Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/09a05594-2aa3-3548-8e60-1c580a66bcd7.roa
File: 09a05594-2aa3-3548-8e60-1c580a66bcd7.roa (raw, json)
Hash identifier: ziDw7TTKV0xIF9KETmCbVLcnGQWDBMBBa78f9t2wdfs=
Subject key identifier: 7A:E0:AD:91:12:07:1D:7A:64:04:5C:FE:56:E2:6B:7C:D5:39:68:92
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F432858494CC9496EDA968F967A32C240
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/09a05594-2aa3-3548-8e60-1c580a66bcd7.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 1299
IP address blocks: 67.159.24.0/23 maxlen: 23
67.159.28.0/24 maxlen: 24
67.159.29.0/24 maxlen: 24
2001:49f0:d11a::/48 maxlen: 48
2001:49f0:d124::/48 maxlen: 48
2001:49f0:d125::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:49:6e:da:96:8f:96:7a:32:c2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=87f27571-a3df-4570-b0ec-549d266f0285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c8:d6:c9:1e:7b:11:25:9d:87:05:ed:b1:c2:
a6:b8:c8:66:c8:e2:04:aa:be:34:b0:92:b0:d6:7d:
50:10:bf:d2:90:2d:11:39:25:1d:07:25:17:a8:cb:
b9:c3:a2:89:44:3a:9c:fb:a2:7b:7f:11:46:85:64:
7a:fb:9f:cc:83:c5:8c:47:23:24:86:2c:a0:64:6b:
9a:d3:b6:90:13:51:0a:da:c9:8c:45:d2:20:3d:ac:
49:bc:1f:da:85:bd:55:cb:26:c2:2e:d1:1c:63:14:
bc:e7:52:39:0b:46:a9:86:99:1b:bc:96:d6:d6:d4:
9e:2c:08:e1:3c:4f:9d:4a:ee:25:62:3d:cf:1f:42:
24:ab:f1:4b:98:5b:26:53:34:23:93:b7:4f:fa:a4:
d0:24:49:47:c3:cd:51:3c:22:28:5c:9a:ff:0c:db:
96:90:0c:c3:2d:c6:0a:df:2d:ad:fc:ba:49:ee:7f:
ea:9e:43:16:9e:02:79:3f:11:b4:5b:fe:fd:5f:a5:
c1:22:39:76:9f:69:59:16:2e:69:22:7d:4b:94:cc:
98:4e:de:12:85:dd:e1:02:ab:59:71:32:b3:d4:a1:
94:3e:c4:c6:45:ca:e2:3c:7f:d8:c0:06:19:06:56:
52:bd:31:83:8d:85:f5:25:5e:9c:8a:4e:98:61:7d:
11:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E0:AD:91:12:07:1D:7A:64:04:5C:FE:56:E2:6B:7C:D5:39:68:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/09a05594-2aa3-3548-8e60-1c580a66bcd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
67.159.24.0/23
67.159.28.0/23
IPv6:
2001:49f0:d11a::/48
2001:49f0:d124::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:55:35:02:fb:f6:a1:80:7e:77:e0:d1:dd:a2:ee:25:97:ed:
b2:94:3d:c4:05:c4:ff:3c:df:13:af:22:0b:30:6a:63:7e:f9:
3a:c2:81:40:5b:dd:5d:f1:be:fc:0d:3a:fe:9a:74:09:55:a1:
8f:63:27:4a:2b:39:53:2f:11:84:8b:b2:31:13:b9:05:6c:a1:
1f:07:b1:43:34:2e:0b:4a:ae:ba:43:fd:b3:bc:96:d1:5e:4d:
8e:5a:ab:bc:b9:07:be:b7:22:bf:ff:37:bc:93:8b:d3:dd:92:
e3:cb:c3:21:46:53:39:84:73:cf:03:85:75:69:63:f3:06:cc:
78:5c:81:67:8b:3e:5a:a3:c2:6a:39:17:ff:53:ca:a0:b7:86:
2d:a2:d4:51:73:2e:51:68:0d:0c:67:92:3c:c3:49:71:97:b6:
22:dc:3d:28:dc:cf:af:d3:1b:f8:0d:23:76:e2:38:1f:52:f4:
cc:ae:d8:00:b1:05:0f:47:da:ae:f9:58:48:f3:fe:91:f8:62:
e5:3b:7b:67:fa:5c:21:66:84:3f:ee:f1:3b:c0:ea:3e:4b:4e:
c6:5a:66:8a:1d:1f:8d:8d:52:10:2e:dc:dd:b9:20:62:91:2e:
d1:fa:c4:c3:c4:f6:c4:ba:d0:d8:0d:65:7e:da:69:be:aa:34:
c2:5c:cd:16
-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWElMyUlu2paPlnoywkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk
ODdmMjc1NzEtYTNkZi00NTcwLWIwZWMtNTQ5ZDI2NmYwMjg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMjWyR57ESWdhwXtscKmuMhmyOIEqr40sJKw
1n1QEL/SkC0ROSUdByUXqMu5w6KJRDqc+6J7fxFGhWR6+5/Mg8WMRyMkhiygZGua
07aQE1EK2smMRdIgPaxJvB/ahb1VyybCLtEcYxS851I5C0aphpkbvJbW1tSeLAjh
PE+dSu4lYj3PH0Ikq/FLmFsmUzQjk7dP+qTQJElHw81RPCIoXJr/DNuWkAzDLcYK
3y2t/LpJ7n/qnkMWngJ5PxG0W/79X6XBIjl2n2lZFi5pIn1LlMyYTt4Shd3hAqtZ
cTKz1KGUPsTGRcriPH/YwAYZBlZSvTGDjYX1JV6cik6YYX0RGQIDAQABo4IDdTCC
A3EwHQYDVR0OBBYEFHrgrZESBx16ZARc/lbia3zVOWiSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMDlhMDU1OTQtMmFhMy0z
NTQ4LThlNjAtMWM1ODBhNjZiY2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQBQ58YAwQB
Q58cMBgEAgACMBIDBwAgAUnw0RoDBwEgAUnw0SQwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQlU1Avv2oYB+
d+DR3aLuJZftspQ9xAXE/zzfE68iCzBqY375OsKBQFvdXfG+/A06/pp0CVWhj2Mn
Sis5Uy8RhIuyMRO5BWyhHwexQzQuC0quukP9s7yW0V5NjlqrvLkHvrciv/83vJOL
092S48vDIUZTOYRzzwOFdWlj8wbMeFyBZ4s+WqPCajkX/1PKoLeGLaLUUXMuUWgN
DGeSPMNJcZe2Itw9KNzPr9Mb+A0jduI4H1L0zK7YALEFD0farvlYSPP+kfhi5Tt7
Z/pcIWaEP+7xO8DqPktOxlpmih0fjY1SEC7c3bkgYpEu0frEw8T2xLrQ2A1lftpp
vqo0wlzNFg==
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:08:45 2025 by rpki-client