Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/127335ac-7835-339e-98cf-19520d8ce2e9.roa
File: 127335ac-7835-339e-98cf-19520d8ce2e9.roa (raw, json)
Hash identifier: hDU6me7n1SJxyvSAR9xZuJ2SCtewwISA12yBGckBiTE=
Subject key identifier: AA:B7:54:09:FE:24:8A:D1:4A:0F:BC:6E:94:DE:DF:0D:38:B7:87:43
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848222FE3FCC80ABFAE25CB26C8
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/127335ac-7835-339e-98cf-19520d8ce2e9.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 3223
IP address blocks: 172.94.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:e3:fc:c8:0a:bf:ae:25:cb:26:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=2015bb1a-fda5-412b-8de5-28a47178b29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8d:cc:d7:ea:9b:f6:b0:84:a2:4a:63:86:d1:
3e:eb:18:95:9a:38:84:35:f9:f6:f9:6b:40:3a:2b:
11:3a:a8:16:eb:f6:58:75:8d:39:69:90:d9:56:f1:
0f:d6:f5:74:12:46:fe:1f:cc:13:12:75:9a:4a:98:
b5:15:55:6c:b7:d2:e7:19:a3:9c:66:1e:13:e0:b8:
07:e3:98:85:67:63:ac:50:c2:00:0b:41:63:0a:a6:
2f:d5:50:86:f3:be:47:fd:c1:c5:f5:56:1c:76:04:
09:a7:2a:e2:95:23:76:17:07:a4:6c:fb:9f:2e:b0:
3d:1b:ec:00:9c:d0:20:80:b6:b3:ec:97:fd:66:d7:
6f:cc:71:01:e7:c0:5e:8a:9d:c1:90:5c:fd:41:22:
aa:36:52:da:9f:29:b8:c5:bb:31:54:45:f3:13:d2:
d8:93:2b:f0:82:a7:4e:ee:e1:73:7d:60:62:8f:e9:
8d:d8:24:e0:f6:e9:47:40:4f:9e:cf:fc:91:e6:68:
23:05:78:87:31:f9:e6:d6:80:45:3a:11:0d:56:9c:
5d:cf:0a:b9:13:fb:ac:00:0f:03:28:db:c4:bb:e4:
ec:e6:cf:38:82:a0:20:e6:50:26:81:6d:ce:7c:6c:
b7:ce:07:1e:73:7d:0d:10:60:12:a9:03:7b:fb:d9:
4d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B7:54:09:FE:24:8A:D1:4A:0F:BC:6E:94:DE:DF:0D:38:B7:87:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/127335ac-7835-339e-98cf-19520d8ce2e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.19.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:f0:63:81:fb:97:48:6b:6b:ae:e4:fd:15:5c:4a:ac:f6:7d:
a0:d0:4a:de:57:9a:62:19:42:9b:e9:06:1b:3f:28:e7:46:27:
f7:40:a2:45:fd:76:a1:b4:7a:5c:88:87:ae:08:f9:1d:3b:a1:
7e:09:19:a2:59:d5:18:30:dc:95:16:1a:f0:4a:ae:43:85:e2:
e1:50:18:3e:aa:2c:fd:ac:c1:a1:fe:05:5c:09:ee:46:46:8b:
a3:39:65:43:ca:bc:56:e3:74:ed:7c:01:b3:4a:be:9f:9a:0b:
c0:54:38:c1:a0:67:59:cb:33:16:8e:0a:1a:99:bd:4f:7c:73:
0c:62:a9:95:17:c5:f7:b5:38:a3:73:ef:a2:8f:51:c4:bd:9b:
57:72:29:cc:f4:fa:79:e3:e7:30:04:f5:ff:46:b4:3a:bc:93:
51:6c:a4:0a:e5:97:ea:ca:5d:d4:28:77:39:ef:1c:37:8a:1c:
fd:b7:6e:7c:34:d9:8b:dc:79:86:d9:47:30:b6:f9:c8:94:b0:
d3:cd:ee:d3:76:38:ff:fd:58:7f:00:28:ab:98:20:45:d1:41:
33:b0:a8:e4:63:3f:e5:c8:bf:a4:00:13:bc:d2:0c:6a:48:49:
f4:98:f5:8d:39:7c:8e:84:dc:8d:fb:4e:37:03:e6:28:9b:a2:
68:e6:0f:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgiL+P8yAq/riXLJsgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MTIwODAyMDAzOVoXDTI1MDMwODAyMDAzOVowLzEtMCsGA1UEAxMk
MjAxNWJiMWEtZmRhNS00MTJiLThkZTUtMjhhNDcxNzhiMjlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY3M1+qb9rCEokpjhtE+6xiVmjiENfn2+WtA
OisROqgW6/ZYdY05aZDZVvEP1vV0Ekb+H8wTEnWaSpi1FVVst9LnGaOcZh4T4LgH
45iFZ2OsUMIAC0FjCqYv1VCG875H/cHF9VYcdgQJpyrilSN2FwekbPufLrA9G+wA
nNAggLaz7Jf9ZtdvzHEB58Beip3BkFz9QSKqNlLanym4xbsxVEXzE9LYkyvwgqdO
7uFzfWBij+mN2CTg9ulHQE+ez/yR5mgjBXiHMfnm1oBFOhENVpxdzwq5E/usAA8D
KNvEu+Ts5s84gqAg5lAmgW3OfGy3zgcec30NEGASqQN7+9lNEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKq3VAn+JIrRSg+8bpTe3w04t4dDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTI3MzM1YWMtNzgzNS0z
MzllLTk4Y2YtMTk1MjBkOGNlMmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4TMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIPwY4H7l0hra67k/RVcSqz2faDQSt5XmmIZQpvpBhs/KOdGJ/dAokX9
dqG0elyIh64I+R07oX4JGaJZ1Rgw3JUWGvBKrkOF4uFQGD6qLP2swaH+BVwJ7kZG
i6M5ZUPKvFbjdO18AbNKvp+aC8BUOMGgZ1nLMxaOChqZvU98cwxiqZUXxfe1OKNz
76KPUcS9m1dyKcz0+nnj5zAE9f9GtDq8k1FspArll+rKXdQodznvHDeKHP23bnw0
2YvceYbZRzC2+ciUsNPN7tN2OP/9WH8AKKuYIEXRQTOwqORjP+XIv6QAE7zSDGpI
SfSY9Y05fI6E3I37TjcD5iibomjmD7w=
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:53:44 2025 by rpki-client