Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/739f0ac6-9dd4-32b9-b4a7-f375ea71a75a.roa
File: 739f0ac6-9dd4-32b9-b4a7-f375ea71a75a.roa (raw, json)
Hash identifier: BIpIyRAEb1x44K1ZKKXn53MTMsDJGXF63/O24q71zOo=
Subject key identifier: 6A:51:9C:21:4F:FE:CB:A1:8A:E7:1A:88:A2:F9:0F:69:29:97:00:39
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584863CB0F92DDDB89C72FCED180
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/739f0ac6-9dd4-32b9-b4a7-f375ea71a75a.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 137409
IP address blocks: 172.94.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:0f:92:dd:db:89:c7:2f:ce:d1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=cfb51110-bb70-4973-a54a-1986da00321a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:82:46:6e:dd:e7:cd:1f:51:b3:6d:da:ea:bc:
27:47:89:88:61:da:9c:0e:e9:fb:1e:1e:13:10:41:
0e:b8:74:41:29:9b:1a:91:bd:a5:52:6d:bb:b9:6f:
ed:4d:be:92:28:03:37:de:c2:31:1d:0a:a3:af:82:
40:30:f6:bb:0c:c9:d8:38:cb:a2:94:ef:d6:61:8a:
4e:4f:40:e7:01:ba:d7:af:b0:cb:6b:1e:42:4c:17:
e9:fa:34:d8:86:6b:e2:ce:a2:0d:c2:0f:e0:78:93:
0f:b8:df:b4:c8:b4:91:fb:ee:99:01:25:e4:ed:f9:
bf:9d:c9:d8:0c:9f:2f:73:ed:4b:27:64:f1:b7:47:
e6:44:81:f1:98:7a:98:f8:6b:a2:d4:ea:e2:4d:ff:
cd:5d:83:0d:98:7f:83:c8:8e:24:35:d1:08:2a:e2:
d7:82:3a:ed:94:a8:f8:1b:dc:59:ae:38:05:a0:6e:
1a:1c:1f:cf:52:07:70:ee:dc:1d:79:84:9e:ff:8d:
f1:45:3d:08:f6:e2:82:b1:23:81:00:e8:6c:9f:d6:
b6:4e:ab:cf:a0:20:7b:dd:20:20:97:f1:4b:0b:b0:
7d:86:85:5e:24:f3:c5:ba:4d:f8:9c:b8:3d:a7:30:
ee:ff:1b:61:ee:6e:75:58:36:5d:da:cb:33:0b:cb:
af:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:51:9C:21:4F:FE:CB:A1:8A:E7:1A:88:A2:F9:0F:69:29:97:00:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/739f0ac6-9dd4-32b9-b4a7-f375ea71a75a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:ad:ba:70:11:cb:0e:ea:b5:38:8c:f3:48:81:08:54:d0:58:
cd:10:b1:44:e5:29:ed:57:07:b8:02:79:53:5f:c8:17:b6:6b:
2e:c8:7d:c8:af:7e:58:5e:e0:36:cf:ea:4f:ac:55:38:53:83:
01:13:93:bf:2b:98:53:06:49:c9:d3:d1:c3:3f:f0:ff:bb:a1:
a5:69:87:dc:ed:1f:7e:85:b3:06:30:9b:86:97:5f:2d:d1:53:
1f:ff:c3:41:a9:6b:1a:24:54:be:5f:e1:02:04:12:07:31:54:
4b:dc:95:32:f9:bb:51:5e:91:aa:9f:41:28:39:a3:7b:9c:a7:
b8:ac:e2:c3:01:90:47:a3:52:c9:dd:58:b0:96:84:ad:97:c1:
c4:8d:01:7c:47:6d:bd:e5:3e:e9:60:02:c6:8f:a2:ab:9a:1e:
34:44:03:9f:39:68:20:ab:05:e7:2e:cb:ff:4c:e7:bf:01:86:
b7:5f:06:90:a3:04:4a:15:82:56:d9:24:56:a7:1d:d9:13:b5:
bc:39:5b:99:d5:72:08:7b:6c:58:78:8a:f5:05:1b:c3:74:2d:
bd:38:1b:5f:49:81:5f:50:88:ff:70:35:43:19:1c:6d:70:a3:
71:22:60:78:6d:c7:ba:7a:0b:22:f2:02:3e:f8:96:28:e5:fb:
d0:08:5d:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhjyw+S3duJxy/O0YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MTIzMTE0MDA1M1oXDTI1MDMzMTEzMDA1M1owLzEtMCsGA1UEAxMk
Y2ZiNTExMTAtYmI3MC00OTczLWE1NGEtMTk4NmRhMDAzMjFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoJGbt3nzR9Rs23a6rwnR4mIYdqcDun7Hh4T
EEEOuHRBKZsakb2lUm27uW/tTb6SKAM33sIxHQqjr4JAMPa7DMnYOMuilO/WYYpO
T0DnAbrXr7DLax5CTBfp+jTYhmvizqINwg/geJMPuN+0yLSR++6ZASXk7fm/ncnY
DJ8vc+1LJ2Txt0fmRIHxmHqY+Gui1OriTf/NXYMNmH+DyI4kNdEIKuLXgjrtlKj4
G9xZrjgFoG4aHB/PUgdw7twdeYSe/43xRT0I9uKCsSOBAOhsn9a2TqvPoCB73SAg
l/FLC7B9hoVeJPPFuk34nLg9pzDu/xth7m51WDZd2sszC8uvzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGpRnCFP/suhiucaiKL5D2kplwA5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzM5ZjBhYzYtOWRkNC0z
MmI5LWI0YTctZjM3NWVhNzFhNzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEytunARyw7qtTiM80iBCFTQWM0QsUTlKe1XB7gCeVNfyBe2ay7Ifciv
flhe4DbP6k+sVThTgwETk78rmFMGScnT0cM/8P+7oaVph9ztH36FswYwm4aXXy3R
Ux//w0GpaxokVL5f4QIEEgcxVEvclTL5u1FekaqfQSg5o3ucp7is4sMBkEejUsnd
WLCWhK2XwcSNAXxHbb3lPulgAsaPoquaHjREA585aCCrBecuy/9M578BhrdfBpCj
BEoVglbZJFanHdkTtbw5W5nVcgh7bFh4ivUFG8N0Lb04G19JgV9QiP9wNUMZHG1w
o3EiYHhtx7p6CyLyAj74lijl+9AIXR8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:35:41 2025 by rpki-client