Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/a05b4f8d-9ce2-3518-9e90-d781a8c9a694.roa
File: a05b4f8d-9ce2-3518-9e90-d781a8c9a694.roa (raw, json)
Hash identifier: yPHEXX1d6YZlHyghzdDTwzW52nRet6UUjTrJJaROzlc=
Subject key identifier: 3E:FB:D9:5F:FB:84:09:04:57:15:04:FA:DA:48:8D:82:45:2F:00:E7
Certificate issuer: /CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
Certificate serial: 010D0C9F432858491246A9E65B4C3DDBFB45D040
Authority key identifier: C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/a05b4f8d-9ce2-3518-9e90-d781a8c9a694.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 30170
IP address blocks: 66.113.96.0/20 maxlen: 24
70.35.112.0/20 maxlen: 24
209.147.112.0/20 maxlen: 24
2607:f6f8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:a9:e6:5b:4c:3d:db:fb:45:d0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=6a3f5960-8fcd-4b63-9198-8816a3c38577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:84:a3:59:16:fc:bc:2a:5c:79:30:e2:a2:2e:
5f:c2:e9:ee:27:ba:e1:09:ae:88:b3:f7:af:e3:3a:
c7:43:27:89:51:a4:64:62:6b:eb:5c:dd:ba:fb:37:
6c:79:d2:27:c7:b2:82:a7:85:3c:eb:8e:16:9d:57:
4e:25:d8:24:e6:58:5f:5e:e4:49:86:f5:3b:41:fc:
be:ab:af:ac:0e:55:94:6b:db:88:a8:70:16:09:65:
7d:d0:5c:70:39:91:a8:bf:eb:d7:41:10:56:b1:57:
40:5b:29:51:5f:cc:6a:5a:bb:19:b9:4e:89:6e:cb:
a8:b7:fa:4d:ca:ae:fd:bc:c3:a7:64:2f:06:bd:9e:
f9:c4:3e:92:07:5e:76:21:c4:88:f5:70:4f:18:f6:
2f:62:4d:1a:6d:e4:a4:55:a4:5e:fd:fc:67:ce:11:
03:e6:c3:bb:79:9c:14:8e:3e:95:00:6f:62:c1:f2:
90:96:f7:8e:e9:29:c9:93:88:60:cf:a8:21:67:52:
5e:5b:2f:4c:42:49:de:e4:8b:3b:18:47:0e:ac:28:
c4:60:df:5f:28:f3:6a:2d:6b:3b:0e:cb:33:af:8b:
29:cb:e6:4c:2a:d9:cf:75:48:ed:22:39:fb:b8:78:
d0:2a:00:bf:1d:d3:11:d0:c5:0d:10:77:89:38:03:
00:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FB:D9:5F:FB:84:09:04:57:15:04:FA:DA:48:8D:82:45:2F:00:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/a05b4f8d-9ce2-3518-9e90-d781a8c9a694.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl
X509v3 Authority Key Identifier:
keyid:C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
sbgp-ipAddrBlock: critical
IPv4:
66.113.96.0/20
70.35.112.0/20
209.147.112.0/20
IPv6:
2607:f6f8::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cb:9c:34:35:0f:8b:8f:db:a1:fc:24:2b:df:03:a5:59:52:44:
1d:57:eb:66:33:e3:36:c3:a0:21:28:17:e2:ae:66:e6:98:26:
52:26:1c:3c:94:47:b9:7a:02:d9:e1:f2:ce:33:9a:13:ad:0f:
