Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/30e7aa63-6b7d-36a0-8bc0-632b6bab02bf.roa
File: 30e7aa63-6b7d-36a0-8bc0-632b6bab02bf.roa (raw, json)
Hash identifier: gVIaB6EfjTMJOTRZ58ZVyNq4OP8qpe4RPiuDdvDRs9U=
Subject key identifier: 6C:DF:50:72:F9:01:53:03:4F:B3:A9:87:77:51:B5:23:33:B3:B8:07
Certificate issuer: /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
Certificate serial: 010D0C9F43285848424AC688155EC5C112870D00
Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/30e7aa63-6b7d-36a0-8bc0-632b6bab02bf.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 46362
IP address blocks: 204.186.159.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:c6:88:15:5e:c5:c1:12:87:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=b71a3ccc-1b78-4518-b156-0d23dc505ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9d:ca:6c:04:ff:e9:53:e3:a5:40:a0:f4:8a:
05:c2:42:dd:5e:37:fd:7a:88:4f:07:3e:db:7a:bc:
a8:e6:f6:70:8a:2a:dc:ba:6f:1d:ee:00:9b:26:e9:
76:a0:17:3d:43:35:2f:07:80:97:28:87:aa:7a:48:
df:4b:fd:9e:6a:2d:46:b4:20:de:46:19:4c:c3:81:
3e:d7:c2:e8:4e:72:31:5d:b1:46:cf:d0:3c:69:80:
0a:e6:4a:68:6f:e0:71:c0:d5:e4:65:1f:f3:71:51:
76:12:23:b7:67:1c:9b:82:46:b1:77:c6:eb:82:40:
68:3c:1f:e0:3e:09:dd:a3:d0:fa:27:4e:21:1d:51:
3b:52:dc:47:55:4d:52:62:ed:65:85:7c:31:9d:c1:
23:a0:f2:17:a1:91:80:a0:b8:9f:46:06:bf:28:82:
03:23:73:c2:85:99:f4:9c:dd:4b:b9:1b:82:34:9a:
10:e0:37:69:6d:3d:fb:f6:4e:69:39:f7:ca:42:05:
b8:a6:23:f0:9c:38:41:a1:64:1b:c0:be:b2:a9:95:
e3:4a:ad:ce:8a:bb:74:2c:5c:a1:d0:84:08:87:8f:
b0:8f:dc:ca:2e:03:6f:b9:d2:af:8c:1d:72:f8:0b:
79:bb:75:7b:b1:34:93:65:d1:f2:f4:69:9b:f7:6f:
6c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DF:50:72:F9:01:53:03:4F:B3:A9:87:77:51:B5:23:33:B3:B8:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/30e7aa63-6b7d-36a0-8bc0-632b6bab02bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl
X509v3 Authority Key Identifier:
keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
sbgp-ipAddrBlock: critical
IPv4:
204.186.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:45:e6:df:4a:86:b7:ba:88:d5:be:60:26:31:50:e1:7c:ec:
5e:62:13:2f:84:b5:a7:49:47:89:5c:ba:46:e4:76:e5:0a:e3:
01:4a:26:c7:c6:6c:45:50:3f:5d:bb:1b:3a:5b:0c:af:d7:30:
af:2a:5a:c6:b4:0a:e8:ce:1a:e0:e4:21:c3:c3:3c:1d:a3:54:
ca:c3:81:46:d1:a7:f1:c4:64:a6:61:44:ab:8a:5e:a0:4e:ab:
65:a2:87:70:85:35:be:a4:df:49:7c:9f:bb:78:1c:a8:c4:be:
c0:10:6b:b6:1b:e9:4f:90:53:a2:68:6d:b1:88:52:9f:1c:5f:
f1:63:ed:7b:54:8f:b3:3f:5a:b0:9b:5b:ad:25:f5:ab:71:3b:
85:dc:8a:a3:92:0f:64:19:81:8c:cf:5b:96:a4:79:fb:55:f4:
2b:87:dc:aa:bf:ef:ec:9a:7b:d8:99:e9:58:ca:0c:8d:99:41:
ca:3c:c2:2c:ec:36:8a:72:5a:50:d1:56:8e:b4:52:51:e1:b8:
92:5b:f7:7e:eb:12:e1:d9:0b:8b:d4:cf:4d:d4:b3:64:02:af:
dd:71:c6:28:24:d6:2f:d4:46:34:07:89:4e:f7:2a:a7:cd:b9:
70:57:86:06:a3:b3:34:d6:2d:28:73:a8:81:81:13:85:ef:2e:
9b:5d:e6:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhCSsaIFV7FwRKHDQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDVkZmZjZWYtZDdkOC00YjU4LWI0ZjUtYmJlY2M2OTVi
YWZmMB4XDTI0MTIxOTE0MDA1MloXDTI1MDMxOTEzMDA1MlowLzEtMCsGA1UEAxMk
YjcxYTNjY2MtMWI3OC00NTE4LWIxNTYtMGQyM2RjNTA1YWIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZ3KbAT/6VPjpUCg9IoFwkLdXjf9eohPBz7b
eryo5vZwiircum8d7gCbJul2oBc9QzUvB4CXKIeqekjfS/2eai1GtCDeRhlMw4E+
18LoTnIxXbFGz9A8aYAK5kpob+BxwNXkZR/zcVF2EiO3Zxybgkaxd8brgkBoPB/g
Pgndo9D6J04hHVE7UtxHVU1SYu1lhXwxncEjoPIXoZGAoLifRga/KIIDI3PChZn0
nN1LuRuCNJoQ4DdpbT379k5pOffKQgW4piPwnDhBoWQbwL6yqZXjSq3Oirt0LFyh
0IQIh4+wj9zKLgNvudKvjB1y+At5u3V7sTSTZdHy9Gmb929swwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGzfUHL5AVMDT7Oph3dRtSMzs7gHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRm
ZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5NWJhZmYvMzBlN2FhNjMtNmI3ZC0z
NmEwLThiYzAtNjMyYjZiYWIwMmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZmZjZWYtZDdkOC00YjU4LWI0
ZjUtYmJlY2M2OTViYWZmLzQ1ZGZmY2VmLWQ3ZDgtNGI1OC1iNGY1LWJiZWNjNjk1
YmFmZi5jcmwwHwYDVR0jBBgwFoAU2Ian5EHiWu1c+gv6GSKHe+hhYv4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVj
YzY5NWJhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzLqfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF1F5t9Khre6iNW+YCYxUOF87F5iEy+EtadJR4lcukbkduUK4wFKJsfG
bEVQP127GzpbDK/XMK8qWsa0CujOGuDkIcPDPB2jVMrDgUbRp/HEZKZhRKuKXqBO
q2Wih3CFNb6k30l8n7t4HKjEvsAQa7Yb6U+QU6JobbGIUp8cX/Fj7XtUj7M/WrCb
W60l9atxO4XciqOSD2QZgYzPW5akeftV9CuH3Kq/7+yae9iZ6VjKDI2ZQco8wizs
NopyWlDRVo60UlHhuJJb937rEuHZC4vUz03Us2QCr91xxigk1i/URjQHiU73KqfN
uXBXhgajszTWLShzqIGBE4XvLptd5q8=
-----END CERTIFICATE-----
Generated at Tue Apr 29 23:32:11 2025 by rpki-client