Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/e9a8dbb6-59c9-3605-abd1-5c159577fde7.roa
File: e9a8dbb6-59c9-3605-abd1-5c159577fde7.roa (raw, json)
Hash identifier: h51pHy6CHyUWsYA9bYqOA89umEoWHIl+Bui8RSH1GDI=
Subject key identifier: BB:52:2D:81:37:2F:0D:2A:EC:9E:C4:A7:5B:C9:72:5B:D6:8C:66:42
Certificate issuer: /CN=d862b5c6-40a1-4249-a26e-11938a702985
Certificate serial: 010D0C9F432858494B641A332E17CD740F107180
Authority key identifier: 81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/e9a8dbb6-59c9-3605-abd1-5c159577fde7.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 15257
IP address blocks: 173.195.225.0/24 maxlen: 24
173.195.226.0/24 maxlen: 24
173.195.227.0/24 maxlen: 24
173.195.228.0/24 maxlen: 24
173.195.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:1a:33:2e:17:cd:74:0f:10:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d862b5c6-40a1-4249-a26e-11938a702985
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=847fdc69-a9d1-4854-8517-9c50c0094903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:72:56:49:6b:0d:12:fa:8a:8e:17:b7:ff:8c:
c5:f9:fd:e7:a6:cc:28:ac:92:e1:4c:89:2d:ac:08:
8e:99:ce:d4:08:b7:e1:5f:fc:9e:2a:71:e4:4c:37:
88:e4:9a:3e:f8:77:cb:f3:c9:09:59:00:6c:f5:55:
1a:ef:9d:64:97:f4:9c:cc:91:d5:8f:b2:93:3e:14:
53:76:7a:7f:cb:98:1d:2c:26:dc:a1:a8:56:6b:44:
b5:57:38:84:0f:db:b1:f8:9a:1a:aa:a3:ff:d3:73:
6f:20:6e:af:19:df:f3:81:00:86:88:8c:e1:9d:12:
95:9a:2c:f0:6d:a1:8a:82:9d:29:d9:11:4a:24:8e:
be:c1:e5:63:f9:a0:91:d2:51:5d:81:56:4d:b8:61:
f5:c7:fd:5a:be:61:8e:1e:66:0b:40:18:37:e0:68:
20:21:75:93:b6:c8:df:2f:2c:e1:65:fe:5d:30:96:
3a:f9:fa:2a:ae:04:4f:b2:16:bf:0d:7f:e7:90:ea:
b4:12:47:42:fc:29:1c:96:71:df:a8:18:9e:b9:aa:
a6:98:8b:c9:f6:89:cd:4d:55:f1:b8:a1:7c:88:3d:
37:66:34:80:9e:a8:c1:32:5a:24:42:d6:cf:3e:e9:
fd:46:46:18:b5:d2:fd:4b:c2:5d:e9:48:53:a6:e7:
8a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:52:2D:81:37:2F:0D:2A:EC:9E:C4:A7:5B:C9:72:5B:D6:8C:66:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/e9a8dbb6-59c9-3605-abd1-5c159577fde7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl
X509v3 Authority Key Identifier:
keyid:81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
sbgp-ipAddrBlock: critical
IPv4:
173.195.225.0-173.195.229.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:56:ee:7c:1a:a6:b4:39:16:6a:9e:2d:e1:bc:51:5e:43:ec:
f6:8f:e0:c3:f8:23:61:5c:ca:47:97:8b:d4:28:28:a4:5d:f5:
