Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/915472ec-3ee3-374f-a1cf-a02c24d2a966.roa
File: 915472ec-3ee3-374f-a1cf-a02c24d2a966.roa (raw, json)
Hash identifier: VipKuPJJNaT8bkHJV+UoQ9aCrNTUwtY/fL9WmEovol4=
Subject key identifier: FE:20:9A:69:D2:38:89:08:13:D5:DB:C4:09:FF:6F:E2:07:9F:AF:B3
Certificate issuer: /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial: 010D0C9F432858486C2B095B64567E428E747600
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/915472ec-3ee3-374f-a1cf-a02c24d2a966.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 19437
IP address blocks: 172.96.2.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:09:5b:64:56:7e:42:8e:74:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=d44a00aa-fe9e-40ba-83d1-f5c52d8c9126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:12:93:4c:eb:a9:ab:7f:b5:8f:af:2c:72:ba:
b5:e8:bf:dc:06:6a:7c:e0:55:f9:93:0e:f1:00:8d:
71:1f:8d:ef:31:eb:17:d0:9c:94:ce:14:8b:e0:55:
52:b3:2a:84:11:7a:36:4e:dd:57:f3:46:c6:27:18:
65:f4:bb:24:59:9f:aa:fa:6d:ba:31:f9:3f:a9:06:
6b:14:55:8b:14:15:7d:10:b0:23:e1:d5:a3:0f:40:
47:22:38:ab:69:e6:64:c6:58:f0:69:eb:af:5e:6d:
be:c5:ac:64:8c:31:83:23:84:8f:40:cd:9c:2f:2d:
6b:9b:9f:a3:87:26:ba:d9:b4:20:8a:c4:8e:d9:6d:
cb:b1:ca:94:8e:15:f6:ac:fe:82:df:71:11:e8:9d:
4d:4d:cd:ad:75:05:82:26:89:ca:6e:2a:dc:8a:52:
4e:e9:07:43:b9:f4:9f:2c:de:97:16:fc:00:4b:4e:
92:9f:94:ef:f4:4d:d5:27:24:a8:4d:36:06:e8:fb:
71:ea:86:53:14:39:8a:17:05:5d:5f:3e:c0:9a:46:
aa:d6:64:ea:02:61:e8:d9:35:52:ac:ca:39:8a:1d:
aa:8f:43:6d:7f:f1:eb:b7:ef:bf:d7:8a:88:66:30:
80:07:a1:32:65:5c:93:57:17:8b:4b:be:47:8f:b0:
3c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:20:9A:69:D2:38:89:08:13:D5:DB:C4:09:FF:6F:E2:07:9F:AF:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/915472ec-3ee3-374f-a1cf-a02c24d2a966.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl
X509v3 Authority Key Identifier:
keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
sbgp-ipAddrBlock: critical
IPv4:
172.96.2.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:29:fd:ce:f3:98:d2:f7:ef:56:04:40:a5:61:38:fa:31:c0:
3d:95:78:b4:fb:51:3b:fd:95:a8:56:f3:da:84:04:af:18:f8:
22:42:d8:c3:4d:36:58:98:3d:e5:34:d0:5e:29:fa:79:58:e7:
14:4d:36:c3:a2:7f:a9:69:01:74:1a:be:e1:90:19:ab:7d:48:
76:f8:f1:b1:3e:02:f4:c5:a4:61:94:93:68:77:41:ef:1f:aa:
6c:87:0a:a3:5b:e0:73:c4:11:d1:17:7b:a6:1f:9f:94:fd:46:
97:f0:90:43:41:94:53:1d:ae:d0:ad:76:13:fa:bb:38:a2:a5:
df:d5:e8:3a:ec:a3:ba:ab:25:04:ac:58:52:59:79:1c:00:fe:
a2:1f:02:dd:0c:d9:b4:b8:4a:2f:05:7a:05:9b:6e:1e:24:67:
3b:01:b6:3d:6b:9b:7e:7a:0b:3d:78:d7:e6:43:50:c0:26:1d:
fe:64:d8:88:22:7a:1b:c5:0c:4b:cc:23:fc:28:8a:cb:03:49:
9b:4b:a1:33:30:21:3c:8d:99:45:f7:d7:3c:53:86:25:89:b8:
2a:e1:96:96:1e:68:22:76:7d:31:a6:0a:d9:1b:26:4a:b6:d2:
4b:6a:0d:de:0f:ec:fc:60:01:91:c3:05:2e:42:12:d7:21:83:
c8:f9:3d:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKwlbZFZ+Qo50dgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmE0OGM3NGUtZWQ5ZS00NGU3LWJiZjUtNzZmNDczYTIx
ZDc0MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk
ZDQ0YTAwYWEtZmU5ZS00MGJhLTgzZDEtZjVjNTJkOGM5MTI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBKTTOupq3+1j68scrq16L/cBmp84FX5kw7x
AI1xH43vMesX0JyUzhSL4FVSsyqEEXo2Tt1X80bGJxhl9LskWZ+q+m26Mfk/qQZr
FFWLFBV9ELAj4dWjD0BHIjiraeZkxljwaeuvXm2+xaxkjDGDI4SPQM2cLy1rm5+j
hya62bQgisSO2W3LscqUjhX2rP6C33ER6J1NTc2tdQWCJonKbircilJO6QdDufSf
LN6XFvwAS06Sn5Tv9E3VJySoTTYG6Ptx6oZTFDmKFwVdXz7Amkaq1mTqAmHo2TVS
rMo5ih2qj0Ntf/Hrt++/14qIZjCAB6EyZVyTVxeLS75Hj7A8AwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP4gmmnSOIkIE9XbxAn/b+IHn6+zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4
Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0NzNhMjFkNzQvOTE1NDcyZWMtM2VlMy0z
NzRmLWExY2YtYTAyYzI0ZDJhOTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmE0OGM3NGUtZWQ5ZS00NGU3LWJi
ZjUtNzZmNDczYTIxZDc0LzJhNDhjNzRlLWVkOWUtNDRlNy1iYmY1LTc2ZjQ3M2Ey
MWQ3NC5jcmwwHwYDVR0jBBgwFoAUXFrsKTJFCAeytpiC7+CI1WXlPLcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0
NzNhMjFkNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGACMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH8p/c7zmNL371YEQKVhOPoxwD2VeLT7UTv9lahW89qEBK8Y+CJC2MNN
NliYPeU00F4p+nlY5xRNNsOif6lpAXQavuGQGat9SHb48bE+AvTFpGGUk2h3Qe8f
qmyHCqNb4HPEEdEXe6Yfn5T9RpfwkENBlFMdrtCtdhP6uziipd/V6Drso7qrJQSs
WFJZeRwA/qIfAt0M2bS4Si8FegWbbh4kZzsBtj1rm356Cz141+ZDUMAmHf5k2Igi
ehvFDEvMI/woissDSZtLoTMwITyNmUX31zxThiWJuCrhlpYeaCJ2fTGmCtkbJkq2
0ktqDd4P7PxgAZHDBS5CEtchg8j5PSg=
-----END CERTIFICATE-----
Generated at Tue May 6 09:25:58 2025 by rpki-client