Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/33db2d95-1055-34bc-bf74-6b80ea9b6b02.roa
File: 33db2d95-1055-34bc-bf74-6b80ea9b6b02.roa (raw, json)
Hash identifier: G2GC+sep3LKQta9P0I91rNBL1eg6GacyOj4AeeNRHbY=
Subject key identifier: 99:DB:FE:8F:5D:33:82:E7:51:F2:B8:A6:93:5E:67:21:BE:A8:45:21
Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial: 010D0C9F43285849393E957866B11DBD21E2D780
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/33db2d95-1055-34bc-bf74-6b80ea9b6b02.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 49981
IP address blocks: 96.43.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:95:78:66:b1:1d:bd:21:e2:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=4e6d5b2c-50c8-4025-bada-a6bbe92b16e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c5:65:65:97:c7:2c:00:1b:2f:23:32:94:f1:
be:b9:10:ec:45:2e:5a:d9:4f:6a:7c:10:81:17:8b:
2e:26:9e:f6:65:29:7a:92:3c:9a:e7:9d:d3:a4:8c:
d2:2f:59:3c:a3:30:69:3f:cd:15:4e:3a:5a:d4:bc:
42:cd:0c:fc:9d:79:d3:7f:dc:b5:fa:77:e3:97:f2:
7f:d6:8b:3b:6b:92:d3:33:da:35:2e:97:50:1f:a5:
f9:60:24:72:8f:89:7d:f0:69:3a:a6:e3:23:c6:a6:
50:8f:6a:71:e6:05:a3:16:c8:aa:7b:ab:e5:a5:9f:
a6:1f:64:87:ad:f8:ce:47:bd:ab:18:66:ed:77:ed:
c7:b1:84:85:df:b2:60:e7:4c:08:b8:6a:e5:2f:64:
aa:cb:39:7e:27:e6:09:09:e9:ac:06:f3:dc:3b:a6:
ac:f2:b8:bc:48:a3:94:47:db:01:7c:01:e4:fa:f9:
b6:a5:4d:c7:82:ff:24:65:b5:ad:3e:fc:94:7f:cf:
b3:18:ca:eb:dc:da:db:28:36:5b:cf:11:52:94:60:
f5:ee:d8:f5:f2:1a:a0:ea:4f:ab:58:07:bc:cd:f3:
a0:b4:06:e9:c2:e0:26:a6:5b:57:08:5b:ff:75:57:
80:31:6b:2b:7f:8a:56:e4:7a:7d:a7:27:01:f3:f9:
00:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DB:FE:8F:5D:33:82:E7:51:F2:B8:A6:93:5E:67:21:BE:A8:45:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/33db2d95-1055-34bc-bf74-6b80ea9b6b02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
X509v3 Authority Key Identifier:
keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
sbgp-ipAddrBlock: critical
IPv4:
96.43.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:3e:0d:b7:0e:df:2b:35:9a:81:8f:1e:64:ea:30:ac:68:69:
82:4b:2d:d5:c7:b7:83:de:99:d6:3a:6b:1a:fc:f9:fc:a5:c7:
b1:d8:cb:2c:4a:3a:69:d3:8a:f4:77:7c:36:6a:2e:b9:d3:30:
9c:0c:6f:08:27:3d:e1:92:3b:7e:79:f9:72:4c:ab:66:60:88:
55:f7:d4:f7:4a:cb:f9:b8:e9:02:4a:16:5f:cb:f8:89:2c:e6:
88:44:69:77:5d:36:85:28:6e:17:28:70:70:c2:7a:74:1d:30:
78:b6:8e:18:c1:b9:8a:e3:8e:ea:68:da:fc:67:bf:fb:c7:78:
38:fd:3a:9c:20:da:c1:21:94:0c:e7:4b:e9:8d:21:a6:9e:ba:
e8:43:32:8a:de:05:e8:5a:7a:3d:b7:29:33:99:80:e2:72:64:
19:26:fc:ee:2d:db:18:ed:cc:1f:af:1e:66:d0:93:8a:01:eb:
0d:f4:60:35:ea:d1:03:61:dc:e0:f4:fd:db:99:a2:76:b5:d6:
af:e8:14:97:93:f4:2c:db:95:c6:47:7d:80:04:d9:42:f8:89:
7a:ce:8f:ec:5e:f1:d4:b6:63:64:b9:0a:f1:28:53:59:26:f9:
bc:95:f4:25:4d:0d:41:e3:fb:c4:24:5c:f4:f9:6a:91:4a:1d:
9f:be:52:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5PpV4ZrEdvSHi14AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1
MGU4MB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk
NGU2ZDViMmMtNTBjOC00MDI1LWJhZGEtYTZiYmU5MmIxNmUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsVlZZfHLAAbLyMylPG+uRDsRS5a2U9qfBCB
F4suJp72ZSl6kjya553TpIzSL1k8ozBpP80VTjpa1LxCzQz8nXnTf9y1+nfjl/J/
1os7a5LTM9o1LpdQH6X5YCRyj4l98Gk6puMjxqZQj2px5gWjFsiqe6vlpZ+mH2SH
rfjOR72rGGbtd+3HsYSF37Jg50wIuGrlL2Sqyzl+J+YJCemsBvPcO6as8ri8SKOU
R9sBfAHk+vm2pU3Hgv8kZbWtPvyUf8+zGMrr3NrbKDZbzxFSlGD17tj18hqg6k+r
WAe8zfOgtAbpwuAmpltXCFv/dVeAMWsrf4pW5Hp9pycB8/kAKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJnb/o9dM4LnUfK4ppNeZyG+qEUhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0
NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMzNkYjJkOTUtMTA1NS0z
NGJjLWJmNzQtNmI4MGVhOWI2YjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk
MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz
NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3
NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCtpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADQ+DbcO3ys1moGPHmTqMKxoaYJLLdXHt4PemdY6axr8+fylx7HYyyxK
OmnTivR3fDZqLrnTMJwMbwgnPeGSO355+XJMq2ZgiFX31PdKy/m46QJKFl/L+Iks
5ohEaXddNoUobhcocHDCenQdMHi2jhjBuYrjjupo2vxnv/vHeDj9Opwg2sEhlAzn
S+mNIaaeuuhDMoreBehaej23KTOZgOJyZBkm/O4t2xjtzB+vHmbQk4oB6w30YDXq
0QNh3OD0/duZona11q/oFJeT9CzblcZHfYAE2UL4iXrOj+xe8dS2Y2S5CvEoU1km
+byV9CVNDUHj+8QkXPT5apFKHZ++Utw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:50:06 2025 by rpki-client