Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/25c5593d-45d8-3237-bba2-0df821df4e57.roa
File: 25c5593d-45d8-3237-bba2-0df821df4e57.roa (raw, json)
Hash identifier: dnVVCawZ587SkeOnQEtoi1StSKZZPhEWtmQEW/RiTsM=
Subject key identifier: 69:01:FF:7A:30:0D:A0:28:87:EF:7C:6B:DA:5B:AA:58:04:B2:87:F1
Certificate issuer: /CN=a935f841-ed83-4b99-bb9d-4837de8ec8cb
Certificate serial: 010D0C9F4328584867393B60C8FF70D776647980
Authority key identifier: EC:A5:A0:80:B1:BE:A8:70:04:06:EC:A7:CE:41:6A:D2:F6:68:9E:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/25c5593d-45d8-3237-bba2-0df821df4e57.roa
Signing time: Wed 01 Jan 2025 19:30:28 +0000
ROA not before: Wed 01 Jan 2025 19:30:28 +0000
ROA not after: Tue 01 Apr 2025 18:30:28 +0000
asID: 15149
IP address blocks: 64.29.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:67:39:3b:60:c8:ff:70:d7:76:64:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a935f841-ed83-4b99-bb9d-4837de8ec8cb
Validity
Not Before: Jan 1 19:30:28 2025 GMT
Not After : Apr 1 18:30:28 2025 GMT
Subject: CN=6ccc24cb-677f-4cb3-8fee-e8594c2e7398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4b:8a:b8:cc:60:14:ad:38:8c:63:35:f0:f0:
ae:fe:c1:ca:1c:21:46:35:bd:6c:96:b8:7b:46:2d:
4c:61:17:83:95:02:b8:ab:1a:2a:9f:67:81:b9:f1:
98:e9:1a:d9:b0:37:93:e4:29:26:5d:d2:8a:c7:2f:
74:e4:f6:2a:49:f8:02:d0:27:ed:df:9d:f6:54:56:
22:46:fa:ca:be:70:7f:9b:ab:35:0b:dd:be:ce:24:
3e:20:f0:3f:3e:1c:8b:1e:8b:c1:aa:39:cb:80:1d:
58:a0:5c:39:98:f9:81:d9:c4:52:21:03:33:20:56:
b5:44:bf:cb:f2:94:e6:4e:c3:04:1d:6b:fc:1b:f0:
31:f8:c6:0a:4d:1b:8f:88:54:56:45:b7:2d:cd:dd:
00:75:e6:57:f5:b7:33:24:7a:29:b4:51:a8:1b:bf:
27:9d:d2:b4:b5:4a:eb:d8:d6:c2:fc:7f:0b:30:3c:
24:23:c1:f3:4b:f5:28:ed:d7:27:2e:b2:ad:7f:76:
0a:f3:44:41:b5:b3:f2:24:a1:b9:fd:a5:cc:3d:38:
0f:04:45:2d:0c:db:66:a3:2d:a2:3a:ac:af:4d:22:
a3:2e:0a:6f:60:05:73:d6:ff:6b:f0:d6:af:8a:2c:
1e:c4:d9:fe:15:2c:6d:71:3d:6b:0a:be:ce:a9:1d:
c9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:01:FF:7A:30:0D:A0:28:87:EF:7C:6B:DA:5B:AA:58:04:B2:87:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/25c5593d-45d8-3237-bba2-0df821df4e57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/a935f841-ed83-4b99-bb9d-4837de8ec8cb.crl
X509v3 Authority Key Identifier:
keyid:EC:A5:A0:80:B1:BE:A8:70:04:06:EC:A7:CE:41:6A:D2:F6:68:9E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb.cer
sbgp-ipAddrBlock: critical
IPv4:
64.29.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:b6:10:e1:38:e9:9d:72:58:97:c5:47:3c:f6:27:51:d2:4d:
