Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac/3fe8f075-bd7a-3a38-ac88-4927e92f276b.roa
File: 3fe8f075-bd7a-3a38-ac88-4927e92f276b.roa (raw, json)
Hash identifier: 0aI3J+vNU1WHu7ahYeJ8aA3F3QjyQKcrmodoSEJRqvc=
Subject key identifier: 89:7C:7C:86:7C:D0:8D:3D:B2:6F:C1:F4:93:A2:D5:A2:71:BB:95:E4
Certificate issuer: /CN=a1db5c09-4590-44b5-8023-fa4bdd8d5bac
Certificate serial: 010D0C9F43285849248D9F0030E70ED389364980
Authority key identifier: EE:BC:02:B2:23:67:F2:6A:51:5A:16:7F:5E:72:23:BC:96:0D:40:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac/3fe8f075-bd7a-3a38-ac88-4927e92f276b.roa
Signing time: Mon 10 Mar 2025 15:08:16 +0000
ROA not before: Mon 10 Mar 2025 15:08:16 +0000
ROA not after: Sun 08 Jun 2025 15:08:16 +0000
asID: 63134
IP address blocks: 61.8.176.0/20 maxlen: 24
76.164.216.0/22 maxlen: 24
169.150.4.0/22 maxlen: 24
199.91.240.0/21 maxlen: 24
199.204.184.0/22 maxlen: 24
205.173.160.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:8d:9f:00:30:e7:0e:d3:89:36:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1db5c09-4590-44b5-8023-fa4bdd8d5bac
Validity
Not Before: Mar 10 15:08:16 2025 GMT
Not After : Jun 8 15:08:16 2025 GMT
Subject: CN=819c8d99-86e6-4ab8-a860-4d367a752365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f1:d0:93:89:73:ed:ce:c9:53:04:0b:ca:55:
85:cf:c1:26:a0:52:b1:0c:f2:1d:88:17:7a:7f:6b:
56:72:f5:89:9f:4e:72:36:c4:1b:2d:42:35:8a:79:
67:5d:35:1f:08:32:41:cc:2c:13:67:73:d2:ae:d7:
b1:52:58:20:33:22:9e:57:4f:f7:76:a7:09:1c:c5:
c1:a8:ad:db:76:46:93:36:90:7d:10:63:fc:fd:f1:
d9:d0:57:95:81:36:4b:a7:56:42:71:0f:ae:65:46:
44:a1:45:fa:22:7e:e4:a7:96:c9:67:9b:ae:73:2b:
20:66:66:40:29:f5:ac:4f:17:9f:84:ef:e1:b2:d6:
9f:8c:12:0a:8c:dc:73:07:0d:c7:05:f8:3e:da:0d:
06:91:8b:97:8c:cd:37:7a:09:f4:43:f7:ed:70:27:
1b:77:b7:c8:9e:c7:87:97:ff:bd:b6:13:c0:8e:68:
50:63:55:f9:1f:5b:43:02:34:86:0e:bb:b3:8e:cf:
69:19:c0:c0:2c:30:21:99:aa:44:b5:44:03:7f:12:
1f:4d:17:7c:c3:40:8a:2d:40:61:49:b3:55:57:b0:
99:b7:5d:6b:e5:30:46:8c:d6:04:25:b2:a4:0c:f2:
af:9a:86:b6:e1:7c:2b:eb:d2:d6:aa:a6:e5:25:6d:
2b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7C:7C:86:7C:D0:8D:3D:B2:6F:C1:F4:93:A2:D5:A2:71:BB:95:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac/3fe8f075-bd7a-3a38-ac88-4927e92f276b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.crl
X509v3 Authority Key Identifier:
keyid:EE:BC:02:B2:23:67:F2:6A:51:5A:16:7F:5E:72:23:BC:96:0D:40:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.cer
sbgp-ipAddrBlock: critical
IPv4:
61.8.176.0/20
76.164.216.0/22
169.150.4.0/22
199.91.240.0/21
199.204.184.0/22
