
ea:47:ff:30:98:b8:93:58:43:d7:f6:85:65:cd:ef:07:1b:49:
8d:8f:29:df:d3:c9:8e:8e:57:77:e0:89:09:a7:10:d5:14:3c:
69:98:48:87:0b:51:9f:cc:47:6e:88:e0:49:9b:3c:e9:2d:68:
65:c3:29:6a:df:b2:42:12:a8:52:fd:2f:6e:a9:ce:f2:93:e7:
e1:5b:6d:21:e3:77:59:1c:79:80:bc:f7:e4:2b:14:9c:1b:47:
fb:9b:10:e3:8e:37:6c:c8:82:c9:32:81:5f:98:68:34:71:46:
11:aa:f4:52:19:3e:0c:71:b2:f8:d9:5f:a0:06:2d:59:e2:ea:
a7:bf:1c:b7:8a:7b:c7:33:ce:25:fc:a0:39:49:b1:2b:d1:30:
e7:f1:9d:88:ef:05:78:e4:93:7f:14:91:95:52:e3:9b:0a:eb:
d3:74:ae:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSBAyOVOpDu3H0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4
MzcwMB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk
MjFjYTNmNzAtNmM1My00MTcwLTgwMmEtNDQ5MWQ0OWFjZjY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw+GYYZKN+1GytfFoWje5dkPNWjEaZDgMSGh
bddLfE2GqG6VIJSQbz2s4VDgquPW5smcx/V+HZzpkFu7Bs0HujjWZ+vBDXpdIf4z
WEkx+t6pWRafxY6m6HibU++kDCaZRuneOlTtgGoxL6oXZ7GEy51NKTx6YFIaDB53
JHf344TS3fWM4uCssJ7EqNPpe/V0V0fgQc/b6XlKDQqA3CiaTR1D+tezuGxB2mB5
D85ZhEBAVG+mUS3pdnBm9WGwIvWTlXXvWGyZllNdmJgoUGRWXSHjMOcEXw5XpwHY
JWes/4frAFOrfiE1L4eZV9OREj3bJciIZ93W9X9OA3Se6YZ5wQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFeUe/XKa92XQlpHAotU92YVhoiTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj
NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvNGM2NDUwMDQtNTY1NC0z
NDAzLWI0NWYtZDBiNzA2OWI4MWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm
MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2
ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx
YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/TMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACc/eD2ijtfsHzFR44sGQGs2vk5Iojd8KxnC0gRVZrOAGqZp5kCvVhdx
bTEEDw28FSHbNebeJL7NcyAEgEfhWFo3TLyRHzfxZVhTmm+B0AjyVIX8E6n96USF
KupH/zCYuJNYQ9f2hWXN7wcbSY2PKd/TyY6OV3fgiQmnENUUPGmYSIcLUZ/MR26I
4EmbPOktaGXDKWrfskISqFL9L26pzvKT5+FbbSHjd1kceYC89+QrFJwbR/ubEOOO
N2zIgskygV+YaDRxRhGq9FIZPgxxsvjZX6AGLVni6qe/HLeKe8czziX8oDlJsSvR
MOfxnYjvBXjkk38UkZVS45sK69N0rh0=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:00 2025 by rpki-client