f0:2d:dd:d6:43:76:16:66:12:f6:29:11:ef:e4:2f:b8:88:33:
61:7f:af:3d:ba:45:11:ef:c9:6d:17:92:ea:f5:45:76:1c:2e:
40:d9:e9:ff:50:7b:1f:fc:6d:26:4a:e8:cc:a6:3c:d8:4a:09:
9c:e8:55:ac:b8:94:c4:01:3d:3f:8d:ab:94:d1:bd:17:7c:7a:
20:9c:d9:0d:84:6d:81:72:fd:67:38:7c:27:83:7d:05:2c:62:
a7:e6:3b:e5:21:70:6e:2c:ba:49:45:6d:dc:71:8a:89:30:71:
4b:97:a2:26:45:5f:bb:d1:53:24:69:7f:71:82:70:a8:0b:45:
11:9a:87:5e:3a:b3:6f:58:3a:1a:d0:f8:40:a2:7c:61:ce:1e:
4f:64:f8:b9:08:be:3b:2a:c6:a4:59:41:83:7a:8f:f8:8f:5c:
5b:b0:a4:31:57:59:b2:92:71:59:63:72:5d:9a:36:f7:bb:50:
9e:02:d4:d1:3d:ce:6d:5f:28:75:51:8b:05:6d:50:cb:43:ea:
b3:3f:f5:e8
-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEkSRqnmW0w92/tF0EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2I5M2U5OWMtOWI0Mi00ZTdiLWE3MmMtOTY3NmU2NzMz
YzE2MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
NmEzZjU5NjAtOGZjZC00YjYzLTkxOTgtODgxNmEzYzM4NTc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmISjWRb8vCpceTDioi5fwunuJ7rhCa6Is/ev
4zrHQyeJUaRkYmvrXN26+zdsedInx7KCp4U8644WnVdOJdgk5lhfXuRJhvU7Qfy+
q6+sDlWUa9uIqHAWCWV90FxwOZGov+vXQRBWsVdAWylRX8xqWrsZuU6Jbsuot/pN
yq79vMOnZC8GvZ75xD6SB152IcSI9XBPGPYvYk0abeSkVaRe/fxnzhED5sO7eZwU
jj6VAG9iwfKQlveO6SnJk4hgz6ghZ1JeWy9MQkne5Is7GEcOrCjEYN9fKPNqLWs7
Dsszr4spy+ZMKtnPdUjtIjn7uHjQKgC/HdMR0MUNEHeJOAMAEQIDAQABo4IDcDCC
A2wwHQYDVR0OBBYEFD772V/7hAkEVxUE+tpIjYJFLwDnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83Yjkz
ZTk5Yy05YjQyLTRlN2ItYTcyYy05Njc2ZTY3MzNjMTYvYTA1YjRmOGQtOWNlMi0z
NTE4LTllOTAtZDc4MWE4YzlhNjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2I5M2U5OWMtOWI0Mi00ZTdiLWE3
MmMtOTY3NmU2NzMzYzE2LzdiOTNlOTljLTliNDItNGU3Yi1hNzJjLTk2NzZlNjcz
M2MxNi5jcmwwHwYDVR0jBBgwFoAUxx1tasm9OnMcXyxF2lY9vNlgc5IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83YjkzZTk5Yy05YjQyLTRlN2ItYTcyYy05Njc2
ZTY3MzNjMTYuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEQnFgAwQE
RiNwAwQE0ZNwMA0EAgACMAcDBQAmB/b4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAMucNDUPi4/bofwkK98D
pVlSRB1X62Yz4zbDoCEoF+KuZuaYJlImHDyUR7l6Atnh8s4zmhOtD/At3dZDdhZm
EvYpEe/kL7iIM2F/rz26RRHvyW0Xkur1RXYcLkDZ6f9Qex/8bSZK6MymPNhKCZzo
Vay4lMQBPT+Nq5TRvRd8eiCc2Q2EbYFy/Wc4fCeDfQUsYqfmO+UhcG4suklFbdxx
iokwcUuXoiZFX7vRUyRpf3GCcKgLRRGah146s29YOhrQ+ECifGHOHk9k+LkIvjsq
xqRZQYN6j/iPXFuwpDFXWbKScVljcl2aNve7UJ4C1NE9zm1fKHVRiwVtUMtD6rM/
9eg=
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:23:03 2025 by rpki-client