Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/b08285ee-0972-329c-81d0-7964b995c67b.roa
File: b08285ee-0972-329c-81d0-7964b995c67b.roa (raw, json)
Hash identifier: f+Qkivh9QpZvDe/LplSV7CSFelZJpR75ukgz8PcGx90=
Subject key identifier: BF:E6:F0:82:4A:8C:8F:74:E3:29:17:1E:8F:C5:3E:3E:2D:B2:1C:C5
Certificate issuer: /CN=25b2aa03-de5a-47a9-a381-cc2b27451c28
Certificate serial: 010D0C9F4328584921840C7993E4D5C0FE051230
Authority key identifier: 5B:0B:DB:7D:FA:63:5C:11:D0:D8:3A:BB:9D:F3:35:9E:BE:A5:2B:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/b08285ee-0972-329c-81d0-7964b995c67b.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 376
IP address blocks: 206.167.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:0c:79:93:e4:d5:c0:fe:05:12:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b2aa03-de5a-47a9-a381-cc2b27451c28
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=316ad400-f040-4a61-bbd4-861017833996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bb:b6:bd:0b:5e:66:86:84:08:6b:44:35:06:
ec:2f:99:a0:ca:27:08:a7:0a:88:3e:1c:d4:dd:de:
5c:67:12:35:86:73:73:25:8c:26:e1:e3:b6:87:e0:
cd:82:84:1e:88:c9:44:c3:f4:06:59:34:60:04:82:
5a:1f:73:ce:dc:ca:19:42:00:e6:a0:58:4f:bf:7d:
0a:17:b6:1b:de:a3:82:12:98:04:05:f4:2d:36:6a:
fc:7e:75:db:b9:44:1a:15:55:d6:e5:49:10:75:a3:
28:90:b4:4e:04:b0:f9:09:87:be:5a:71:8e:20:30:
61:88:b4:9e:94:75:eb:48:bd:ae:53:85:ef:94:96:
07:73:77:70:b0:38:64:54:00:f2:51:bb:20:6f:77:
98:83:1e:9f:8a:0a:84:78:bb:f0:99:0e:0f:4a:99:
d1:20:18:ed:4a:45:81:a5:11:1c:d9:ac:cf:34:f9:
ae:97:78:29:a7:5e:d1:21:7c:c4:79:ab:47:8d:28:
4e:84:ff:c8:d2:67:63:46:c2:99:04:97:39:97:16:
e1:b7:c6:a8:36:27:af:45:36:9b:82:97:65:84:6a:
f7:a2:6a:3e:46:b0:37:fa:5a:fd:1d:a1:cc:68:cb:
bc:2d:c7:d4:09:52:5a:35:e3:7f:8d:80:07:11:e1:
9d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E6:F0:82:4A:8C:8F:74:E3:29:17:1E:8F:C5:3E:3E:2D:B2:1C:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/b08285ee-0972-329c-81d0-7964b995c67b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/25b2aa03-de5a-47a9-a381-cc2b27451c28.crl
X509v3 Authority Key Identifier:
keyid:5B:0B:DB:7D:FA:63:5C:11:D0:D8:3A:BB:9D:F3:35:9E:BE:A5:2B:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28.cer
sbgp-ipAddrBlock: critical
IPv4:
206.167.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:d3:5b:e3:81:8f:eb:fa:d9:f1:f3:65:00:09:57:d7:db:0d:
fd:f5:2d:3c:a1:84:fb:6b:d3:af:22:41:7b:bc:56:1b:5d:4a:
