Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/a896ecf3-3dc7-3c62-be80-f59bd439d4a9.roa
File: a896ecf3-3dc7-3c62-be80-f59bd439d4a9.roa (raw, json)
Hash identifier: n14tJyYulISlTjwIMGStF1+5dLGmn5gFL5WTtTpSAbE=
Subject key identifier: 9D:01:1D:72:61:F3:C1:41:E3:F1:5C:00:5F:6C:FB:28:F6:1F:47:A2
Certificate issuer: /CN=95437874-24a3-4971-a87b-95b645e257bb
Certificate serial: 010D0C9F43285848854B4F055543C0725FC45B80
Authority key identifier: 0D:9A:58:69:BC:33:C0:D1:95:9C:3D:00:B9:00:3B:B9:43:8A:4E:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/a896ecf3-3dc7-3c62-be80-f59bd439d4a9.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 36556
IP address blocks: 66.148.32.0/19 maxlen: 19
98.96.128.0/19 maxlen: 19
104.151.192.0/19 maxlen: 19
170.176.224.0/20 maxlen: 20
204.144.160.0/20 maxlen: 20
2602:fdfc::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:4f:05:55:43:c0:72:5f:c4:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95437874-24a3-4971-a87b-95b645e257bb
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=10488991-7f86-4eab-ae5c-adeede528389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:99:82:40:11:19:9f:80:1b:e4:fe:9d:1d:a9:
e6:27:2b:5d:72:13:67:85:32:aa:3b:1c:8b:f1:38:
e2:76:d5:94:71:31:67:e8:3f:a2:e3:d7:48:56:02:
35:ed:2d:8c:26:a9:fd:5c:f3:f0:25:03:d3:a7:ac:
98:1d:9c:b1:4b:fe:f4:db:89:b9:bf:e8:b6:87:1b:
45:39:2b:77:9d:b5:9a:95:4a:43:e5:6d:fb:ab:72:
9c:1b:e1:26:8a:5a:e6:58:d6:4a:8b:d1:b9:44:09:
76:f9:ed:ab:19:53:80:61:1a:c6:8d:0e:91:31:bd:
71:47:53:34:2c:dd:b6:08:fa:c5:0f:12:8a:6a:2d:
4e:a3:f1:78:91:bc:cd:f9:90:b9:a8:ae:9e:3c:e8:
09:3f:11:b6:ba:e7:d6:c6:05:29:3e:af:2a:94:29:
c9:cb:28:d3:c0:91:97:99:39:59:0a:bc:85:19:11:
23:fb:2b:4e:a7:20:79:85:65:d0:05:80:1d:58:bd:
54:01:e9:b1:76:c5:0a:07:a5:28:e3:60:8b:68:0d:
4c:df:eb:65:0f:93:b8:22:7d:dd:85:3a:d4:e6:a9:
4e:bf:7f:db:81:dc:3d:39:6a:8c:ab:74:0d:79:fc:
9f:de:49:14:22:e4:f6:ff:cd:44:ec:68:da:62:bb:
9d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:01:1D:72:61:F3:C1:41:E3:F1:5C:00:5F:6C:FB:28:F6:1F:47:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/a896ecf3-3dc7-3c62-be80-f59bd439d4a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.crl
X509v3 Authority Key Identifier:
keyid:0D:9A:58:69:BC:33:C0:D1:95:9C:3D:00:B9:00:3B:B9:43:8A:4E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer
sbgp-ipAddrBlock: critical
IPv4:
66.148.32.0/19
98.96.128.0/19
104.151.192.0/19
170.176.224.0/20
204.144.160.0/20
IPv6:
2602:fdfc::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:87:0a:5f:ea:93:50:83:b8:0e:9f:3a:6e:02:b5:80:c6:44:
4f:7b:52:f3:dd:11:3a:68:5c:04:84:39:30:8b:8b:c0:5f:ec:
27:8a:95:d4:b3:31:00:65:3a:ce:57:79:a4:cd:34:48:ba:4f:
f0:c4:92:8c:23:cf:b8:c5:b2:71:33:17:8f:ba:94:8e:59:55:
ee:d0:b9:c3:ab:4f:8f:6e:f4:ca:29:a4:98:0e:1f:a9:f2:a1:
ec:37:48:3f:92:3e:6f:69:f7:53:c0:1d:0e:3c:b3:c0:a4:2e:
38:18:69:19:72:e7:ce:8f:cc:78:7f:33:f3:a4:0c:24:56:5f:
bc:84:3b:1a:6e:db:a5:a4:fb:42:a8:c1:10:53:86:d0:31:40:
85:16:3a:60:8e:67:5d:8f:4c:3d:2a:a0:d3:e7:cb:aa:93:80:
6b:37:5f:57:aa:0c:62:b0:d8:61:43:54:c0:68:bb:68:cd:dc:
6e:ae:cf:ff:b4:79:44:fd:36:43:ca:69:b0:bc:78:d5:22:2a:
d6:4c:24:45:e9:e1:ea:20:3f:4a:5c:04:d6:15:82:f0:ef:86:
c7:56:e7:89:30:d6:ab:ac:e6:b8:a9:38:41:7a:9a:56:26:70:
b7:1d:4b:d6:0a:7b:ea:ec:f7:ee:b8:aa:3b:0a:7a:25:fb:db:
53:f2:16:0b
-----BEGIN CERTIFICATE-----
MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWEiFS08FVUPAcl/EW4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTU0Mzc4NzQtMjRhMy00OTcxLWE4N2ItOTViNjQ1ZTI1
N2JiMB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk
MTA0ODg5OTEtN2Y4Ni00ZWFiLWFlNWMtYWRlZWRlNTI4Mzg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZmCQBEZn4Ab5P6dHanmJytdchNnhTKqOxyL
8TjidtWUcTFn6D+i49dIVgI17S2MJqn9XPPwJQPTp6yYHZyxS/7024m5v+i2hxtF
OSt3nbWalUpD5W37q3KcG+EmilrmWNZKi9G5RAl2+e2rGVOAYRrGjQ6RMb1xR1M0
LN22CPrFDxKKai1Oo/F4kbzN+ZC5qK6ePOgJPxG2uufWxgUpPq8qlCnJyyjTwJGX
mTlZCryFGREj+ytOpyB5hWXQBYAdWL1UAemxdsUKB6Uo42CLaA1M3+tlD5O4In3d
hTrU5qlOv3/bgdw9OWqMq3QNefyf3kkUIuT2/81E7GjaYrudzwIDAQABo4IDfTCC
A3kwHQYDVR0OBBYEFJ0BHXJh88FB4/FcAF9s+yj2H0eiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85NTQz
Nzg3NC0yNGEzLTQ5NzEtYTg3Yi05NWI2NDVlMjU3YmIvYTg5NmVjZjMtM2RjNy0z
YzYyLWJlODAtZjU5YmQ0MzlkNGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTU0Mzc4NzQtMjRhMy00OTcxLWE4
N2ItOTViNjQ1ZTI1N2JiLzk1NDM3ODc0LTI0YTMtNDk3MS1hODdiLTk1YjY0NWUy
NTdiYi5jcmwwHwYDVR0jBBgwFoAUDZpYabwzwNGVnD0AuQA7uUOKTmkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85NTQzNzg3NC0yNGEzLTQ5NzEtYTg3Yi05NWI2
NDVlMjU3YmIuY2VyMEcGCCsGAQUFBwEHAQH/BDgwNjAkBAIAATAeAwQFQpQgAwQF
YmCAAwQFaJfAAwQEqrDgAwQEzJCgMA4EAgACMAgDBgQmAv38ADBUBgNVHSABAf8E
SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u
bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAa
hwpf6pNQg7gOnzpuArWAxkRPe1Lz3RE6aFwEhDkwi4vAX+wnipXUszEAZTrOV3mk
zTRIuk/wxJKMI8+4xbJxMxePupSOWVXu0LnDq0+PbvTKKaSYDh+p8qHsN0g/kj5v
afdTwB0OPLPApC44GGkZcufOj8x4fzPzpAwkVl+8hDsabtulpPtCqMEQU4bQMUCF
Fjpgjmddj0w9KqDT58uqk4BrN19XqgxisNhhQ1TAaLtozdxurs//tHlE/TZDymmw
vHjVIirWTCRF6eHqID9KXATWFYLw74bHVueJMNarrOa4qThBeppWJnC3HUvWCnvq
7PfuuKo7Cnol+9tT8hYL
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:23:35 2025 by rpki-client