61:36:2a:93:3a:66:06:29:1d:bd:5c:b1:c2:64:71:8d:25:c8:
4b:0c:9f:fa:da:0b:84:10:d1:22:6c:8b:da:39:87:97:a4:4b:
0a:ac:b0:3a:49:87:bd:3a:e5:da:a6:e4:99:2b:c5:4d:51:3d:
df:5d:a7:9f:a9:3a:a5:2c:fc:e6:83:af:34:7f:8a:62:dc:b5:
2d:5f:8b:9e:1b:fa:41:a6:9c:b7:1a:53:3c:fe:cf:2a:d8:d6:
9e:ee:65:d7:f5:c3:c7:a3:b1:b2:e1:d6:96:72:af:69:5a:34:
e9:f9:6a:9e:3d:68:03:63:42:c7:b2:74:39:79:7b:41:7f:99:
6d:92:55:f8:5e:ea:69:a3:14:27:85:cf:e9:11:1c:b4:6a:3c:
42:51:76:cd:62:59:fe:58:23:63:86:36:51:8b:9d:2b:8a:90:
2c:ee:18:86:41:5e:39:04:0d:9b:d1:6e:ad:ec:47:08:e8:ef:
93:82:6a:25:4b:a9:a5:90:df:82:de:92:80:a4:a3:f9:af:29:
c5:a5:d0:b4:1f:cf:fb:ef:91:0c:88:4a:3e:c0:38:a7:04:9f:
e4:2b:76:b8
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWElLZBozLhfNdA8QcYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDg2MmI1YzYtNDBhMS00MjQ5LWEyNmUtMTE5MzhhNzAy
OTg1MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk
ODQ3ZmRjNjktYTlkMS00ODU0LTg1MTctOWM1MGMwMDk0OTAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnJWSWsNEvqKjhe3/4zF+f3npsworJLhTIkt
rAiOmc7UCLfhX/yeKnHkTDeI5Jo++HfL88kJWQBs9VUa751kl/SczJHVj7KTPhRT
dnp/y5gdLCbcoahWa0S1VziED9ux+JoaqqP/03NvIG6vGd/zgQCGiIzhnRKVmizw
baGKgp0p2RFKJI6+weVj+aCR0lFdgVZNuGH1x/1avmGOHmYLQBg34GggIXWTtsjf
LyzhZf5dMJY6+foqrgRPsha/DX/nkOq0EkdC/CkclnHfqBieuaqmmIvJ9onNTVXx
uKF8iD03ZjSAnqjBMlokQtbPPun9RkYYtdL9S8Jd6UhTpueKYQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFLtSLYE3Lw0q7J7Ep1vJclvWjGZCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kODYy
YjVjNi00MGExLTQyNDktYTI2ZS0xMTkzOGE3MDI5ODUvZTlhOGRiYjYtNTljOS0z
NjA1LWFiZDEtNWMxNTk1NzdmZGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDg2MmI1YzYtNDBhMS00MjQ5LWEy
NmUtMTE5MzhhNzAyOTg1L2Q4NjJiNWM2LTQwYTEtNDI0OS1hMjZlLTExOTM4YTcw
Mjk4NS5jcmwwHwYDVR0jBBgwFoAUgfwOi4Mvut7//KOFwjE85iiqGdAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9kODYyYjVjNi00MGExLTQyNDktYTI2ZS0xMTkz
OGE3MDI5ODUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACtw+ED
BAGtw+QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAVlbufBqmtDkWap4t4bxRXkPs9o/gw/gjYVzKR5eL1Cgo
pF31YTYqkzpmBikdvVyxwmRxjSXISwyf+toLhBDRImyL2jmHl6RLCqywOkmHvTrl
2qbkmSvFTVE9312nn6k6pSz85oOvNH+KYty1LV+Lnhv6QaactxpTPP7PKtjWnu5l
1/XDx6OxsuHWlnKvaVo06flqnj1oA2NCx7J0OXl7QX+ZbZJV+F7qaaMUJ4XP6REc
tGo8QlF2zWJZ/lgjY4Y2UYudK4qQLO4YhkFeOQQNm9FurexHCOjvk4JqJUuppZDf
gt6SgKSj+a8pxaXQtB/P+++RDIhKPsA4pwSf5Ct2uA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:40:01 2025 by rpki-client