Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/32719d37-b9c2-39ff-9a78-c34dbb94e55e.roa
File: 32719d37-b9c2-39ff-9a78-c34dbb94e55e.roa (raw, json)
Hash identifier: PH1bDCnjyJ18PKomcTCo2k8pAxZ/+9mLQZaK4ONrUl0=
Subject key identifier: 79:FB:6D:35:39:0E:4D:E1:C5:FD:7B:77:3F:05:57:F7:C2:91:7B:51
Certificate issuer: /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial: 010D0C9F4328584883E5C6EB4D94924BF041C180
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/32719d37-b9c2-39ff-9a78-c34dbb94e55e.roa
Signing time: Sun 12 Jan 2025 02:00:38 +0000
ROA not before: Sun 12 Jan 2025 02:00:38 +0000
ROA not after: Sat 12 Apr 2025 01:00:38 +0000
asID: 401307
IP address blocks: 204.25.240.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:83:e5:c6:eb:4d:94:92:4b:f0:41:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
Validity
Not Before: Jan 12 02:00:38 2025 GMT
Not After : Apr 12 01:00:38 2025 GMT
Subject: CN=6f6eacaf-67b3-4387-8ce3-6a672629e75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:03:ae:61:f0:a6:22:03:5c:ce:a5:35:be:93:
83:55:3d:0d:67:cf:35:40:c1:e5:ea:43:83:cf:9c:
d5:62:64:0e:51:c6:e4:8d:e3:a3:6f:86:31:92:09:
e8:9a:b8:f5:8a:94:c8:89:6b:a3:8b:c2:af:88:39:
81:d6:86:10:78:6f:f2:e4:2f:ff:7c:8c:8c:fd:cc:
d1:cf:b7:89:4b:8b:a5:19:1b:c1:a0:80:fd:98:9f:
39:e9:fb:fd:5f:b7:40:06:48:ee:a0:12:55:d4:05:
d6:21:5f:ca:eb:e6:ac:a0:68:75:10:72:e2:59:cb:
48:88:2f:8f:6d:36:46:7f:e9:ee:f6:30:f7:f3:b2:
76:42:83:21:2e:e4:9c:2f:7b:62:7a:be:5b:72:ab:
26:fb:fe:34:94:ab:6d:25:38:3d:9f:ab:a4:f2:78:
a1:1c:b4:ef:e0:e9:a2:70:47:a8:84:81:4d:b0:7a:
bf:e0:e3:db:29:b2:5e:74:de:07:ba:ac:84:43:c2:
96:ec:ec:20:09:c3:94:de:7b:ea:de:93:ac:1e:2d:
9c:4e:3d:0e:68:54:8b:fd:2a:87:de:48:64:9a:b7:
5c:67:05:6b:67:80:b1:aa:74:ea:48:32:e7:d7:9c:
a0:0c:f2:03:f7:63:92:a1:85:fe:33:41:aa:a9:25:
b6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FB:6D:35:39:0E:4D:E1:C5:FD:7B:77:3F:05:57:F7:C2:91:7B:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/32719d37-b9c2-39ff-9a78-c34dbb94e55e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
X509v3 Authority Key Identifier:
keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
sbgp-ipAddrBlock: critical
IPv4:
204.25.240.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:19:89:8e:f7:3d:48:f2:80:6b:17:0c:4f:6d:a1:16:de:89:
07:e6:82:de:80:67:7f:7a:de:07:a1:17:78:a4:ed:9a:18:c7:
ed:e8:4a:c6:4f:0f:72:b1:e1:24:53:62:f0:ac:f8:74:4d:5c:
