Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a5e5c4ab-da4a-39d0-9270-c0e84fea040e.roa
File: a5e5c4ab-da4a-39d0-9270-c0e84fea040e.roa (raw, json)
Hash identifier: CX4vmHrH88SKLFtQQrFOvpw2q2aYddBMviX59Yc3rMc=
Subject key identifier: 6B:D3:DD:A3:74:B9:A3:65:FE:73:4D:3A:5C:47:FA:66:16:59:62:29
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F432858485CD03116A6C012FC7DDB1260
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a5e5c4ab-da4a-39d0-9270-c0e84fea040e.roa
Signing time: Sun 29 Dec 2024 02:00:39 +0000
ROA not before: Sun 29 Dec 2024 02:00:39 +0000
ROA not after: Sat 29 Mar 2025 01:00:39 +0000
asID: 21949
IP address blocks: 205.175.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5c:d0:31:16:a6:c0:12:fc:7d:db:12:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Dec 29 02:00:39 2024 GMT
Not After : Mar 29 01:00:39 2025 GMT
Subject: CN=ce95bc29-90b9-4b81-8c6c-8f860c173fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c6:6b:8b:d7:59:51:09:54:18:2f:77:e1:a9:
0b:81:23:a4:5e:2c:65:4a:95:72:1d:f9:0c:4f:84:
ca:08:00:7a:8f:79:bb:71:31:11:32:84:e9:9d:de:
38:06:75:10:c8:7a:87:04:2c:30:a9:aa:70:95:c5:
d9:24:62:56:39:8a:0a:7b:41:90:c6:54:c1:f3:54:
30:9f:e8:92:cc:77:0d:d3:ed:08:0e:fd:52:83:7f:
12:3d:db:93:5b:44:c5:e8:71:cc:10:38:d7:85:4a:
8c:b2:c2:c2:0e:cf:d6:5e:74:02:62:2f:be:85:55:
ac:dd:d6:0c:02:0f:70:5f:b1:5f:81:df:6d:d8:21:
b6:31:00:3c:a5:a5:6c:93:58:bb:da:7b:19:0c:f4:
18:39:64:7e:c8:6c:f1:ea:55:d4:b4:af:c9:da:2f:
0f:27:8a:db:b5:4d:a2:90:7e:59:7f:5f:39:9c:47:
44:90:34:01:e9:bb:d3:62:7d:08:c2:9a:9a:1c:c1:
d8:aa:d0:c1:cf:4a:07:df:ad:5e:57:db:70:a5:b5:
5f:80:f2:48:c2:42:2e:bc:19:d5:1a:da:5a:0d:e6:
c1:47:a6:b4:f0:41:5a:72:6d:72:51:ff:07:9b:6c:
a1:73:73:85:60:04:7f:b0:b0:03:e3:69:9b:a4:e3:
72:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D3:DD:A3:74:B9:A3:65:FE:73:4D:3A:5C:47:FA:66:16:59:62:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a5e5c4ab-da4a-39d0-9270-c0e84fea040e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
205.175.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:87:4e:67:77:fe:f2:6e:99:84:74:bf:bb:13:bb:5c:e3:b7:
56:e9:b4:00:b7:aa:7a:ec:3f:5d:69:55:d3:55:aa:cf:c4:30:
b7:e4:2a:5f:7f:d6:36:51:fd:ce:4e:c3:3e:57:90:81:d8:d9:
f9:8f:b1:8e:df:11:15:c9:f8:42:a1:a7:c7:dd:fb:22:a7:a9:
1c:ad:6c:55:fd:a0:0e:a3:2b:e0:1e:67:aa:79:55:e5:34:8b:
30:ed:1d:55:ad:fc:9a:3f:02:e1:8b:2a:f7:21:54:35:74:d6:
05:1a:99:3d:f2:b1:f8:c7:91:e6:a5:56:49:14:f5:78:b3:bb:
47:66:d7:5f:30:1b:47:46:0a:0a:1a:33:e5:59:9f:43:aa:dc:
e9:d2:ce:b2:af:a5:30:26:c0:34:5c:8e:89:83:c4:13:cd:86:
1a:57:04:f8:c2:09:ea:83:19:87:7a:42:2f:8f:49:28:8f:c7:
04:22:fc:e8:b1:e2:58:61:04:bf:81:46:48:09:28:b2:4e:31:
55:9a:01:c6:8f:66:d3:dd:4c:ca:2a:d4:7f:65:31:46:f3:07:
4a:58:3a:f5:27:a8:fd:20:ff:07:15:a6:2c:40:77:2f:58:43:
09:61:de:4a:ac:8d:85:58:51:a6:0e:fb:0f:39:6b:ac:09:cc:
44:79:80:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhc0DEWpsAS/H3bEmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx
YzViMB4XDTI0MTIyOTAyMDAzOVoXDTI1MDMyOTAxMDAzOVowLzEtMCsGA1UEAxMk
Y2U5NWJjMjktOTBiOS00YjgxLThjNmMtOGY4NjBjMTczZmMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMZri9dZUQlUGC934akLgSOkXixlSpVyHfkM
T4TKCAB6j3m7cTERMoTpnd44BnUQyHqHBCwwqapwlcXZJGJWOYoKe0GQxlTB81Qw
n+iSzHcN0+0IDv1Sg38SPduTW0TF6HHMEDjXhUqMssLCDs/WXnQCYi++hVWs3dYM
Ag9wX7Ffgd9t2CG2MQA8paVsk1i72nsZDPQYOWR+yGzx6lXUtK/J2i8PJ4rbtU2i
kH5Zf185nEdEkDQB6bvTYn0IwpqaHMHYqtDBz0oH361eV9twpbVfgPJIwkIuvBnV
GtpaDebBR6a08EFacm1yUf8Hm2yhc3OFYAR/sLAD42mbpONyzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGvT3aN0uaNl/nNNOlxH+mYWWWIpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx
NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvYTVlNWM0YWItZGE0YS0z
OWQwLTkyNzAtYzBlODRmZWEwNDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx
MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk
MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk
MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCza/UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEiHTmd3/vJumYR0v7sTu1zjt1bptAC3qnrsP11pVdNVqs/EMLfkKl9/
1jZR/c5Owz5XkIHY2fmPsY7fERXJ+EKhp8fd+yKnqRytbFX9oA6jK+AeZ6p5VeU0
izDtHVWt/Jo/AuGLKvchVDV01gUamT3ysfjHkealVkkU9Xizu0dm118wG0dGCgoa
M+VZn0Oq3OnSzrKvpTAmwDRcjomDxBPNhhpXBPjCCeqDGYd6Qi+PSSiPxwQi/Oix
4lhhBL+BRkgJKLJOMVWaAcaPZtPdTMoq1H9lMUbzB0pYOvUnqP0g/wcVpixAdy9Y
Qwlh3kqsjYVYUaYO+w85a6wJzER5gAI=
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:00:11 2025 by rpki-client