Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/a2e7e277-d2c4-3201-b501-0a1f9a8b848e.roa
File: a2e7e277-d2c4-3201-b501-0a1f9a8b848e.roa (raw, json)
Hash identifier: HmjJ2RyjSASARFzPmkZ0sQtJCGc8KJ6uPln3gcAMOAA=
Subject key identifier: 56:88:43:0A:0A:9B:1A:E0:9C:0A:5C:F7:70:CF:AE:B6:54:E1:7D:44
Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial: 010D0C9F43285848530AF4B93C3139C83197C840
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/a2e7e277-d2c4-3201-b501-0a1f9a8b848e.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 9009
IP address blocks: 172.84.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:f4:b9:3c:31:39:c8:31:97:c8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=1dae1a5c-a337-47d9-ba33-06f9625c88da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4a:17:39:7b:6b:1a:67:3d:77:de:2e:e4:53:
2d:6d:23:9e:0b:28:61:df:d0:e1:be:65:9a:ac:8a:
2b:1d:48:89:8b:5b:2f:0d:7e:6b:9c:9a:a5:5c:eb:
f5:a1:a0:eb:35:86:33:8a:2c:43:a8:5e:1e:f7:0b:
58:bb:2f:ca:28:19:0a:ce:a6:eb:8b:e8:8e:dd:fd:
82:45:8b:c1:21:6a:70:4a:d9:76:a1:d4:d3:9f:9c:
66:07:45:eb:7d:6e:11:de:ba:30:a4:58:5b:fb:ea:
b9:f6:f5:bb:cb:b5:3a:1d:98:45:a4:56:8b:93:f9:
1b:89:af:a7:e0:31:db:d9:e2:d8:e3:29:44:52:83:
ef:28:a0:cb:8f:1c:5b:11:34:91:64:26:78:dd:fb:
02:06:e0:bd:94:0d:c5:e7:a2:fa:03:6a:1f:0c:17:
3c:05:ed:c5:f4:b8:de:1b:87:c1:b1:4f:a4:fc:24:
a8:6d:07:ec:ce:13:b1:50:6b:bb:ac:f5:dd:ee:62:
d3:72:a6:2c:03:80:5e:18:0a:16:ab:08:1f:48:34:
a8:f5:26:e9:c5:cc:d5:32:2a:c9:a9:29:9c:fc:2e:
1e:7d:39:32:da:f2:81:65:69:6f:c3:40:fd:bb:4e:
e4:9a:12:9f:99:eb:75:13:94:c0:97:8a:ef:40:95:
e8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:88:43:0A:0A:9B:1A:E0:9C:0A:5C:F7:70:CF:AE:B6:54:E1:7D:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/a2e7e277-d2c4-3201-b501-0a1f9a8b848e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
X509v3 Authority Key Identifier:
keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
sbgp-ipAddrBlock: critical
IPv4:
172.84.179.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:26:d2:2d:ee:20:94:4c:ce:42:ba:db:ef:43:3d:f6:24:21:
6d:d2:30:79:24:77:f4:1a:81:67:a7:7b:2e:cf:38:c3:88:b0:
fc:2c:3e:a3:a1:63:97:64:e4:f1:50:ea:4e:dc:2b:ca:57:f6:
7c:c5:e4:e4:b2:d5:0f:9d:78:2d:54:41:b6:14:f7:da:c2:83:
33:9f:00:59:4f:aa:3e:5b:b4:86:8c:94:2d:b5:0e:cd:96:62:
19:ad:57:22:20:0d:7b:8c:87:fa:5c:80:c1:27:be:30:c4:a8:
95:1b:ad:a4:1e:94:78:26:dc:1a:65:28:80:a6:e4:37:a9:3e:
24:3d:af:15:54:31:de:45:8d:39:bc:f2:d4:ba:d9:5e:b9:4f:
15:54:84:21:a8:56:67:73:ea:22:bd:f8:dd:29:d7:65:7d:cd:
83:64:3f:ac:a7:e5:d9:fe:37:75:bc:a4:fa:2d:ec:4a:0d:d4:
4b:fe:11:73:6d:78:20:23:a9:31:7a:1d:5f:be:a0:6a:ac:b6:
18:a0:16:82:db:44:79:5e:fc:40:c3:4c:a4:ab:93:39:60:ee:
5d:43:d2:5f:72:1d:50:50:41:e3:18:9d:5f:fd:c0:77:f5:1c:
b7:bf:db:11:f0:82:17:8e:0d:78:da:f4:66:03:01:74:36:66:
fe:e8:0e:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhTCvS5PDE5yDGXyEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDVkNDljOWItNDY2YS00MGU2LWFlMDAtNDg1ZGMzYTUw
ZDcwMB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk
MWRhZTFhNWMtYTMzNy00N2Q5LWJhMzMtMDZmOTYyNWM4OGRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkoXOXtrGmc9d94u5FMtbSOeCyhh39DhvmWa
rIorHUiJi1svDX5rnJqlXOv1oaDrNYYziixDqF4e9wtYuy/KKBkKzqbri+iO3f2C
RYvBIWpwStl2odTTn5xmB0XrfW4R3rowpFhb++q59vW7y7U6HZhFpFaLk/kbia+n
4DHb2eLY4ylEUoPvKKDLjxxbETSRZCZ43fsCBuC9lA3F56L6A2ofDBc8Be3F9Lje
G4fBsU+k/CSobQfszhOxUGu7rPXd7mLTcqYsA4BeGAoWqwgfSDSo9SbpxczVMirJ
qSmc/C4efTky2vKBZWlvw0D9u07kmhKfmet1E5TAl4rvQJXogwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFaIQwoKmxrgnApc93DPrrZU4X1EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0
OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVkYzNhNTBkNzAvYTJlN2UyNzctZDJjNC0z
MjAxLWI1MDEtMGExZjlhOGI4NDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDVkNDljOWItNDY2YS00MGU2LWFl
MDAtNDg1ZGMzYTUwZDcwL2Q1ZDQ5YzliLTQ2NmEtNDBlNi1hZTAwLTQ4NWRjM2E1
MGQ3MC5jcmwwHwYDVR0jBBgwFoAUniCRnrpQO3ZgokiWL2yRM6ygJzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVk
YzNhNTBkNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFSzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACYm0i3uIJRMzkK62+9DPfYkIW3SMHkkd/QagWeney7POMOIsPwsPqOh
Y5dk5PFQ6k7cK8pX9nzF5OSy1Q+deC1UQbYU99rCgzOfAFlPqj5btIaMlC21Ds2W
YhmtVyIgDXuMh/pcgMEnvjDEqJUbraQelHgm3BplKICm5DepPiQ9rxVUMd5FjTm8
8tS62V65TxVUhCGoVmdz6iK9+N0p12V9zYNkP6yn5dn+N3W8pPot7EoN1Ev+EXNt
eCAjqTF6HV++oGqsthigFoLbRHle/EDDTKSrkzlg7l1D0l9yHVBQQeMYnV/9wHf1
HLe/2xHwgheODXja9GYDAXQ2Zv7oDo8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:22:11 2025 by rpki-client