Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/c3f96f2c-52fb-34a3-baed-cb7cd913ee41.roa
File: c3f96f2c-52fb-34a3-baed-cb7cd913ee41.roa (raw, json)
Hash identifier: JXCSjdJ1sjCxfYEGVKZXdEQMcECx1wymFuJeedLClno=
Subject key identifier: DB:0D:4B:CA:61:FE:8B:93:74:85:E7:72:D9:EA:9F:A0:8B:E1:51:A1
Certificate issuer: /CN=ac717083-6970-4d32-8573-0bfa89700c9e
Certificate serial: 010D0C9F43285849244E89423BD8E9E09C1258E0
Authority key identifier: 20:5F:B3:EA:78:E5:E9:47:0A:C5:56:AE:EA:F5:6D:E0:3D:9E:FD:AD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/c3f96f2c-52fb-34a3-baed-cb7cd913ee41.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 802
IP address blocks: 198.96.32.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:89:42:3b:d8:e9:e0:9c:12:58:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac717083-6970-4d32-8573-0bfa89700c9e
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=ead2ac4a-463d-4185-ab76-b6b78171fe2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b9:4f:55:e8:8e:7c:56:98:77:92:90:a6:e3:
41:6d:6e:24:e4:d8:bb:e7:7a:78:c7:f8:30:a5:5b:
cb:50:28:18:0c:a8:16:09:1d:7c:49:98:b7:07:64:
eb:97:19:82:bb:96:79:97:d5:1d:53:dd:32:e6:dd:
3e:2e:65:a2:f5:90:c9:cc:fa:9f:02:b4:5d:07:04:
9f:27:3f:e3:7c:b9:72:b5:92:6f:01:61:c3:19:27:
e1:1c:8e:bd:bb:a3:a4:c4:a4:58:de:9d:4b:40:13:
2c:68:c8:a4:5d:6a:f4:3f:50:38:20:c1:8d:1c:19:
72:e8:6e:b7:24:50:32:38:f9:85:d6:25:86:3d:dc:
e8:63:bb:b8:27:dd:f8:3d:e8:69:d2:b8:9b:07:af:
02:46:92:51:4c:a9:6e:33:16:8d:c8:d8:58:35:88:
e0:2f:dd:97:68:bb:10:cd:f1:e1:59:18:5a:12:3b:
89:f1:57:21:1f:b5:48:a3:ce:23:c2:64:5f:2e:2a:
8d:2c:91:e7:2d:1b:1e:68:cd:38:2c:fd:34:1e:76:
09:9b:19:fc:4c:43:0e:4f:8c:25:08:82:45:03:80:
c5:ab:a1:14:ed:1c:77:f8:9d:82:53:64:7f:ad:97:
f1:b9:db:0e:74:53:d3:62:31:ea:51:d3:b0:1e:80:
4d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0D:4B:CA:61:FE:8B:93:74:85:E7:72:D9:EA:9F:A0:8B:E1:51:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/c3f96f2c-52fb-34a3-baed-cb7cd913ee41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/ac717083-6970-4d32-8573-0bfa89700c9e.crl
X509v3 Authority Key Identifier:
keyid:20:5F:B3:EA:78:E5:E9:47:0A:C5:56:AE:EA:F5:6D:E0:3D:9E:FD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e.cer
sbgp-ipAddrBlock: critical
IPv4:
198.96.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:f4:86:36:4d:3a:cc:50:1d:bf:41:1f:81:2a:04:c3:14:cc:
07:8a:db:b9:25:a1:5e:a3:ac:c6:f5:65:0e:c4:aa:27:3b:9f:
