Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a734e87c-407f-3142-8e19-dbe9a7710c45.roa
File: a734e87c-407f-3142-8e19-dbe9a7710c45.roa (raw, json)
Hash identifier: /BhrH+SY6xD7rwiN7+zzoFWsxKuf6ZBWxvV1VdV97iM=
Subject key identifier: 46:A0:B1:48:8D:F0:0A:1A:DB:67:C8:EF:71:AC:27:77:E5:43:BA:76
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848EF6177B216443329706D5200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a734e87c-407f-3142-8e19-dbe9a7710c45.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 6167
IP address blocks: 174.43.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:77:b2:16:44:33:29:70:6d:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=b905e2d5-d33f-4127-b297-b543a3e2e9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:21:b9:ce:55:ab:90:72:15:29:03:77:18:
4f:68:3e:dd:85:c2:a7:64:ac:ec:30:25:17:6b:d9:
91:78:91:54:61:3c:fe:ae:e0:f7:87:95:d3:c6:6c:
97:b6:7e:a8:1e:6f:3d:5d:03:ad:b0:88:95:cd:bf:
59:aa:3a:72:9d:90:1c:2b:12:49:a5:af:de:22:80:
89:2a:1f:ad:3b:96:cc:e2:d6:78:81:de:8b:84:41:
01:df:bf:8a:01:a5:d3:8c:78:30:e0:a9:41:0b:20:
de:89:f8:63:d0:2f:4c:d3:1a:42:44:c9:e0:69:1e:
49:a6:89:90:39:4e:41:e2:88:47:47:6a:26:d1:49:
c8:73:46:b0:63:58:bd:d9:7a:ab:dd:59:63:ad:cc:
47:0f:99:05:0b:19:9c:38:bb:f3:df:1e:de:52:1a:
5f:c8:81:75:25:95:85:2a:b5:3c:f1:58:d0:82:95:
5f:1b:40:99:55:c4:17:28:d0:c6:03:1c:c9:a2:7c:
59:66:d0:d7:71:33:bf:b9:8c:97:45:5c:4c:4f:46:
15:1a:fc:39:60:a7:75:76:1d:d3:26:24:33:45:de:
fa:39:0b:1a:5a:a7:2a:27:70:0b:f5:6c:54:23:cd:
3c:3f:bd:39:f5:1f:25:09:8e:61:f8:35:2b:70:ee:
82:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A0:B1:48:8D:F0:0A:1A:DB:67:C8:EF:71:AC:27:77:E5:43:BA:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a734e87c-407f-3142-8e19-dbe9a7710c45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.43.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:63:a8:ff:a3:69:0d:e6:94:5f:98:b3:79:14:95:a3:e6:fb:
16:b2:32:74:30:3d:cb:87:46:74:70:d8:a9:48:f0:09:0c:c7:
f7:88:b4:ca:f4:20:ca:6d:95:87:09:e0:3d:7f:73:5f:e2:23:
74:18:a3:12:6c:18:14:1e:49:20:17:b6:eb:09:c0:5f:3a:e3:
3b:6e:21:b1:ae:87:66:d5:c6:dd:11:90:f4:f8:d4:e9:dd:b9:
84:21:41:fd:f9:2f:34:dc:49:d6:43:f8:6c:63:91:1f:2d:44:
06:b4:f7:1f:04:c1:2e:9e:3b:3a:a7:cd:67:e5:f2:91:b4:60:
31:7e:b1:3f:78:b1:a7:48:ac:d2:61:9c:65:d9:85:4f:97:55:
af:ae:c3:79:73:05:5e:dc:d1:87:d5:04:83:a2:8d:2e:55:d5:
78:c9:f6:28:9d:f4:9e:07:47:18:68:5a:3b:77:d0:ac:2c:5d:
e0:54:69:17:eb:d2:39:1e:92:40:de:52:6b:30:df:a2:7b:f6:
c5:05:d9:78:0f:8b:8b:fe:3a:44:d4:3d:3c:3a:fd:6d:44:7f:
2c:b8:38:77:77:60:4a:62:cb:ce:07:93:86:47:50:f9:ba:0d:
58:ba:d7:d9:8f:b8:6f:2b:a3:71:03:a7:26:ba:aa:a9:d4:09:
2f:ad:c9:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYXeyFkQzKXBtUgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
YjkwNWUyZDUtZDMzZi00MTI3LWIyOTctYjU0M2EzZTJlOWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteQhuc5Vq5ByFSkDdxhPaD7dhcKnZKzsMCUX
a9mReJFUYTz+ruD3h5XTxmyXtn6oHm89XQOtsIiVzb9ZqjpynZAcKxJJpa/eIoCJ
Kh+tO5bM4tZ4gd6LhEEB37+KAaXTjHgw4KlBCyDeifhj0C9M0xpCRMngaR5JpomQ
OU5B4ohHR2om0UnIc0awY1i92Xqr3VljrcxHD5kFCxmcOLvz3x7eUhpfyIF1JZWF
KrU88VjQgpVfG0CZVcQXKNDGAxzJonxZZtDXcTO/uYyXRVxMT0YVGvw5YKd1dh3T
JiQzRd76OQsaWqcqJ3AL9WxUI808P7059R8lCY5h+DUrcO6C7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEagsUiN8Aoa22fI73GsJ3flQ7p2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTczNGU4N2MtNDA3Zi0z
MTQyLThlMTktZGJlOWE3NzEwYzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEriswMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB5jqP+jaQ3mlF+Ys3kUlaPm+xayMnQwPcuHRnRw2KlI8AkMx/eItMr0
IMptlYcJ4D1/c1/iI3QYoxJsGBQeSSAXtusJwF864ztuIbGuh2bVxt0RkPT41Ond
uYQhQf35LzTcSdZD+GxjkR8tRAa09x8EwS6eOzqnzWfl8pG0YDF+sT94sadIrNJh
nGXZhU+XVa+uw3lzBV7c0YfVBIOijS5V1XjJ9iid9J4HRxhoWjt30KwsXeBUaRfr
0jkekkDeUmsw36J79sUF2XgPi4v+OkTUPTw6/W1Efyy4OHd3YEpiy84Hk4ZHUPm6
DVi619mPuG8ro3EDpya6qqnUCS+tybQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:09 2025 by rpki-client