Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b7e504a4-e8b0-38f3-9ccf-e70fa48ac1a6.roa
File: b7e504a4-e8b0-38f3-9ccf-e70fa48ac1a6.roa (raw, json)
Hash identifier: SUl3tccYMxmYZgF8X2+FtBTIl5RU8uuq9uxWvjOFelQ=
Subject key identifier: A1:AA:A8:FE:84:13:4E:D5:30:85:D2:B2:25:85:D6:FF:37:48:29:BF
Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial: 010D0C9F43285848DA70F518B03839194F34F3C0
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b7e504a4-e8b0-38f3-9ccf-e70fa48ac1a6.roa
Signing time: Wed 12 Feb 2025 02:00:39 +0000
ROA not before: Wed 12 Feb 2025 02:00:39 +0000
ROA not after: Tue 13 May 2025 01:00:39 +0000
asID: 397422
IP address blocks: 192.95.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:da:70:f5:18:b0:38:39:19:4f:34:f3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Validity
Not Before: Feb 12 02:00:39 2025 GMT
Not After : May 13 01:00:39 2025 GMT
Subject: CN=034e1082-7e7c-484f-8367-6d7ebfdfe1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d7:5c:16:6c:6a:b3:d2:06:7e:da:06:47:f1:
22:fa:0f:6d:f1:f5:2b:85:0a:9f:bc:5a:87:c9:19:
94:9f:e0:bc:cd:9e:30:44:b0:d0:b5:53:d1:fb:26:
c0:73:c0:7a:dd:8c:2c:9a:17:62:3a:58:85:20:06:
68:d5:a1:5c:09:81:22:12:c4:7f:13:38:b9:02:c5:
b7:e7:dc:7c:7c:9c:04:a3:81:46:cf:23:4d:1e:5c:
56:29:38:4e:7d:b3:b6:16:e2:de:0c:ed:08:21:9a:
5a:88:30:1e:57:c9:d3:2a:66:50:d5:e4:1e:a5:15:
f7:8c:6a:cb:c4:dd:45:ba:b8:c7:1c:49:1a:91:19:
a6:25:62:5e:c9:97:4d:ac:97:dc:e3:a9:21:30:ea:
11:3f:be:8d:d1:9a:61:97:22:41:9e:f4:d3:62:d3:
6d:68:3a:eb:ad:61:4f:ce:c0:4c:30:1a:53:40:7b:
00:c8:1c:4e:e6:0e:6c:b5:57:12:58:ff:55:13:8d:
ea:f5:78:d4:ce:58:ef:a6:1c:54:ad:3b:03:cc:24:
04:fc:47:13:c4:c8:4b:73:98:5e:96:27:d6:64:03:
1b:14:96:a8:9e:22:e9:c2:39:86:db:01:ee:30:6a:
bf:b7:a3:3d:ed:ab:7c:41:36:31:9c:3a:99:2f:c2:
a5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AA:A8:FE:84:13:4E:D5:30:85:D2:B2:25:85:D6:FF:37:48:29:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b7e504a4-e8b0-38f3-9ccf-e70fa48ac1a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
X509v3 Authority Key Identifier:
keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
sbgp-ipAddrBlock: critical
IPv4:
192.95.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:53:74:79:3d:23:9f:d4:be:bc:08:17:e4:81:94:1a:9c:f1:
49:67:01:dc:04:40:d4:d3:a8:bc:ea:13:a2:60:a2:73:6d:4a:
69:f8:de:c0:1b:e4:04:4d:7f:0d:36:a8:e5:b5:21:ba:bf:e6:
49:53:3e:b4:f9:db:87:90:1e:7f:d9:e2:56:fa:02:8e:20:b2:
03:b3:e9:af:a4:b3:bb:fd:b3:8d:23:b0:b8:3a:9c:a0:2a:ae:
4e:61:ac:9f:e8:fe:e2:0e:be:bd:86:07:d0:1b:2a:2d:14:14:
a7:dd:2b:3f:2a:2a:56:93:a1:d1:59:db:ba:57:10:fc:75:34:
2b:11:41:02:f5:36:28:4a:3b:13:ec:ed:f7:ea:b5:4d:f6:60:
be:a3:66:e3:51:1a:db:7d:9a:d8:64:23:0a:7e:bc:9d:f5:d6:
79:a5:94:f5:33:45:5a:dc:74:68:d3:3a:9d:af:2f:52:59:fa:
e5:61:0b:c3:82:9e:35:70:9b:a2:be:68:3a:6e:9a:22:f9:0d:
d5:c1:ae:97:2d:1a:cc:68:af:e5:60:2b:69:c2:ea:7f:8d:61:
f0:70:65:f0:9e:8a:9c:79:92:3e:d9:39:4b:62:0c:96:a8:83:
9a:83:cc:31:07:2f:5c:24:b3:53:7c:58:f6:76:9e:03:06:71:
49:2b:b3:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacPUYsDg5GU8088AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk
MDM0ZTEwODItN2U3Yy00ODRmLTgzNjctNmQ3ZWJmZGZlMWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9dcFmxqs9IGftoGR/Ei+g9t8fUrhQqfvFqH
yRmUn+C8zZ4wRLDQtVPR+ybAc8B63YwsmhdiOliFIAZo1aFcCYEiEsR/Ezi5AsW3
59x8fJwEo4FGzyNNHlxWKThOfbO2FuLeDO0IIZpaiDAeV8nTKmZQ1eQepRX3jGrL
xN1FurjHHEkakRmmJWJeyZdNrJfc46khMOoRP76N0ZphlyJBnvTTYtNtaDrrrWFP
zsBMMBpTQHsAyBxO5g5stVcSWP9VE43q9XjUzljvphxUrTsDzCQE/EcTxMhLc5he
lifWZAMbFJaoniLpwjmG2wHuMGq/t6M97at8QTYxnDqZL8KlkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKGqqP6EE07VMIXSsiWF1v83SCm/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvYjdlNTA0YTQtZThiMC0z
OGYzLTljY2YtZTcwZmE0OGFjMWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwF9EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGFTdHk9I5/UvrwIF+SBlBqc8UlnAdwEQNTTqLzqE6JgonNtSmn43sAb
5ARNfw02qOW1Ibq/5klTPrT524eQHn/Z4lb6Ao4gsgOz6a+ks7v9s40jsLg6nKAq
rk5hrJ/o/uIOvr2GB9AbKi0UFKfdKz8qKlaTodFZ27pXEPx1NCsRQQL1NihKOxPs
7ffqtU32YL6jZuNRGtt9mthkIwp+vJ311nmllPUzRVrcdGjTOp2vL1JZ+uVhC8OC
njVwm6K+aDpumiL5DdXBrpctGsxor+VgK2nC6n+NYfBwZfCeipx5kj7ZOUtiDJao
g5qDzDEHL1wks1N8WPZ2ngMGcUkrs2o=
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:09:27 2025 by rpki-client