7b:00:b3:72:f9:37:45:16:9d:9c:f4:ce:4d:9b:7f:1b:af:20:
c8:b0:e0:70:e5:53:57:a1:55:69:eb:be:05:29:28:e5:ee:ce:
e8:eb:03:f1:f6:8f:12:e0:4f:30:68:41:d3:67:d3:dd:90:50:
2a:08:15:64:bc:0a:ce:2c:81:61:7c:80:49:43:ff:ad:68:08:
ce:36:1e:13:95:eb:eb:64:ee:bf:71:d1:dd:1b:72:8d:4a:b6:
49:77:94:5b:15:07:44:da:85:73:0d:29:d4:87:5f:95:99:bf:
e1:80:4b:6f:1a:f1:83:50:66:87:8c:61:7a:77:8a:cb:33:d8:
c9:9b:21:dd:4e:48:6b:a6:37:d3:bb:67:2c:3b:07:0c:f4:aa:
41:fb:9f:8d:b5:8e:b7:fd:4c:12:3a:5b:ee:82:e2:06:4a:a6:
52:45:5c:02:04:6f:67:e0:f0:f8:f3:59:74:52:9c:14:c3:c8:
9a:84:cd:e1:ea:7b:b7:25:de:ec:f1:a1:e5:a1:24:c3:8d:a5:
ee:ad:75:c1:80:be:b5:9e:58:d7:d7:88:28:a2:2d:57:f5:fe:
0d:74:53:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTolCO9jp4JwSWOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWM3MTcwODMtNjk3MC00ZDMyLTg1NzMtMGJmYTg5NzAw
YzllMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk
ZWFkMmFjNGEtNDYzZC00MTg1LWFiNzYtYjZiNzgxNzFmZTJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorlPVeiOfFaYd5KQpuNBbW4k5Ni753p4x/gw
pVvLUCgYDKgWCR18SZi3B2TrlxmCu5Z5l9UdU90y5t0+LmWi9ZDJzPqfArRdBwSf
Jz/jfLlytZJvAWHDGSfhHI69u6OkxKRY3p1LQBMsaMikXWr0P1A4IMGNHBly6G63
JFAyOPmF1iWGPdzoY7u4J934Pehp0ribB68CRpJRTKluMxaNyNhYNYjgL92XaLsQ
zfHhWRhaEjuJ8VchH7VIo84jwmRfLiqNLJHnLRseaM04LP00HnYJmxn8TEMOT4wl
CIJFA4DFq6EU7Rx3+J2CU2R/rZfxudsOdFPTYjHqUdOwHoBNQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNsNS8ph/ouTdIXnctnqn6CL4VGhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hYzcx
NzA4My02OTcwLTRkMzItODU3My0wYmZhODk3MDBjOWUvYzNmOTZmMmMtNTJmYi0z
NGEzLWJhZWQtY2I3Y2Q5MTNlZTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWM3MTcwODMtNjk3MC00ZDMyLTg1
NzMtMGJmYTg5NzAwYzllL2FjNzE3MDgzLTY5NzAtNGQzMi04NTczLTBiZmE4OTcw
MGM5ZS5jcmwwHwYDVR0jBBgwFoAUIF+z6njl6UcKxVau6vVt4D2e/a0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hYzcxNzA4My02OTcwLTRkMzItODU3My0wYmZh
ODk3MDBjOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxmAgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFr0hjZNOsxQHb9BH4EqBMMUzAeK27kloV6jrMb1ZQ7Eqic7n3sAs3L5
N0UWnZz0zk2bfxuvIMiw4HDlU1ehVWnrvgUpKOXuzujrA/H2jxLgTzBoQdNn092Q
UCoIFWS8Cs4sgWF8gElD/61oCM42HhOV6+tk7r9x0d0bco1Ktkl3lFsVB0TahXMN
KdSHX5WZv+GAS28a8YNQZoeMYXp3issz2MmbId1OSGumN9O7Zyw7Bwz0qkH7n421
jrf9TBI6W+6C4gZKplJFXAIEb2fg8PjzWXRSnBTDyJqEzeHqe7cl3uzxoeWhJMON
pe6tdcGAvrWeWNfXiCiiLVf1/g10U8o=
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:23:40 2025 by rpki-client