Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7770a50c-77e6-44f7-a21f-758565d6c035/c6ef6392-468c-3111-9e1b-bd5090a8ae6a.roa
File: c6ef6392-468c-3111-9e1b-bd5090a8ae6a.roa (raw, json)
Hash identifier: rkGM92RBMjBifluPTEMdut3dtCd536GXbbh+dGZHbko=
Subject key identifier: A3:D4:96:4B:11:B5:1A:D7:9A:C2:AE:75:D7:09:90:FE:B9:48:99:F6
Certificate issuer: /CN=7770a50c-77e6-44f7-a21f-758565d6c035
Certificate serial: 010D0C9F4328584913AC3327541EF7D09B0085C0
Authority key identifier: 3D:C1:06:0C:56:1B:D4:86:99:F4:AA:D6:9A:65:D7:DE:B2:4E:87:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7770a50c-77e6-44f7-a21f-758565d6c035.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7770a50c-77e6-44f7-a21f-758565d6c035/c6ef6392-468c-3111-9e1b-bd5090a8ae6a.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 32638
IP address blocks: 192.75.12.0/24 maxlen: 24
192.197.151.0/24 maxlen: 24
192.197.152.0/24 maxlen: 24
192.197.153.0/24 maxlen: 24
192.197.154.0/24 maxlen: 24
204.225.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:33:27:54:1e:f7:d0:9b:00:85:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770a50c-77e6-44f7-a21f-758565d6c035
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=b7c5de70-f892-43fd-ab36-d4815795fc7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a5:e2:00:a1:72:14:9f:d6:a3:62:b0:0b:dd:
ea:ca:88:50:71:13:f7:5f:5f:6c:89:de:80:35:09:
a7:0d:48:f7:17:c7:bf:4d:2c:38:30:b7:72:3d:2f:
0f:9a:76:bb:f4:d1:b2:59:69:28:e7:7b:f2:df:91:
1a:0a:a0:89:3c:0e:5d:30:2a:14:9d:7d:4b:03:53:
15:fa:0f:5a:70:16:40:86:45:b1:a2:d7:62:b1:eb:
d0:49:70:37:f7:4b:c4:e5:1f:d5:4c:46:30:cb:4b:
71:fb:80:94:84:15:a9:8c:ac:6f:6f:25:31:68:a2:
c3:de:7e:c6:20:64:01:7d:b7:f1:3d:6e:79:e3:14:
95:65:df:8a:95:0d:0e:2e:01:11:09:e8:b1:1e:09:
66:85:fe:62:32:2c:41:76:96:b4:29:57:f7:6f:2a:
ae:52:49:58:ed:55:64:d5:ab:de:df:08:40:a1:0a:
28:2c:88:72:70:81:f2:c9:7f:61:28:ae:24:e3:d8:
a4:7c:02:43:42:7b:c8:e4:35:95:bd:d1:02:3e:b2:
ff:be:9f:e4:20:1c:69:f6:2a:f6:2d:bc:cd:ef:fd:
fc:d7:7c:2b:5f:71:01:74:5c:bb:3d:d4:dc:61:d9:
90:07:05:c2:cc:c5:7c:c5:85:d5:6f:a0:33:aa:0f:
0c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D4:96:4B:11:B5:1A:D7:9A:C2:AE:75:D7:09:90:FE:B9:48:99:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7770a50c-77e6-44f7-a21f-758565d6c035/c6ef6392-468c-3111-9e1b-bd5090a8ae6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7770a50c-77e6-44f7-a21f-758565d6c035/7770a50c-77e6-44f7-a21f-758565d6c035.crl
X509v3 Authority Key Identifier:
keyid:3D:C1:06:0C:56:1B:D4:86:99:F4:AA:D6:9A:65:D7:DE:B2:4E:87:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7770a50c-77e6-44f7-a21f-758565d6c035.cer
sbgp-ipAddrBlock: critical
