Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a84ffc24-ccc3-35d1-b284-fe15dc9e50d0.roa
File: a84ffc24-ccc3-35d1-b284-fe15dc9e50d0.roa (raw, json)
Hash identifier: SJ31SzUUhwjI2LuHeLJe+kJ2jAc97orFjCOnEqyXqEA=
Subject key identifier: FA:C9:6D:3C:9B:B8:A3:B6:98:C5:B4:02:14:3F:8E:ED:04:C7:F1:33
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246F4D04D87E229519FDD00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a84ffc24-ccc3-35d1-b284-fe15dc9e50d0.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 96.253.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:f4:d0:4d:87:e2:29:51:9f:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=159673a8-fa50-4248-8c59-ca637594ea96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8f:12:54:dc:9d:0f:c3:1d:6a:1a:32:82:4c:
9d:c5:ac:17:bb:e8:a0:a5:b8:52:3f:c5:9f:66:d4:
55:7b:c8:9b:5f:44:19:82:95:05:c4:c3:53:2b:46:
a7:3f:3d:90:ad:62:a9:29:91:d7:31:14:c7:71:74:
b7:07:ee:f4:81:9b:12:dd:80:b8:b6:16:f8:dc:ca:
78:b5:c2:87:8c:5b:dd:b1:2e:d5:1a:4c:80:7e:ab:
d3:d5:41:c8:82:38:39:4a:68:ee:21:4c:1e:d5:bc:
ae:84:b9:5b:b4:a0:f1:a8:65:bd:06:22:c7:d8:09:
ae:57:8a:ef:78:2d:94:e7:60:ee:c4:b6:90:cf:c8:
bd:9d:66:6e:2a:58:b0:35:8f:46:ca:1c:1e:4c:a3:
94:c5:cc:fc:84:01:98:d4:a8:93:ed:bc:f1:3a:b7:
dd:e4:73:6b:d5:c0:67:c1:5a:09:40:d5:1d:30:92:
b7:a6:1c:6d:fd:e1:cf:f9:fb:f2:b1:1f:e3:08:4d:
4d:41:ef:4a:07:05:cf:b3:6e:8e:d9:f1:c0:cd:0f:
80:85:3f:ea:a7:ed:de:b6:82:de:a5:9d:05:69:b0:
9b:44:a4:97:6e:12:95:80:41:ba:17:f1:00:05:66:
92:9c:a2:f4:ce:9c:47:4d:e3:f9:4b:80:92:d8:12:
6b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C9:6D:3C:9B:B8:A3:B6:98:C5:B4:02:14:3F:8E:ED:04:C7:F1:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a84ffc24-ccc3-35d1-b284-fe15dc9e50d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
96.253.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:d7:f3:58:74:d5:e9:d5:08:89:0e:f4:39:60:63:0d:77:57:
a4:95:8c:45:9f:27:8d:ba:0e:05:c6:62:24:5f:1a:8f:e1:46:
46:2e:36:06:4a:78:e3:8e:66:92:ab:a1:97:91:f1:41:25:bc:
ce:fb:08:45:8a:5b:bc:94:4c:8f:d6:53:3a:68:e2:1a:95:75:
85:7a:a1:39:f9:4f:4c:4d:b2:b8:15:ba:67:23:ff:ed:38:cf:
8d:62:cd:46:42:40:1c:44:1d:5f:07:2f:a7:6e:70:0b:da:8c:
49:81:2a:39:ca:06:4c:b0:ca:ca:94:81:d6:5a:c2:f7:5d:f4:
41:af:a3:4d:ec:a4:6a:c4:df:e6:12:2c:74:06:99:4c:6e:23:
4d:10:d0:be:2c:0c:5e:d6:47:70:ae:2d:da:a4:88:10:a9:e7:
bb:4d:32:6c:b4:6e:71:4e:96:29:7f:1c:e2:63:d8:93:36:15:
83:99:b8:52:f9:ab:73:18:86:bf:35:cf:64:aa:02:ea:7f:74:
72:33:a2:c0:68:16:80:f5:04:e4:e9:a1:de:eb:13:2b:05:12:
08:37:aa:66:77:94:16:c9:33:ed:f0:17:9b:3f:e0:bb:f0:2b:
c5:d0:c4:5a:e8:1f:d5:dc:60:d4:a9:a1:ee:61:c8:bf:47:6e:
d8:24:d4:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRvTQTYfiKVGf3QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
MTU5NjczYTgtZmE1MC00MjQ4LThjNTktY2E2Mzc1OTRlYTk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAio8SVNydD8MdahoygkydxawXu+igpbhSP8Wf
ZtRVe8ibX0QZgpUFxMNTK0anPz2QrWKpKZHXMRTHcXS3B+70gZsS3YC4thb43Mp4
tcKHjFvdsS7VGkyAfqvT1UHIgjg5SmjuIUwe1byuhLlbtKDxqGW9BiLH2AmuV4rv
eC2U52DuxLaQz8i9nWZuKliwNY9GyhweTKOUxcz8hAGY1KiT7bzxOrfd5HNr1cBn
wVoJQNUdMJK3phxt/eHP+fvysR/jCE1NQe9KBwXPs26O2fHAzQ+AhT/qp+3etoLe
pZ0FabCbRKSXbhKVgEG6F/EABWaSnKL0zpxHTeP5S4CS2BJr9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPrJbTybuKO2mMW0AhQ/ju0Ex/EzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTg0ZmZjMjQtY2NjMy0z
NWQxLWIyODQtZmUxNWRjOWU1MGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFYP3AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABfX81h01enVCIkO9DlgYw13V6SVjEWfJ426DgXGYiRfGo/hRkYuNgZK
eOOOZpKroZeR8UElvM77CEWKW7yUTI/WUzpo4hqVdYV6oTn5T0xNsrgVumcj/+04
z41izUZCQBxEHV8HL6ducAvajEmBKjnKBkywysqUgdZawvdd9EGvo03spGrE3+YS
LHQGmUxuI00Q0L4sDF7WR3CuLdqkiBCp57tNMmy0bnFOlil/HOJj2JM2FYOZuFL5
q3MYhr81z2SqAup/dHIzosBoFoD1BOTpod7rEysFEgg3qmZ3lBbJM+3wF5s/4Lvw
K8XQxFroH9XcYNSpoe5hyL9Hbtgk1D4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:44:11 2025 by rpki-client