Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ab989d0c-73b7-3135-8f94-98bb0aabc432.roa
File: ab989d0c-73b7-3135-8f94-98bb0aabc432.roa (raw, json)
Hash identifier: i01Ayo2kQbU5zaTvZwsea1FysOAXI0N3+IE+B2dtp6s=
Subject key identifier: 73:AE:6B:D1:5A:B2:C4:F1:A1:1C:E8:27:EC:FE:C2:9E:E0:BF:1D:7E
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584940394905FC75CF58EB0A6080
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ab989d0c-73b7-3135-8f94-98bb0aabc432.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 852
IP address blocks: 161.184.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:49:05:fc:75:cf:58:eb:0a:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=0437b748-c9b5-4022-8293-7d951095052a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:56:a1:5c:9f:90:4d:b2:aa:e7:4a:a6:4e:a1:
e5:81:9b:89:8d:7e:6b:b5:f4:1c:71:02:d0:33:fa:
03:36:9b:b8:65:cb:ee:07:82:6e:93:cf:de:b2:e8:
bc:9e:e9:77:13:c7:7b:5d:31:30:c6:e8:00:70:4a:
a9:62:aa:5d:85:d5:f5:e2:c9:b8:01:34:28:bd:ab:
16:71:e0:c8:f8:06:ca:16:fa:30:6d:eb:e3:28:64:
97:bc:cb:4e:8b:14:06:d2:5d:96:9a:b7:a6:c9:3f:
a1:d4:7a:06:fe:54:8f:22:f7:05:12:94:87:b4:64:
f4:28:b0:70:6a:8d:a8:ee:b8:75:18:43:56:34:ff:
3f:77:86:28:3e:c7:61:84:42:5f:fd:b1:b4:4d:1d:
9d:8a:11:92:55:3f:9c:0a:cc:64:36:23:67:74:82:
69:fe:d2:f5:21:bd:32:11:49:ea:f4:a5:6d:61:29:
4b:f6:35:5f:49:85:01:0b:3c:d2:52:8d:e1:b2:da:
f3:03:1a:d5:8c:ab:b9:cf:c5:9f:59:3f:85:7d:fe:
79:0c:e6:b6:d9:9e:27:bb:15:34:90:44:77:57:5b:
06:83:32:d9:20:4f:b8:9c:6c:d0:a7:6f:dc:15:bc:
97:90:64:a7:ad:71:b7:ca:ed:db:4a:b8:4e:32:95:
69:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AE:6B:D1:5A:B2:C4:F1:A1:1C:E8:27:EC:FE:C2:9E:E0:BF:1D:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ab989d0c-73b7-3135-8f94-98bb0aabc432.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
161.184.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:c2:eb:64:76:2d:14:3e:e2:ab:39:da:13:3a:3d:86:c2:9f:
86:d8:c2:40:69:ed:c9:fd:18:6e:38:9a:4c:de:04:a0:ac:cc:
ea:75:63:93:bc:36:ff:78:31:84:6f:32:a6:ac:a6:aa:77:93:
bd:9b:a2:17:f8:4e:20:37:8e:0d:50:30:a6:84:71:b7:ab:b1:
48:d0:7e:86:9f:6c:80:32:86:37:80:db:4a:18:cb:fb:90:b7:
5c:73:f6:8c:68:4d:1c:09:8b:23:54:77:32:ae:c9:db:ca:f6:
05:24:7b:2b:ce:23:c9:7e:1e:97:fa:3d:ee:61:40:19:8d:7a:
82:5f:7b:b0:25:ca:fe:4a:f6:87:f8:26:c3:c7:c5:8c:aa:6f:
f5:c0:d7:29:65:5c:fa:4d:f4:af:1b:29:5f:03:aa:a1:59:45:
61:e6:b2:cd:58:98:9d:51:00:3e:e0:c7:23:40:7d:ca:0d:e2:
3d:46:87:bf:28:8d:26:aa:86:97:a0:e8:19:7f:57:7f:13:c4:
51:00:b4:ce:ae:4d:9d:30:91:a3:c4:92:cc:29:a0:67:4b:a8:
0c:d2:94:ae:2b:5d:c4:d9:72:d7:c9:2a:a2:cb:96:39:6b:d7:
78:d9:a9:b4:30:1b:3b:5d:1a:8a:9b:92:0a:53:cb:a9:3e:95:
ad:59:04:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOUkF/HXPWOsKYIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk
MDQzN2I3NDgtYzliNS00MDIyLTgyOTMtN2Q5NTEwOTUwNTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVahXJ+QTbKq50qmTqHlgZuJjX5rtfQccQLQ
M/oDNpu4ZcvuB4Juk8/esui8nul3E8d7XTEwxugAcEqpYqpdhdX14sm4ATQovasW
ceDI+AbKFvowbevjKGSXvMtOixQG0l2WmremyT+h1HoG/lSPIvcFEpSHtGT0KLBw
ao2o7rh1GENWNP8/d4YoPsdhhEJf/bG0TR2dihGSVT+cCsxkNiNndIJp/tL1Ib0y
EUnq9KVtYSlL9jVfSYUBCzzSUo3hstrzAxrVjKu5z8WfWT+Fff55DOa22Z4nuxU0
kER3V1sGgzLZIE+4nGzQp2/cFbyXkGSnrXG3yu3bSrhOMpVpvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHOua9FassTxoRzoJ+z+wp7gvx1+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYWI5ODlkMGMtNzNiNy0z
MTM1LThmOTQtOThiYjBhYWJjNDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEobhgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHbC62R2LRQ+4qs52hM6PYbCn4bYwkBp7cn9GG44mkzeBKCszOp1Y5O8
Nv94MYRvMqaspqp3k72bohf4TiA3jg1QMKaEcbersUjQfoafbIAyhjeA20oYy/uQ
t1xz9oxoTRwJiyNUdzKuydvK9gUkeyvOI8l+Hpf6Pe5hQBmNeoJfe7Alyv5K9of4
JsPHxYyqb/XA1yllXPpN9K8bKV8DqqFZRWHmss1YmJ1RAD7gxyNAfcoN4j1Gh78o
jSaqhpeg6Bl/V38TxFEAtM6uTZ0wkaPEkswpoGdLqAzSlK4rXcTZctfJKqLLljlr
13jZqbQwGztdGoqbkgpTy6k+la1ZBBY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:03:02 2025 by rpki-client