205.173.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:ed:9a:39:e6:8a:17:34:69:a3:99:4f:ce:27:e5:6f:a3:76:
f4:b3:3f:11:63:f7:bc:05:2f:99:58:38:ae:c3:67:8f:1b:7a:
bc:4b:6e:b4:e9:68:e7:f9:a7:0d:c7:9f:49:e1:e1:9d:74:e4:
fd:70:a7:de:63:6c:cc:e4:04:88:2c:6f:06:d9:b9:a2:93:de:
f9:80:4f:a7:25:6d:ab:e6:0b:e8:13:0f:79:09:56:bc:9d:7c:
02:12:ae:24:68:fe:e5:87:99:9f:56:e9:87:4e:72:4d:d6:6b:
1b:4c:7c:68:12:67:9f:cc:b0:2e:1a:06:27:a6:87:59:fe:f3:
22:b5:7a:e0:b3:1b:85:8d:e5:30:ed:65:d8:31:d4:91:93:ec:
1e:4e:a2:0b:7a:23:3f:61:15:c7:e3:43:03:4c:81:26:5b:0b:
a6:d1:40:db:aa:50:1c:24:b7:67:c8:3b:0a:31:7d:4c:73:a0:
5d:fc:ed:09:4f:6f:e5:08:d9:ac:65:28:e5:45:2a:c6:d7:29:
83:5a:8d:4a:2a:6a:75:5d:11:9b:16:24:45:d6:ea:fc:34:d4:
31:0e:c1:ad:0e:5f:72:a9:60:82:77:61:bd:e3:ed:91:32:6d:
41:4b:8a:41:4c:71:68:b7:49:6d:89:81:d1:87:1a:66:fa:05:
b6:fe:b0:b7
-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEkkjZ8AMOcO04k2SYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTFkYjVjMDktNDU5MC00NGI1LTgwMjMtZmE0YmRkOGQ1
YmFjMB4XDTI1MDMxMDE1MDgxNloXDTI1MDYwODE1MDgxNlowLzEtMCsGA1UEAxMk
ODE5YzhkOTktODZlNi00YWI4LWE4NjAtNGQzNjdhNzUyMzY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfHQk4lz7c7JUwQLylWFz8EmoFKxDPIdiBd6
f2tWcvWJn05yNsQbLUI1inlnXTUfCDJBzCwTZ3PSrtexUlggMyKeV0/3dqcJHMXB
qK3bdkaTNpB9EGP8/fHZ0FeVgTZLp1ZCcQ+uZUZEoUX6In7kp5bJZ5uucysgZmZA
KfWsTxefhO/hstafjBIKjNxzBw3HBfg+2g0GkYuXjM03egn0Q/ftcCcbd7fInseH
l/+9thPAjmhQY1X5H1tDAjSGDruzjs9pGcDALDAhmapEtUQDfxIfTRd8w0CKLUBh
SbNVV7CZt11r5TBGjNYEJbKkDPKvmoa24Xwr69LWqqblJW0rlQIDAQABo4IDczCC
A28wHQYDVR0OBBYEFIl8fIZ80I09sm/B9JOi1aJxu5XkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hMWRi
NWMwOS00NTkwLTQ0YjUtODAyMy1mYTRiZGQ4ZDViYWMvM2ZlOGYwNzUtYmQ3YS0z
YTM4LWFjODgtNDkyN2U5MmYyNzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTFkYjVjMDktNDU5MC00NGI1LTgw
MjMtZmE0YmRkOGQ1YmFjL2ExZGI1YzA5LTQ1OTAtNDRiNS04MDIzLWZhNGJkZDhk
NWJhYy5jcmwwHwYDVR0jBBgwFoAU7rwCsiNn8mpRWhZ/XnIjvJYNQKIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hMWRiNWMwOS00NTkwLTQ0YjUtODAyMy1mYTRi
ZGQ4ZDViYWMuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQEPQiwAwQC
TKTYAwQCqZYEAwQDx1vwAwQCx8y4AwQDza2gMFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAF3tmjnmihc0aaOZ
T84n5W+jdvSzPxFj97wFL5lYOK7DZ48berxLbrTpaOf5pw3Hn0nh4Z105P1wp95j
bMzkBIgsbwbZuaKT3vmAT6clbavmC+gTD3kJVrydfAISriRo/uWHmZ9W6YdOck3W
axtMfGgSZ5/MsC4aBiemh1n+8yK1euCzG4WN5TDtZdgx1JGT7B5Oogt6Iz9hFcfj
QwNMgSZbC6bRQNuqUBwkt2fIOwoxfUxzoF387QlPb+UI2axlKOVFKsbXKYNajUoq
anVdEZsWJEXW6vw01DEOwa0OX3KpYIJ3Yb3j7ZEybUFLikFMcWi3SW2JgdGHGmb6
Bbb+sLc=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:25:50 2025 by rpki-client