Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/e92c285d-42ac-326f-a5f3-5d7542fc90ae.roa
File: e92c285d-42ac-326f-a5f3-5d7542fc90ae.roa (raw, json)
Hash identifier: qQofwuG0vH/xHp4sBzRRxGFhfBo7y5KD6UCtz1GcMYY=
Subject key identifier: 5C:FC:EB:AB:1B:23:56:81:5D:0B:C4:E2:83:CA:48:37:36:DD:97:34
Certificate issuer: /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial: 010D0C9F4328584854703725FC809411429F5200
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/e92c285d-42ac-326f-a5f3-5d7542fc90ae.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 9009
IP address blocks: 172.85.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:37:25:fc:80:94:11:42:9f:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=a05b4714-b1e0-4105-9ebe-84494a0ee291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1c:10:32:63:42:e5:fb:95:97:c3:2a:d6:2e:
de:d6:07:57:4d:6c:bd:1b:90:bf:48:80:4a:76:06:
fb:41:e3:1a:5b:6d:41:be:83:5c:91:84:ac:85:39:
f5:a0:da:89:21:22:90:89:ac:41:ff:75:b1:9e:06:
e3:9e:aa:53:92:37:3b:b1:6b:d6:a7:64:a3:41:39:
31:6e:68:f6:15:2f:ed:93:b0:be:f0:57:ee:56:cf:
61:a7:6a:ff:57:c4:cc:2a:45:35:09:e2:2d:18:00:
80:4b:50:d1:a8:1a:f9:77:ed:01:98:d5:6f:46:59:
06:6f:26:3f:18:2c:b9:10:ca:5e:50:67:c5:0c:fb:
10:7e:ae:a4:3f:f9:3b:24:a2:f7:d6:88:2b:42:1c:
71:6b:70:a8:e5:33:e0:2c:d7:66:7e:aa:24:db:b7:
63:c4:2e:cc:00:26:3e:72:60:0d:66:46:f6:c0:e3:
83:58:f0:5f:a0:6c:9e:c3:d2:ca:32:57:5c:58:ea:
a9:d7:eb:56:49:9e:09:59:9d:cc:a6:b1:6e:04:a7:
a5:71:fd:77:fb:4f:62:8f:34:a4:50:8a:75:91:17:
cb:cb:b0:8c:11:03:74:cf:89:c8:9c:ac:ed:fa:02:
52:92:87:41:60:fb:55:f8:c1:ae:79:f0:70:f9:8f:
0d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FC:EB:AB:1B:23:56:81:5D:0B:C4:E2:83:CA:48:37:36:DD:97:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/e92c285d-42ac-326f-a5f3-5d7542fc90ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
X509v3 Authority Key Identifier:
keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
sbgp-ipAddrBlock: critical
IPv4:
172.85.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:2d:9c:ea:ff:36:3d:c1:c6:6f:c1:a9:1a:9b:cf:4b:04:a9:
55:2d:fc:ef:68:4c:04:75:ba:fb:16:f9:7b:e5:5c:9f:70:28:
dd:f9:6b:5f:4e:69:30:e2:c1:64:52:d8:b7:23:59:9c:5d:9e:
7d:56:9a:2b:50:a6:06:b9:91:74:2f:bd:5f:7b:c8:8c:94:4a:
f1:46:16:96:f6:6b:6a:5d:79:8b:3f:9c:01:33:55:6d:bb:43:
1c:6b:40:5e:53:53:52:29:c1:c0:65:dd:e3:09:44:d8:50:c3:
f9:bc:5d:93:78:4c:2f:7f:81:37:56:8c:36:4f:0e:f0:50:99:
d1:a2:c3:c1:02:4b:94:90:50:7f:bc:61:3f:57:21:7e:69:62:
6f:24:77:ee:37:78:42:1d:c1:66:27:c1:a8:ba:4a:7a:49:79:
33:5a:c9:c3:7f:73:97:5d:3d:31:33:51:c7:db:27:09:83:65:
ec:0c:2b:fe:b9:26:4f:bc:3f:85:dd:83:f5:a7:47:4c:95:9c:
b9:cc:38:8a:50:dc:a4:6b:a6:5e:df:76:84:a7:18:85:54:f9:
73:12:32:c5:64:b2:0e:e0:28:a0:8c:a2:3b:12:66:45:11:8b:
7d:a3:fb:c4:00:94:5a:11:fb:5a:07:2b:60:e1:26:6b:58:5a:
b7:9b:47:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhUcDcl/ICUEUKfUgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM1OThjMTktOWQ4ZS00NjUwLWFiY2UtYzM0YzUxNDY1
OTFmMB4XDTI0MTIyNjAyMDA0MFoXDTI1MDMyNjAxMDA0MFowLzEtMCsGA1UEAxMk
YTA1YjQ3MTQtYjFlMC00MTA1LTllYmUtODQ0OTRhMGVlMjkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRwQMmNC5fuVl8Mq1i7e1gdXTWy9G5C/SIBK
dgb7QeMaW21BvoNckYSshTn1oNqJISKQiaxB/3WxngbjnqpTkjc7sWvWp2SjQTkx
bmj2FS/tk7C+8FfuVs9hp2r/V8TMKkU1CeItGACAS1DRqBr5d+0BmNVvRlkGbyY/
GCy5EMpeUGfFDPsQfq6kP/k7JKL31ogrQhxxa3Co5TPgLNdmfqok27djxC7MACY+
cmANZkb2wOODWPBfoGyew9LKMldcWOqp1+tWSZ4JWZ3MprFuBKelcf13+09ijzSk
UIp1kRfLy7CMEQN0z4nInKzt+gJSkodBYPtV+MGuefBw+Y8NZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFz866sbI1aBXQvE4oPKSDc23Zc0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kYzU5
OGMxOS05ZDhlLTQ2NTAtYWJjZS1jMzRjNTE0NjU5MWYvZTkyYzI4NWQtNDJhYy0z
MjZmLWE1ZjMtNWQ3NTQyZmM5MGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGM1OThjMTktOWQ4ZS00NjUwLWFi
Y2UtYzM0YzUxNDY1OTFmL2RjNTk4YzE5LTlkOGUtNDY1MC1hYmNlLWMzNGM1MTQ2
NTkxZi5jcmwwHwYDVR0jBBgwFoAUZJxII/ggNcM5/fDGWr3QRs2B+owwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kYzU5OGMxOS05ZDhlLTQ2NTAtYWJjZS1jMzRj
NTE0NjU5MWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFVsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABotnOr/Nj3Bxm/BqRqbz0sEqVUt/O9oTAR1uvsW+XvlXJ9wKN35a19O
aTDiwWRS2LcjWZxdnn1WmitQpga5kXQvvV97yIyUSvFGFpb2a2pdeYs/nAEzVW27
QxxrQF5TU1IpwcBl3eMJRNhQw/m8XZN4TC9/gTdWjDZPDvBQmdGiw8ECS5SQUH+8
YT9XIX5pYm8kd+43eEIdwWYnwai6SnpJeTNaycN/c5ddPTEzUcfbJwmDZewMK/65
Jk+8P4Xdg/WnR0yVnLnMOIpQ3KRrpl7fdoSnGIVU+XMSMsVksg7gKKCMojsSZkUR
i32j+8QAlFoR+1oHK2DhJmtYWrebR84=
-----END CERTIFICATE-----
Generated at Fri Apr 25 23:19:53 2025 by rpki-client