Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/4de3ff13-69a0-3064-b65a-2ac9b6b3f672.roa
File: 4de3ff13-69a0-3064-b65a-2ac9b6b3f672.roa (raw, json)
Hash identifier: 56Dn/+zeUoXkU891ZAG00YqYteGIeD1B/ZR60emw4iM=
Subject key identifier: B5:7E:33:0B:4F:86:3D:51:01:77:A3:22:B4:8C:3D:0F:F6:26:B5:ED
Certificate issuer: /CN=a110574b-b0a8-4116-8fba-63e69eba9d92
Certificate serial: 010D0C9F4328584937D933F6AB48C04CBE8CEB00
Authority key identifier: 85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/4de3ff13-69a0-3064-b65a-2ac9b6b3f672.roa
Signing time: Mon 17 Mar 2025 13:00:52 +0000
ROA not before: Mon 17 Mar 2025 13:00:52 +0000
ROA not after: Sun 15 Jun 2025 13:00:52 +0000
asID: 31942
IP address blocks: 143.223.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:37:d9:33:f6:ab:48:c0:4c:be:8c:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a110574b-b0a8-4116-8fba-63e69eba9d92
Validity
Not Before: Mar 17 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=70c2e840-78a6-47cf-b865-3e41c0581869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:58:f6:79:31:5f:fd:8d:51:29:90:10:82:f8:
88:76:21:ca:fe:9a:a2:98:c3:61:04:e7:2a:1c:2b:
1e:ad:fb:30:23:49:28:61:03:77:dc:0c:f1:19:1f:
96:b6:a2:66:e5:bb:a6:23:50:b1:72:2a:d1:94:a2:
9a:4e:2e:ec:09:30:f5:73:e7:43:9d:9f:93:a0:87:
fd:d6:6c:6f:19:a5:eb:d8:d0:a8:46:c1:d0:9c:61:
17:0f:bf:c0:75:a8:4d:9a:d9:cd:f4:d0:61:dc:b6:
5a:78:c6:27:39:2b:ce:75:fe:9f:21:7a:7e:22:73:
50:45:79:2a:e3:a2:55:19:e6:e9:41:f3:ad:36:2c:
3c:a6:76:14:46:ed:bd:a1:d2:03:dd:16:a4:b6:7a:
8b:b1:35:f0:98:17:ba:f7:88:aa:7b:40:26:e6:53:
05:8d:e7:8b:75:b8:ee:8b:3f:b8:84:34:fa:d2:be:
02:a1:1d:00:ca:6a:2f:c7:93:64:42:84:b1:d3:58:
0a:d3:65:dc:2e:aa:14:8b:93:75:bb:f9:ad:15:29:
4f:4c:65:be:96:ac:d6:18:c3:e3:9b:ce:de:fc:c3:
c7:8d:99:27:39:e5:45:32:99:35:a5:83:e1:38:ae:
1a:de:f2:dc:46:98:a7:be:34:d2:b1:a4:1b:9e:0d:
ef:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7E:33:0B:4F:86:3D:51:01:77:A3:22:B4:8C:3D:0F:F6:26:B5:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/4de3ff13-69a0-3064-b65a-2ac9b6b3f672.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.crl
X509v3 Authority Key Identifier:
keyid:85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer
sbgp-ipAddrBlock: critical
IPv4:
143.223.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:1a:7c:20:13:38:ec:30:ac:51:8d:6e:9f:52:71:67:70:96:
b3:d5:9a:8f:58:67:25:18:0e:e9:53:2d:10:69:46:69:63:29:
11:2e:90:1d:23:b2:5d:17:fc:5d:08:a1:8f:16:03:82:f3:30:
40:93:c4:53:a3:19:7e:ef:4d:18:bc:eb:c2:3a:56:cc:09:28:
6e:b9:01:52:9c:f6:8b:f2:c9:e0:6d:6c:35:06:65:84:99:26:
2a:e3:19:cd:53:e1:c4:7c:c3:1d:57:31:be:da:4b:23:14:35:
37:d1:cc:04:a9:83:b3:a6:9c:52:64:ee:7f:aa:c5:f4:20:a2:
2a:b0:8a:5e:33:fe:b8:5c:36:df:b8:31:0c:c3:23:05:de:0c:
6d:08:0f:21:91:13:54:95:84:33:67:02:a6:b4:2e:a3:49:71:
34:a4:cf:b8:d6:b0:00:96:f3:94:01:48:c7:1a:ca:82:7e:b7:
64:de:58:43:09:3c:70:93:b6:10:5c:a1:cd:eb:91:f4:65:85:
99:f5:5a:1c:96:02:d7:66:92:62:7e:d8:79:aa:3e:4a:92:59:
e8:02:dd:29:7e:14:26:93:5b:16:3e:3d:bb:3e:36:e9:a8:ea:
14:17:2d:65:66:48:de:ad:eb:db:b7:80:7a:cb:3a:12:4e:8b:
9e:55:fe:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk32TP2q0jATL6M6wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTExMDU3NGItYjBhOC00MTE2LThmYmEtNjNlNjllYmE5
ZDkyMB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk
NzBjMmU4NDAtNzhhNi00N2NmLWI4NjUtM2U0MWMwNTgxODY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlj2eTFf/Y1RKZAQgviIdiHK/pqimMNhBOcq
HCserfswI0koYQN33AzxGR+WtqJm5bumI1CxcirRlKKaTi7sCTD1c+dDnZ+ToIf9
1mxvGaXr2NCoRsHQnGEXD7/AdahNmtnN9NBh3LZaeMYnOSvOdf6fIXp+InNQRXkq
46JVGebpQfOtNiw8pnYURu29odID3RaktnqLsTXwmBe694iqe0Am5lMFjeeLdbju
iz+4hDT60r4CoR0Aymovx5NkQoSx01gK02XcLqoUi5N1u/mtFSlPTGW+lqzWGMPj
m87e/MPHjZknOeVFMpk1pYPhOK4a3vLcRpinvjTSsaQbng3vkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLV+MwtPhj1RAXejIrSMPQ/2JrXtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMTEw
NTc0Yi1iMGE4LTQxMTYtOGZiYS02M2U2OWViYTlkOTIvNGRlM2ZmMTMtNjlhMC0z
MDY0LWI2NWEtMmFjOWI2YjNmNjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTExMDU3NGItYjBhOC00MTE2LThm
YmEtNjNlNjllYmE5ZDkyL2ExMTA1NzRiLWIwYTgtNDExNi04ZmJhLTYzZTY5ZWJh
OWQ5Mi5jcmwwHwYDVR0jBBgwFoAUhXIn2CcZk3NA37m6vD9oxagZ474wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hMTEwNTc0Yi1iMGE4LTQxMTYtOGZiYS02M2U2
OWViYTlkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEj9+QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIkafCATOOwwrFGNbp9ScWdwlrPVmo9YZyUYDulTLRBpRmljKREukB0j
sl0X/F0IoY8WA4LzMECTxFOjGX7vTRi868I6VswJKG65AVKc9ovyyeBtbDUGZYSZ
JirjGc1T4cR8wx1XMb7aSyMUNTfRzASpg7OmnFJk7n+qxfQgoiqwil4z/rhcNt+4
MQzDIwXeDG0IDyGRE1SVhDNnAqa0LqNJcTSkz7jWsACW85QBSMcayoJ+t2TeWEMJ
PHCTthBcoc3rkfRlhZn1WhyWAtdmkmJ+2HmqPkqSWegC3Sl+FCaTWxY+Pbs+Numo
6hQXLWVmSN6t69u3gHrLOhJOi55V/h4=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:12:33 2025 by rpki-client