2a:cc:e8:41:0a:11:a9:9c:76:1e:c4:a1:f8:31:60:c2:1a:07:
f6:17:0a:a8:67:5e:0b:d7:70:86:af:ac:3c:f3:4d:92:cf:c5:
10:9d:04:86:e3:9d:82:1c:0a:8f:c9:8a:cb:14:55:5e:f6:c2:
c4:d7:8c:c4:9d:9e:fa:6c:dc:33:27:f9:63:2f:9e:5c:69:2f:
bd:73:45:77:b0:c6:87:46:b9:20:fe:9d:46:30:d5:a7:7a:c3:
23:dc:ba:4b:7f:24:77:f0:9e:b9:5a:e3:43:42:a6:8d:5a:e8:
32:b9:bf:39:2d:ff:fd:ec:95:fc:49:e2:3d:8f:fb:fe:ab:25:
21:4c:8d:ff:a8:91:c2:0f:7b:bd:d4:f2:3f:f2:24:c1:9a:b3:
b8:e5:20:05:f1:ae:eb:1a:2a:37:42:34:01:7a:67:31:ca:36:
a5:93:ee:51:0e:6e:16:f9:a2:c6:ce:75:7f:4e:bb:87:fd:6b:
1f:76:5d:4c:15:c0:c3:c4:3f:c2:f2:57:08:2f:5b:a2:8a:12:
0b:24:a0:bd:46:81:c3:7e:74:6d:f3:88:2c:42:91:2d:07:72:
77:9c:d6:ec:dc:1b:29:a7:7c:44:cb:2a:fd:6d:4a:2f:93:14:
8f:69:d8:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhnOTtgyP9w13ZkeYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTkzNWY4NDEtZWQ4My00Yjk5LWJiOWQtNDgzN2RlOGVj
OGNiMB4XDTI1MDEwMTE5MzAyOFoXDTI1MDQwMTE4MzAyOFowLzEtMCsGA1UEAxMk
NmNjYzI0Y2ItNjc3Zi00Y2IzLThmZWUtZTg1OTRjMmU3Mzk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkuKuMxgFK04jGM18PCu/sHKHCFGNb1slrh7
Ri1MYReDlQK4qxoqn2eBufGY6RrZsDeT5CkmXdKKxy905PYqSfgC0Cft3532VFYi
RvrKvnB/m6s1C92+ziQ+IPA/PhyLHovBqjnLgB1YoFw5mPmB2cRSIQMzIFa1RL/L
8pTmTsMEHWv8G/Ax+MYKTRuPiFRWRbctzd0AdeZX9bczJHoptFGoG78nndK0tUrr
2NbC/H8LMDwkI8HzS/Uo7dcnLrKtf3YK80RBtbPyJKG5/aXMPTgPBEUtDNtmoy2i
OqyvTSKjLgpvYAVz1v9r8NaviiwexNn+FSxtcT1rCr7OqR3JvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGkB/3owDaAoh+98a9pbqlgEsofxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hOTM1
Zjg0MS1lZDgzLTRiOTktYmI5ZC00ODM3ZGU4ZWM4Y2IvMjVjNTU5M2QtNDVkOC0z
MjM3LWJiYTItMGRmODIxZGY0ZTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTkzNWY4NDEtZWQ4My00Yjk5LWJi
OWQtNDgzN2RlOGVjOGNiL2E5MzVmODQxLWVkODMtNGI5OS1iYjlkLTQ4MzdkZThl
YzhjYi5jcmwwHwYDVR0jBBgwFoAU7KWggLG+qHAEBuynzkFq0vZontUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hOTM1Zjg0MS1lZDgzLTRiOTktYmI5ZC00ODM3
ZGU4ZWM4Y2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQB28MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI22EOE46Z1yWJfFRzz2J1HSTSrM6EEKEamcdh7EofgxYMIaB/YXCqhn
XgvXcIavrDzzTZLPxRCdBIbjnYIcCo/JissUVV72wsTXjMSdnvps3DMn+WMvnlxp
L71zRXewxodGuSD+nUYw1ad6wyPcukt/JHfwnrla40NCpo1a6DK5vzkt//3slfxJ
4j2P+/6rJSFMjf+okcIPe73U8j/yJMGas7jlIAXxrusaKjdCNAF6ZzHKNqWT7lEO
bhb5osbOdX9Ou4f9ax92XUwVwMPEP8LyVwgvW6KKEgskoL1GgcN+dG3ziCxCkS0H
cnec1uzcGymnfETLKv1tSi+TFI9p2BA=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:21:55 2025 by rpki-client