IPv4:
192.75.12.0/24
192.197.151.0-192.197.154.255
204.225.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:8a:1c:ce:14:00:6e:76:79:fb:ee:05:be:77:48:4b:ef:ce:
15:09:ab:57:42:11:1d:1d:d5:57:e0:4d:8a:8c:f8:9e:fb:75:
04:ae:8b:89:62:35:ef:10:5f:51:f4:1d:fb:bc:09:27:61:8e:
94:1b:6d:a4:ab:d7:80:20:b9:b6:4b:45:02:1b:b4:e5:a6:bd:
e3:d3:a0:45:c5:dd:b6:6a:32:1b:47:98:00:28:1b:30:fc:41:
18:c6:55:02:4a:67:ba:a2:2d:e1:87:22:45:f6:cc:53:6c:dd:
a6:52:c3:e8:58:a0:30:34:c3:fd:4b:79:81:46:ca:b6:ed:b8:
fc:e4:09:79:7a:a1:e0:1e:85:5c:1c:09:7c:7e:e2:c6:4c:f2:
88:d5:eb:0a:4d:3b:9b:83:28:56:a8:57:e7:dc:b2:e1:b1:41:
4f:01:b2:8a:80:b2:91:0d:9f:34:4b:6a:35:32:74:3e:70:0a:
da:af:db:40:3b:7f:22:29:13:75:b5:2e:09:70:f7:f7:f3:64:
aa:5d:50:97:a7:8d:4a:38:75:0a:21:21:0e:55:a5:93:ce:e7:
07:87:d0:7d:c1:9e:1f:85:96:dc:8c:65:4d:10:fa:24:2d:83:
f3:16:7e:08:cb:5b:4c:71:f5:7c:1c:c2:24:74:01:cb:70:a9:
5b:ae:3c:e2
-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEkTrDMnVB730JsAhcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc3MGE1MGMtNzdlNi00NGY3LWEyMWYtNzU4NTY1ZDZj
MDM1MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk
YjdjNWRlNzAtZjg5Mi00M2ZkLWFiMzYtZDQ4MTU3OTVmYzdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaXiAKFyFJ/Wo2KwC93qyohQcRP3X19sid6A
NQmnDUj3F8e/TSw4MLdyPS8Pmna79NGyWWko53vy35EaCqCJPA5dMCoUnX1LA1MV
+g9acBZAhkWxotdisevQSXA390vE5R/VTEYwy0tx+4CUhBWpjKxvbyUxaKLD3n7G
IGQBfbfxPW554xSVZd+KlQ0OLgERCeixHglmhf5iMixBdpa0KVf3byquUklY7VVk
1ave3whAoQooLIhycIHyyX9hKK4k49ikfAJDQnvI5DWVvdECPrL/vp/kIBxp9ir2
LbzN7/3813wrX3EBdFy7PdTcYdmQBwXCzMV8xYXVb6Azqg8MEwIDAQABo4IDaTCC
A2UwHQYDVR0OBBYEFKPUlksRtRrXmsKuddcJkP65SJn2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83Nzcw
YTUwYy03N2U2LTQ0ZjctYTIxZi03NTg1NjVkNmMwMzUvYzZlZjYzOTItNDY4Yy0z
MTExLTllMWItYmQ1MDkwYThhZTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzc3MGE1MGMtNzdlNi00NGY3LWEy
MWYtNzU4NTY1ZDZjMDM1Lzc3NzBhNTBjLTc3ZTYtNDRmNy1hMjFmLTc1ODU2NWQ2
YzAzNS5jcmwwHwYDVR0jBBgwFoAUPcEGDFYb1IaZ9KrWmmXX3rJOh9YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83NzcwYTUwYy03N2U2LTQ0ZjctYTIxZi03NTg1
NjVkNmMwMzUuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAwEsMMAwD
BADAxZcDBADAxZoDBAPM4QgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgooczhQAbnZ5++4FvndIS+/OFQmr
V0IRHR3VV+BNioz4nvt1BK6LiWI17xBfUfQd+7wJJ2GOlBttpKvXgCC5tktFAhu0
5aa949OgRcXdtmoyG0eYACgbMPxBGMZVAkpnuqIt4YciRfbMU2zdplLD6FigMDTD
/Ut5gUbKtu24/OQJeXqh4B6FXBwJfH7ixkzyiNXrCk07m4MoVqhX59yy4bFBTwGy
ioCykQ2fNEtqNTJ0PnAK2q/bQDt/IikTdbUuCXD39/Nkql1Ql6eNSjh1CiEhDlWl
k87nB4fQfcGeH4WW3IxlTRD6JC2D8xZ+CMtbTHH1fBzCJHQBy3CpW6484g==
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:08:59 2025 by rpki-client