d4:f0:52:03:89:10:ec:b9:e9:4e:d7:1e:16:4f:00:52:04:66:
88:d0:41:15:db:e2:cb:60:da:56:7f:e6:73:a5:af:e0:7b:9c:
d8:86:54:d0:25:0c:d8:17:a3:f8:a9:6b:be:5a:87:df:70:5c:
44:a8:32:21:9a:79:ed:73:79:36:93:c2:08:48:06:b2:b8:3c:
33:6d:45:a4:0b:8d:da:05:82:90:af:c1:38:09:88:77:8d:00:
f3:82:69:10:71:8b:53:af:ea:1f:79:4e:85:12:68:2c:e2:39:
34:0c:2f:dd:17:4b:1f:0a:5a:44:08:94:e7:a3:2a:b0:b6:65:
a5:95:1f:bf:df:76:4a:8e:8c:74:28:99:8a:c5:49:ee:95:b7:
2d:ca:c1:a4:67:fe:f8:87:eb:c8:73:6d:9c:ba:04:cd:84:cd:
8c:55:e1:f9:13:b9:0b:17:7d:d6:5f:57:3b:e4:86:b4:89:7b:
ee:e2:ca:a4:5f:bd:29:c4:e6:90:ec:5e:f4:ca:43:ca:5b:0d:
71:90:5a:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiD5cbrTZSSS/BBwYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjA2MzgxNGQtNTE4My00OWRlLTkwZWUtODRjYmJlY2Rl
NDIyMB4XDTI1MDExMjAyMDAzOFoXDTI1MDQxMjAxMDAzOFowLzEtMCsGA1UEAxMk
NmY2ZWFjYWYtNjdiMy00Mzg3LThjZTMtNmE2NzI2MjllNzVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQOuYfCmIgNczqU1vpODVT0NZ881QMHl6kOD
z5zVYmQOUcbkjeOjb4Yxkgnomrj1ipTIiWuji8KviDmB1oYQeG/y5C//fIyM/czR
z7eJS4ulGRvBoID9mJ856fv9X7dABkjuoBJV1AXWIV/K6+asoGh1EHLiWctIiC+P
bTZGf+nu9jD387J2QoMhLuScL3tier5bcqsm+/40lKttJTg9n6uk8nihHLTv4Omi
cEeohIFNsHq/4OPbKbJedN4HuqyEQ8KW7OwgCcOU3nvq3pOsHi2cTj0OaFSL/SqH
3khkmrdcZwVrZ4CxqnTqSDLn15ygDPID92OSoYX+M0GqqSW2NQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHn7bTU5Dk3hxf17dz8FV/fCkXtRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82MDYz
ODE0ZC01MTgzLTQ5ZGUtOTBlZS04NGNiYmVjZGU0MjIvMzI3MTlkMzctYjljMi0z
OWZmLTlhNzgtYzM0ZGJiOTRlNTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjA2MzgxNGQtNTE4My00OWRlLTkw
ZWUtODRjYmJlY2RlNDIyLzYwNjM4MTRkLTUxODMtNDlkZS05MGVlLTg0Y2JiZWNk
ZTQyMi5jcmwwHwYDVR0jBBgwFoAU+oFKWYuHd/AMGvqgYA7Dhlv3AcAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82MDYzODE0ZC01MTgzLTQ5ZGUtOTBlZS04NGNi
YmVjZGU0MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzBnwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADsZiY73PUjygGsXDE9toRbeiQfmgt6AZ3963gehF3ik7ZoYx+3oSsZP
D3Kx4SRTYvCs+HRNXNTwUgOJEOy56U7XHhZPAFIEZojQQRXb4stg2lZ/5nOlr+B7
nNiGVNAlDNgXo/ipa75ah99wXESoMiGaee1zeTaTwghIBrK4PDNtRaQLjdoFgpCv
wTgJiHeNAPOCaRBxi1Ov6h95ToUSaCziOTQML90XSx8KWkQIlOejKrC2ZaWVH7/f
dkqOjHQomYrFSe6Vty3KwaRn/viH68hzbZy6BM2EzYxV4fkTuQsXfdZfVzvkhrSJ
e+7iyqRfvSnE5pDsXvTKQ8pbDXGQWjI=
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:52:58 2025 by rpki-client