c8:c7:0e:e2:a0:fa:93:18:b2:dd:cb:f3:ee:d5:bf:2e:84:11:
c9:ad:08:6a:67:cd:d1:4b:28:29:a0:ad:d8:47:02:da:58:f6:
a8:f8:d6:ec:87:33:03:68:71:71:7a:7c:84:9e:a3:de:cb:d9:
2d:05:94:12:33:ed:cd:a7:2b:5c:53:0c:97:f1:f6:72:d4:42:
3c:f1:c9:80:b7:22:9a:36:48:e7:97:09:15:01:a0:1a:aa:16:
d5:91:bf:b7:61:aa:c2:84:8f:bc:d5:36:83:b5:75:07:2c:bc:
c6:cd:9d:55:e9:f8:bd:e9:30:c2:57:30:37:c5:c1:e3:e3:fd:
cf:77:4f:f6:e9:ad:f6:55:3f:07:ee:1a:60:c3:85:3b:75:71:
6d:fa:4b:aa:2a:c3:92:5c:43:05:d6:2c:fb:74:e0:17:dc:2b:
43:98:e1:77:df:a3:9e:5a:41:d7:4b:69:e8:67:66:e0:7f:3d:
10:5a:96:cf:9f:bb:ff:44:08:32:e6:3a:f7:79:e5:6b:a3:d6:
1f:32:1d:50:05:00:c4:1a:b5:ff:da:81:f5:bd:10:58:8b:5a:
79:b3:1d:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhAx5k+TVwP4FEjAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjViMmFhMDMtZGU1YS00N2E5LWEzODEtY2MyYjI3NDUx
YzI4MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
MzE2YWQ0MDAtZjA0MC00YTYxLWJiZDQtODYxMDE3ODMzOTk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibu2vQteZoaECGtENQbsL5mgyicIpwqIPhzU
3d5cZxI1hnNzJYwm4eO2h+DNgoQeiMlEw/QGWTRgBIJaH3PO3MoZQgDmoFhPv30K
F7Yb3qOCEpgEBfQtNmr8fnXbuUQaFVXW5UkQdaMokLROBLD5CYe+WnGOIDBhiLSe
lHXrSL2uU4XvlJYHc3dwsDhkVADyUbsgb3eYgx6figqEeLvwmQ4PSpnRIBjtSkWB
pREc2azPNPmul3gpp17RIXzEeatHjShOhP/I0mdjRsKZBJc5lxbht8aoNievRTab
gpdlhGr3omo+RrA3+lr9HaHMaMu8LcfUCVJaNeN/jYAHEeGd5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL/m8IJKjI904ykXHo/FPj4tshzFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yNWIy
YWEwMy1kZTVhLTQ3YTktYTM4MS1jYzJiMjc0NTFjMjgvYjA4Mjg1ZWUtMDk3Mi0z
MjljLTgxZDAtNzk2NGI5OTVjNjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjViMmFhMDMtZGU1YS00N2E5LWEz
ODEtY2MyYjI3NDUxYzI4LzI1YjJhYTAzLWRlNWEtNDdhOS1hMzgxLWNjMmIyNzQ1
MWMyOC5jcmwwHwYDVR0jBBgwFoAUWwvbffpjXBHQ2Dq7nfM1nr6lKw4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yNWIyYWEwMy1kZTVhLTQ3YTktYTM4MS1jYzJi
Mjc0NTFjMjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzqcoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADDTW+OBj+v62fHzZQAJV9fbDf31LTyhhPtr068iQXu8VhtdSsjHDuKg
+pMYst3L8+7Vvy6EEcmtCGpnzdFLKCmgrdhHAtpY9qj41uyHMwNocXF6fISeo97L
2S0FlBIz7c2nK1xTDJfx9nLUQjzxyYC3Ipo2SOeXCRUBoBqqFtWRv7dhqsKEj7zV
NoO1dQcsvMbNnVXp+L3pMMJXMDfFwePj/c93T/bprfZVPwfuGmDDhTt1cW36S6oq
w5JcQwXWLPt04BfcK0OY4Xffo55aQddLaehnZuB/PRBals+fu/9ECDLmOvd55Wuj
1h8yHVAFAMQatf/agfW9EFiLWnmzHR4=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:11:17 2025 by rpki-client