Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066/5a0fb0a4-0a1f-350f-980c-b34ad65c704c.roa
File: 5a0fb0a4-0a1f-350f-980c-b34ad65c704c.roa (raw, json)
Hash identifier: eJjxC24JXvwSXAdhuDrZKg7KccOZg/By4VHS78ABbZI=
Subject key identifier: 25:21:60:6E:A6:1D:DB:B9:2E:13:36:00:17:4F:B7:D7:C3:ED:AC:9B
Certificate issuer: /CN=ff7959e1-b47c-43d5-89e1-72b6a534e066
Certificate serial: 010D0C9F43285848E9CBD4D81B48ADDE52C43380
Authority key identifier: AF:32:C1:E6:35:B8:EC:F7:E6:66:76:14:9B:EC:E7:FD:57:A8:DA:BF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066/5a0fb0a4-0a1f-350f-980c-b34ad65c704c.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 29997
IP address blocks: 204.16.252.0/22 maxlen: 24
2620:0:2e60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:d4:d8:1b:48:ad:de:52:c4:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7959e1-b47c-43d5-89e1-72b6a534e066
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=f88e6b7d-666b-44fa-b660-9a0a069c831f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:73:89:90:ec:ce:98:5d:de:4b:c7:ab:56:bb:
d4:fa:d8:ef:9e:bd:a5:8a:40:ee:8e:be:f5:82:1e:
82:35:40:5e:bd:f4:30:8f:99:cc:b8:e0:9e:e4:ba:
f1:40:d3:74:e2:dd:ba:59:09:ba:5e:75:bc:2d:91:
a9:98:ea:3c:f4:40:43:ee:c3:75:6f:4e:67:c6:c9:
2c:d8:f7:20:f8:c5:f1:59:55:19:b5:a3:47:bd:4a:
0f:c3:6d:83:39:3d:43:dc:d5:f0:28:92:ac:b3:a9:
b8:96:2a:aa:84:b3:ba:42:ae:2c:39:b8:35:31:89:
e0:ed:a4:48:c7:13:f9:ef:e9:45:39:c5:65:64:53:
a7:7c:da:e6:80:90:f4:64:7b:38:88:6e:e9:06:8f:
13:8e:e3:1b:8e:4a:f2:c1:1d:38:1a:b8:35:ff:fb:
b9:68:7a:8e:10:89:42:be:a7:47:cd:f7:b1:3c:e2:
cc:28:ed:7d:68:00:35:8c:8d:1a:b5:aa:69:9d:a2:
d2:0d:84:33:ec:30:43:38:f0:ea:8a:3c:53:bd:4b:
b1:70:88:33:9e:0c:3b:af:8c:13:a8:a0:21:a2:b8:
e2:bf:2b:ae:fa:ee:a2:c5:f6:be:ad:07:99:2d:5c:
d0:be:63:83:58:09:0c:ee:66:7d:b4:fc:8d:f5:57:
2e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:21:60:6E:A6:1D:DB:B9:2E:13:36:00:17:4F:B7:D7:C3:ED:AC:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066/5a0fb0a4-0a1f-350f-980c-b34ad65c704c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066/ff7959e1-b47c-43d5-89e1-72b6a534e066.crl
X509v3 Authority Key Identifier:
keyid:AF:32:C1:E6:35:B8:EC:F7:E6:66:76:14:9B:EC:E7:FD:57:A8:DA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066.cer
sbgp-ipAddrBlock: critical
IPv4:
204.16.252.0/22
IPv6:
2620:0:2e60::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:e6:61:13:12:96:89:61:29:f3:93:92:91:38:81:07:7e:f3:
b8:66:3f:5b:76:36:89:18:a4:11:c3:9e:86:54:c7:6a:5f:f3:
4d:81:3c:07:71:43:fd:a2:e1:42:92:49:0f:75:f4:e5:28:4a:
71:61:5e:d6:83:5f:7e:cf:93:12:b2:cf:6d:f3:34:d4:58:cd:
d2:88:53:37:80:9c:d5:c4:12:20:af:bf:41:e6:82:0f:3e:eb:
08:a7:c9:a4:0d:6e:bc:c6:c8:16:9b:4d:33:ab:bb:c4:db:62:
2e:d8:94:41:ec:d5:d1:b2:d4:56:87:2a:43:96:ff:f6:ca:6a:
e1:0d:64:d9:e1:fe:a0:0b:04:70:7b:08:d4:db:f3:3f:4a:be:
d1:37:e3:3c:f0:c9:81:9e:d6:72:4e:54:85:db:e3:a2:b3:11:
56:3e:a1:9f:69:bf:f8:54:a0:3d:c1:21:49:b1:8f:48:17:56:
05:ac:58:87:be:c9:b3:bc:fb:f0:fb:b8:d0:eb:b3:66:ae:c8:
35:7f:02:70:a6:3b:d3:b8:ef:1c:f0:44:f1:47:bc:da:a7:c6:
5e:6f:2e:af:a8:01:9f:7a:9f:64:ee:8c:9a:fe:ad:54:1d:c5:
a8:74:71:d3:75:a7:8b:e9:97:39:fc:a8:91:b7:fe:23:f2:81:
11:d1:4e:c4
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEjpy9TYG0it3lLEM4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmY3OTU5ZTEtYjQ3Yy00M2Q1LTg5ZTEtNzJiNmE1MzRl
MDY2MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk
Zjg4ZTZiN2QtNjY2Yi00NGZhLWI2NjAtOWEwYTA2OWM4MzFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3OJkOzOmF3eS8erVrvU+tjvnr2likDujr71
gh6CNUBevfQwj5nMuOCe5LrxQNN04t26WQm6XnW8LZGpmOo89EBD7sN1b05nxsks
2Pcg+MXxWVUZtaNHvUoPw22DOT1D3NXwKJKss6m4liqqhLO6Qq4sObg1MYng7aRI
xxP57+lFOcVlZFOnfNrmgJD0ZHs4iG7pBo8TjuMbjkrywR04Grg1//u5aHqOEIlC
vqdHzfexPOLMKO19aAA1jI0atappnaLSDYQz7DBDOPDqijxTvUuxcIgzngw7r4wT
qKAhorjivyuu+u6ixfa+rQeZLVzQvmODWAkM7mZ9tPyN9VcuwwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFCUhYG6mHdu5LhM2ABdPt9fD7aybMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mZjc5
NTllMS1iNDdjLTQzZDUtODllMS03MmI2YTUzNGUwNjYvNWEwZmIwYTQtMGExZi0z
NTBmLTk4MGMtYjM0YWQ2NWM3MDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmY3OTU5ZTEtYjQ3Yy00M2Q1LTg5
ZTEtNzJiNmE1MzRlMDY2L2ZmNzk1OWUxLWI0N2MtNDNkNS04OWUxLTcyYjZhNTM0
ZTA2Ni5jcmwwHwYDVR0jBBgwFoAUrzLB5jW47PfmZnYUm+zn/Veo2r8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mZjc5NTllMS1iNDdjLTQzZDUtODllMS03MmI2
YTUzNGUwNjYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCzBD8MA8E
AgACMAkDBwQmIAAALmAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAreZhExKWiWEp85OSkTiBB37zuGY/W3Y2
iRikEcOehlTHal/zTYE8B3FD/aLhQpJJD3X05ShKcWFe1oNffs+TErLPbfM01FjN
0ohTN4Cc1cQSIK+/QeaCDz7rCKfJpA1uvMbIFptNM6u7xNtiLtiUQezV0bLUVocq
Q5b/9spq4Q1k2eH+oAsEcHsI1NvzP0q+0TfjPPDJgZ7Wck5UhdvjorMRVj6hn2m/
+FSgPcEhSbGPSBdWBaxYh77Js7z78Pu40OuzZq7INX8CcKY707jvHPBE8Ue82qfG
Xm8ur6gBn3qfZO6Mmv6tVB3FqHRx03Wni+mXOfyokbf+I/KBEdFOxA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:38:51 2025 by rpki-client