Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5/821b0144-f20d-3232-8bec-514d962865a2.roa
File: 821b0144-f20d-3232-8bec-514d962865a2.roa (raw, json)
Hash identifier: D71LqLjyqTeC0b0CxcxWX/u0quOWysNfqRy8l7VCMtg=
Subject key identifier: 84:56:88:BB:C4:9B:EF:F5:A5:5A:07:6C:6E:74:62:D3:33:4F:F8:DB
Certificate issuer: /CN=4cf672d6-9c85-4ec6-b6e5-5747cefd10c5
Certificate serial: 010D0C9F432858494B64051A32C03FF70C15BE40
Authority key identifier: F8:F5:F0:64:63:B8:20:52:B9:92:25:83:2B:FD:89:42:DE:99:6F:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5/821b0144-f20d-3232-8bec-514d962865a2.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 36281
IP address blocks: 192.30.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:05:1a:32:c0:3f:f7:0c:15:be:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf672d6-9c85-4ec6-b6e5-5747cefd10c5
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=1247c008-bcd7-4e0c-b33a-0deb0857ff00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:66:c5:ae:9a:53:4e:78:b6:32:89:2f:98:1c:
c8:f6:c6:46:28:ca:f2:2b:11:43:1b:67:e0:73:3a:
56:88:01:44:f4:34:76:d0:a8:f7:dd:86:ea:29:ae:
a0:f8:01:af:2f:37:95:47:ef:d6:c5:48:61:0b:4b:
e5:99:71:00:97:ce:be:8b:57:f8:03:e7:04:09:71:
a9:52:7b:70:e6:10:b7:dd:bd:45:04:bc:91:d3:2f:
2a:11:6a:b6:e8:e5:45:c0:8f:24:a1:27:22:fb:99:
26:e9:23:4f:d2:3a:d2:65:9f:39:e7:f3:0b:9e:65:
4b:be:49:7b:51:80:36:9f:b1:75:bb:46:be:c1:34:
70:89:14:4e:c6:0b:87:fa:24:2b:83:ce:1e:5e:56:
ef:97:1c:c4:fb:6d:e7:32:18:b8:64:5c:b7:0e:ff:
b6:5c:c1:99:e1:dc:b8:e7:c3:4a:f9:58:31:1e:01:
d5:b6:8e:3f:b8:36:be:01:1c:78:1c:cb:fb:4c:b9:
91:28:4f:d5:2e:44:79:e8:05:25:75:5e:fc:54:8f:
a3:70:03:49:76:84:55:2c:fc:e4:b8:cb:73:f3:2e:
ec:c2:94:c5:db:21:dc:cc:dd:63:8b:78:1f:6e:02:
20:b1:e6:d6:9b:17:7a:e4:8f:bd:6e:2b:6a:39:6c:
f9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:56:88:BB:C4:9B:EF:F5:A5:5A:07:6C:6E:74:62:D3:33:4F:F8:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5/821b0144-f20d-3232-8bec-514d962865a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5.crl
X509v3 Authority Key Identifier:
keyid:F8:F5:F0:64:63:B8:20:52:B9:92:25:83:2B:FD:89:42:DE:99:6F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5.cer
sbgp-ipAddrBlock: critical
IPv4:
192.30.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:51:2e:1b:67:37:22:ad:6a:6b:2e:e2:20:22:5a:29:b8:09:
62:9f:b0:8a:cf:12:e5:16:1e:54:6b:c6:37:f9:0e:7b:95:71:
8f:b8:b3:ff:00:91:4d:13:c3:b6:e3:68:9d:a3:3a:ba:c5:ca:
f6:b3:6d:19:32:0f:69:4b:34:2e:80:f2:a1:e0:a0:a3:c2:11:
86:21:9d:53:c6:e8:15:56:a2:04:fc:ae:7a:ed:ff:4f:7b:49:
0f:ff:3c:53:33:4d:32:c0:84:21:6c:b2:fe:3d:bf:81:1a:be:
d2:fe:a9:aa:98:81:c3:81:bb:7d:19:91:c0:ae:84:a8:fe:71:
91:83:48:5d:6f:8f:8f:e5:b9:79:a8:dc:d7:af:72:cd:9c:aa:
fe:f4:00:db:7e:33:1f:81:64:76:a1:c0:19:7e:4e:0a:a6:78:
c6:10:aa:24:52:28:f5:b6:5f:b0:9d:7f:9b:b4:2e:cc:db:07:
00:7d:5c:0c:b2:7b:c1:de:82:31:b8:7d:bd:81:d6:19:0b:3b:
29:ca:29:90:a1:37:31:60:b0:7b:37:87:5b:5d:e7:77:9b:ff:
d0:83:d9:ef:b3:e6:7f:11:d8:e8:a3:92:c9:da:d9:33:09:e9:
6e:eb:73:8a:c7:43:b9:b2:48:3c:2c:3e:94:4f:b9:71:73:8f:
98:de:2b:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZAUaMsA/9wwVvkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGNmNjcyZDYtOWM4NS00ZWM2LWI2ZTUtNTc0N2NlZmQx
MGM1MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk
MTI0N2MwMDgtYmNkNy00ZTBjLWIzM2EtMGRlYjA4NTdmZjAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWbFrppTTni2MokvmBzI9sZGKMryKxFDG2fg
czpWiAFE9DR20Kj33YbqKa6g+AGvLzeVR+/WxUhhC0vlmXEAl86+i1f4A+cECXGp
Untw5hC33b1FBLyR0y8qEWq26OVFwI8koSci+5km6SNP0jrSZZ855/MLnmVLvkl7
UYA2n7F1u0a+wTRwiRROxguH+iQrg84eXlbvlxzE+23nMhi4ZFy3Dv+2XMGZ4dy4
58NK+VgxHgHVto4/uDa+ARx4HMv7TLmRKE/VLkR56AUldV78VI+jcANJdoRVLPzk
uMtz8y7swpTF2yHczN1ji3gfbgIgsebWmxd65I+9bitqOWz5iwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIRWiLvEm+/1pVoHbG50YtMzT/jbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80Y2Y2
NzJkNi05Yzg1LTRlYzYtYjZlNS01NzQ3Y2VmZDEwYzUvODIxYjAxNDQtZjIwZC0z
MjMyLThiZWMtNTE0ZDk2Mjg2NWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGNmNjcyZDYtOWM4NS00ZWM2LWI2
ZTUtNTc0N2NlZmQxMGM1LzRjZjY3MmQ2LTljODUtNGVjNi1iNmU1LTU3NDdjZWZk
MTBjNS5jcmwwHwYDVR0jBBgwFoAU+PXwZGO4IFK5kiWDK/2JQt6Zb5wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS80Y2Y2NzJkNi05Yzg1LTRlYzYtYjZlNS01NzQ3
Y2VmZDEwYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB7LMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGFRLhtnNyKtamsu4iAiWim4CWKfsIrPEuUWHlRrxjf5DnuVcY+4s/8A
kU0Tw7bjaJ2jOrrFyvazbRkyD2lLNC6A8qHgoKPCEYYhnVPG6BVWogT8rnrt/097
SQ//PFMzTTLAhCFssv49v4EavtL+qaqYgcOBu30ZkcCuhKj+cZGDSF1vj4/luXmo
3Nevcs2cqv70ANt+Mx+BZHahwBl+TgqmeMYQqiRSKPW2X7Cdf5u0LszbBwB9XAyy
e8HegjG4fb2B1hkLOynKKZChNzFgsHs3h1td53eb/9CD2e+z5n8R2Oijksna2TMJ
6W7rc4rHQ7mySDwsPpRPuXFzj5jeK48=
-----END CERTIFICATE-----
Generated at Sat Apr 12 10:14:38 2025 by rpki-client