Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/90b798e1-ad1e-32f7-b084-31fad4eb8cd5.roa
File: 90b798e1-ad1e-32f7-b084-31fad4eb8cd5.roa (raw, json)
Hash identifier: bQ89qB0OiS26z87/6aqheJll8PGE+Vk0xtQWy+JByc8=
Subject key identifier: CB:9D:01:39:22:F3:0C:1A:50:85:F5:B5:FB:23:47:7F:15:4C:02:8B
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848BBBB782922D14033B3DB96C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/90b798e1-ad1e-32f7-b084-31fad4eb8cd5.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 852
IP address blocks: 205.206.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:78:29:22:d1:40:33:b3:db:96:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=887db52e-6680-4a46-b468-eb641204c699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:c8:5f:a5:6c:e0:5b:15:bb:66:86:3c:ca:
c5:eb:5f:7b:2d:da:fb:e0:ff:b0:a7:6e:01:b3:ee:
eb:00:d7:83:c1:f8:52:77:6f:df:c7:c3:4b:fb:07:
b4:2c:80:9b:dd:ec:ef:83:75:c1:7a:68:d7:c1:69:
22:56:b2:48:7e:d3:ac:52:48:d6:e5:9a:2c:d7:c5:
44:6c:21:5e:4d:bf:d3:9e:69:cc:a2:1b:66:da:81:
d2:04:8d:dc:ec:40:dc:73:2f:12:a4:b3:49:b1:fb:
8b:fc:cf:18:50:b0:54:37:92:5b:84:51:a7:4c:58:
3b:53:7d:b5:ae:6e:d1:0b:87:7c:41:f6:9f:1b:b8:
69:cd:a8:b7:b3:c4:7c:96:71:64:a2:81:de:c7:73:
d8:87:a8:2d:35:9c:2d:15:93:af:a7:14:8b:de:f6:
7c:c5:aa:cb:49:58:b5:a9:5b:1b:e6:d1:09:94:4e:
de:bb:0c:8c:79:92:12:27:6c:9c:60:70:23:ff:a7:
ac:8e:c7:6c:d1:68:23:1c:4a:b6:c5:f8:a5:a3:14:
fe:41:79:4f:f8:10:51:02:fc:3c:a5:2b:89:d4:78:
4b:7a:48:e8:07:18:dd:e4:ef:7b:37:ee:de:00:26:
09:9f:59:33:08:e8:ef:3d:8d:0e:a1:d5:ed:84:18:
97:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9D:01:39:22:F3:0C:1A:50:85:F5:B5:FB:23:47:7F:15:4C:02:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/90b798e1-ad1e-32f7-b084-31fad4eb8cd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
205.206.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:02:40:14:67:8a:6d:76:a1:3f:89:51:44:c1:56:1c:f3:8c:
82:c7:fa:01:cf:71:14:c3:1d:96:26:e6:76:ab:20:f5:a8:91:
8d:64:39:8d:5d:19:ab:37:de:3e:64:26:30:88:92:3c:d4:e7:
5b:fb:cd:26:1a:60:2c:8b:70:3a:64:98:89:e6:e6:f2:05:9c:
f1:00:c0:c8:e0:d9:e4:d3:84:63:a8:4a:ac:c4:15:c3:a7:62:
38:63:d0:1c:72:7b:40:ec:bf:1c:b1:16:cc:ea:d2:95:f9:b5:
72:f5:8b:ba:76:01:c5:36:6a:d2:94:63:fa:31:3f:8e:5b:37:
2f:40:f1:24:67:e0:ef:a2:cd:ee:6c:0e:6f:12:8c:9f:c5:0d:
bf:62:8c:41:96:33:1b:c2:24:3c:bd:c1:0c:90:37:3b:b5:96:
7a:2f:a3:9b:c1:2e:4a:1e:b1:66:64:04:81:40:d6:ad:df:28:
93:1a:10:f9:91:53:5a:8d:22:b8:76:a5:5a:2d:de:69:cc:53:
01:1c:7b:fd:48:d7:4d:00:ae:8d:ef:1e:80:c5:92:8d:3a:61:
9e:d9:1d:23:5d:55:57:b7:20:ae:98:61:59:e1:e0:d1:65:06:
d0:91:38:85:97:80:be:2f:11:77:2a:8f:f5:b8:58:3e:83:31:
94:20:9a:1c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEi7u3gpItFAM7PblsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk
ODg3ZGI1MmUtNjY4MC00YTQ2LWI0NjgtZWI2NDEyMDRjNjk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtprIX6Vs4FsVu2aGPMrF6197Ldr74P+wp24B
s+7rANeDwfhSd2/fx8NL+we0LICb3ezvg3XBemjXwWkiVrJIftOsUkjW5Zos18VE
bCFeTb/TnmnMohtm2oHSBI3c7EDccy8SpLNJsfuL/M8YULBUN5JbhFGnTFg7U321
rm7RC4d8QfafG7hpzai3s8R8lnFkooHex3PYh6gtNZwtFZOvpxSL3vZ8xarLSVi1
qVsb5tEJlE7euwyMeZISJ2ycYHAj/6esjsds0WgjHEq2xfiloxT+QXlP+BBRAvw8
pSuJ1HhLekjoBxjd5O97N+7eACYJn1kzCOjvPY0OodXthBiXPQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMudATki8wwaUIX1tfsjR38VTAKLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOTBiNzk4ZTEtYWQxZS0z
MmY3LWIwODQtMzFmYWQ0ZWI4Y2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzc4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAVgJAFGeKbXahP4lRRMFWHPOMgsf6Ac9xFMMdlibmdqsg9aiRjWQ5jV0Z
qzfePmQmMIiSPNTnW/vNJhpgLItwOmSYiebm8gWc8QDAyODZ5NOEY6hKrMQVw6di
OGPQHHJ7QOy/HLEWzOrSlfm1cvWLunYBxTZq0pRj+jE/jls3L0DxJGfg76LN7mwO
bxKMn8UNv2KMQZYzG8IkPL3BDJA3O7WWei+jm8EuSh6xZmQEgUDWrd8okxoQ+ZFT
Wo0iuHalWi3eacxTARx7/UjXTQCuje8egMWSjTphntkdI11VV7cgrphhWeHg0WUG
0JE4hZeAvi8RdyqP9bhYPoMxlCCaHA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:00:56 2025 by rpki-client