Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec6ed21a-d141-3e7e-a3e8-36ccce30af89.roa
File: ec6ed21a-d141-3e7e-a3e8-36ccce30af89.roa (raw, json)
Hash identifier: A2SR/CuqE5a6LUJhYiAuNKTF9edjZMSAMk46YbNOgg8=
Subject key identifier: 1D:83:5A:D0:D9:D7:73:C3:54:D0:DC:FA:FB:41:19:01:91:DF:5D:3A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848DEA1229855BAB44332DEE7C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec6ed21a-d141-3e7e-a3e8-36ccce30af89.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 36183
IP address blocks: 172.225.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:22:98:55:ba:b4:43:32:de:e7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=e4f5596d-8398-4a5c-8449-5977f919ff4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ab:5b:43:eb:ed:1f:99:24:0f:a9:5b:cd:42:
49:79:fc:36:26:5d:3d:64:9b:31:22:c4:b5:8a:b4:
53:70:b5:fe:6e:60:90:6d:ac:85:8d:90:02:bd:05:
cb:bc:82:07:07:2e:ea:4c:c3:c0:10:75:a4:51:56:
d7:75:a9:91:c6:52:80:bd:bb:f2:2f:eb:49:3e:c9:
f5:df:d0:d1:80:8d:52:12:2e:76:f8:8f:5d:40:e8:
b4:6c:ea:96:88:31:a6:15:75:81:61:f1:e0:28:23:
b5:50:23:e9:69:da:ac:ae:d3:26:4c:38:f9:f2:0d:
b7:32:62:37:b3:ab:d1:ee:2c:ef:70:c1:2a:f7:6f:
3b:77:6e:ee:57:d0:82:40:28:93:bf:31:81:15:3b:
f9:9c:ed:8c:b8:7e:76:d1:e8:30:f0:0a:25:bd:4e:
97:55:00:16:07:ca:24:22:6f:99:2d:26:d5:d1:d5:
6a:84:61:4e:ae:be:1d:e8:8a:94:7b:5a:3c:53:67:
71:09:55:ab:f5:fc:9b:ea:47:8e:a7:cd:83:36:24:
eb:d5:6f:d0:46:29:a4:63:88:76:05:1f:9d:43:8a:
52:67:63:e9:d7:71:31:61:95:c2:1b:10:a1:56:2a:
13:62:d9:5f:e2:7e:19:45:f4:f1:09:b0:a8:3d:b9:
70:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:83:5A:D0:D9:D7:73:C3:54:D0:DC:FA:FB:41:19:01:91:DF:5D:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec6ed21a-d141-3e7e-a3e8-36ccce30af89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:04:eb:f6:65:f9:6d:13:6c:ab:ac:ee:c7:ca:36:03:0c:eb:
d9:98:45:51:d1:9c:0d:79:b1:5c:b8:7a:2e:05:d8:67:5e:e9:
c3:6e:86:e8:90:07:1e:52:a9:39:bf:07:bc:70:f5:ca:e1:4e:
1b:d6:49:13:21:38:4d:a2:b6:c4:f9:85:a0:12:78:28:79:4c:
dc:5c:aa:73:0b:b9:41:07:d1:e8:e6:1d:e2:6b:ff:67:2c:ee:
a3:ef:ea:e1:f0:ba:1b:6c:6b:55:9c:59:34:e7:55:9e:bd:e1:
11:69:c5:ef:5f:59:fe:c3:7c:62:c3:b8:c9:35:68:f0:a1:b3:
e0:64:e2:41:0d:e2:68:0f:55:4b:0d:2d:ca:e4:70:c3:f0:54:
79:75:a6:4b:09:7a:4e:75:64:b5:dc:04:d9:29:15:f6:64:db:
a6:0a:bb:a0:d2:6b:55:0a:c8:75:f6:e9:6b:a5:1f:47:19:d6:
22:da:57:10:27:fa:e1:2b:c4:7a:4b:7e:70:1b:83:a5:00:53:
92:98:1a:d2:05:fa:30:54:04:92:6e:6f:86:ce:92:e9:6d:f8:
66:e7:b4:ea:f4:9d:50:97:f2:41:9c:df:84:bc:56:e5:c5:2a:
42:ab:cd:7e:ee:b4:61:52:b2:86:1f:85:2a:14:93:e7:13:39:
f9:8b:77:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSKYVbq0QzLe58AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk
ZTRmNTU5NmQtODM5OC00YTVjLTg0NDktNTk3N2Y5MTlmZjRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiatbQ+vtH5kkD6lbzUJJefw2Jl09ZJsxIsS1
irRTcLX+bmCQbayFjZACvQXLvIIHBy7qTMPAEHWkUVbXdamRxlKAvbvyL+tJPsn1
39DRgI1SEi52+I9dQOi0bOqWiDGmFXWBYfHgKCO1UCPpadqsrtMmTDj58g23MmI3
s6vR7izvcMEq9287d27uV9CCQCiTvzGBFTv5nO2MuH520egw8AolvU6XVQAWB8ok
Im+ZLSbV0dVqhGFOrr4d6IqUe1o8U2dxCVWr9fyb6keOp82DNiTr1W/QRimkY4h2
BR+dQ4pSZ2Pp13ExYZXCGxChVioTYtlf4n4ZRfTxCbCoPblwOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB2DWtDZ13PDVNDc+vtBGQGR3106MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWM2ZWQyMWEtZDE0MS0z
ZTdlLWEzZTgtMzZjY2NlMzBhZjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH0E6/Zl+W0TbKus7sfKNgMM69mYRVHRnA15sVy4ei4F2Gde6cNuhuiQ
Bx5SqTm/B7xw9crhThvWSRMhOE2itsT5haASeCh5TNxcqnMLuUEH0ejmHeJr/2cs
7qPv6uHwuhtsa1WcWTTnVZ694RFpxe9fWf7DfGLDuMk1aPChs+Bk4kEN4mgPVUsN
LcrkcMPwVHl1pksJek51ZLXcBNkpFfZk26YKu6DSa1UKyHX26WulH0cZ1iLaVxAn
+uErxHpLfnAbg6UAU5KYGtIF+jBUBJJub4bOkult+GbntOr0nVCX8kGc34S8VuXF
KkKrzX7utGFSsoYfhSoUk+cTOfmLd0k=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:55:46 2025 by rpki-client