Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/844c8e00-ff63-3adf-82c8-ff2309e6e078.roa
File: 844c8e00-ff63-3adf-82c8-ff2309e6e078.roa (raw, json)
Hash identifier: nxbjD56JLPNfls+82hmZs73xywYPF/rzrOXTUAHLeU8=
Subject key identifier: CA:75:49:E6:AA:16:73:80:03:79:3C:69:7D:01:CB:59:47:BB:E9:3F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848143CE110C8F27C85725BC090
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/844c8e00-ff63-3adf-82c8-ff2309e6e078.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 36183
IP address blocks: 172.224.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3c:e1:10:c8:f2:7c:85:72:5b:c0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=3761a5cb-9dcb-4559-b6dd-8637a2729052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f0:91:ad:4b:20:1e:42:8e:2b:6f:9a:88:28:
ac:46:8e:f6:94:05:ab:a3:a2:07:bb:bc:93:39:4c:
4d:a5:12:e0:ad:5d:db:99:34:18:d7:31:9f:20:c3:
5c:dd:23:5c:f5:df:6d:cf:85:dc:17:79:8f:4b:4c:
c6:3f:3f:c7:fa:95:60:95:81:4a:18:aa:45:ba:21:
f1:98:18:bf:ce:d3:a7:ee:ae:ac:ad:c4:3e:91:3b:
9a:d9:cd:6f:8a:bb:54:e4:ad:2b:c2:2b:d1:f5:ad:
95:83:de:44:4b:f8:1f:69:de:c6:be:01:0f:94:a8:
c4:72:36:35:c0:2f:21:c5:58:db:91:87:41:49:f8:
eb:f7:02:af:f6:ef:16:90:76:3d:0a:82:01:5c:02:
cb:17:63:f4:99:f0:de:f0:e5:22:10:08:17:c0:76:
c1:14:ea:72:ec:5c:54:ed:9a:d0:ba:45:da:fc:95:
70:f5:54:c4:5b:eb:22:59:a5:2b:74:95:75:d6:47:
1e:27:25:60:ca:ec:18:ce:35:83:38:19:8d:6c:a5:
62:8b:bd:13:8d:c6:f6:84:49:1a:66:94:ca:0e:b9:
c2:08:82:1d:ec:eb:f7:e3:2e:ab:1d:6b:6a:79:5d:
a1:d2:60:8a:fd:ab:88:d4:06:9d:cf:a0:7b:68:8b:
e3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:75:49:E6:AA:16:73:80:03:79:3C:69:7D:01:CB:59:47:BB:E9:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/844c8e00-ff63-3adf-82c8-ff2309e6e078.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:77:54:72:04:12:45:2c:f2:5d:01:d0:5e:35:bb:3e:5d:ce:
58:66:39:24:1d:d6:b6:eb:c3:61:b3:99:7b:17:1a:26:95:10:
94:12:a5:f5:41:a4:fb:05:fe:dc:36:aa:32:fb:df:40:d3:36:
cf:2a:56:2c:1c:78:91:12:c6:a6:9b:d7:24:72:cb:e8:d2:05:
ff:6b:f8:a7:5c:20:88:9e:1d:29:0a:a9:70:09:69:04:c7:e9:
d2:01:ef:09:36:c3:d1:1f:02:33:68:ad:c1:89:9d:dd:cd:5d:
7b:96:a1:b2:ea:5b:6d:8b:70:52:db:d3:5d:5a:64:ac:84:4b:
0d:1e:ac:04:49:d5:b7:ba:6b:1e:04:d0:d6:25:b0:93:00:7d:
98:9e:c0:ad:66:50:52:86:c5:51:09:65:10:af:8c:66:4e:d7:
90:8c:14:3e:87:40:cd:b3:fa:c8:aa:66:d5:fd:64:c5:cf:4b:
26:ed:3b:b0:e2:cd:65:53:f5:af:e9:a2:1e:65:ff:19:df:43:
7c:d2:58:80:3c:e7:3d:3c:7c:4e:6f:98:3b:26:c9:56:4b:e8:
b4:3f:bd:de:68:52:76:f3:5e:2d:7d:7a:32:a7:ad:63:66:f7:
23:c0:b9:d1:8e:ce:f3:c3:b3:20:9f:33:bc:7d:fd:b9:61:87:
a6:a4:1d:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPOEQyPJ8hXJbwJAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
Mzc2MWE1Y2ItOWRjYi00NTU5LWI2ZGQtODYzN2EyNzI5MDUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPCRrUsgHkKOK2+aiCisRo72lAWro6IHu7yT
OUxNpRLgrV3bmTQY1zGfIMNc3SNc9d9tz4XcF3mPS0zGPz/H+pVglYFKGKpFuiHx
mBi/ztOn7q6srcQ+kTua2c1virtU5K0rwivR9a2Vg95ES/gfad7GvgEPlKjEcjY1
wC8hxVjbkYdBSfjr9wKv9u8WkHY9CoIBXALLF2P0mfDe8OUiEAgXwHbBFOpy7FxU
7ZrQukXa/JVw9VTEW+siWaUrdJV11kceJyVgyuwYzjWDOBmNbKVii70Tjcb2hEka
ZpTKDrnCCIId7Ov34y6rHWtqeV2h0mCK/auI1Aadz6B7aIvjtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMp1SeaqFnOAA3k8aX0By1lHu+k/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODQ0YzhlMDAtZmY2My0z
YWRmLTgyYzgtZmYyMzA5ZTZlMDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOCEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADN3VHIEEkUs8l0B0F41uz5dzlhmOSQd1rbrw2GzmXsXGiaVEJQSpfVB
pPsF/tw2qjL730DTNs8qViwceJESxqab1yRyy+jSBf9r+KdcIIieHSkKqXAJaQTH
6dIB7wk2w9EfAjNorcGJnd3NXXuWobLqW22LcFLb011aZKyESw0erARJ1be6ax4E
0NYlsJMAfZiewK1mUFKGxVEJZRCvjGZO15CMFD6HQM2z+siqZtX9ZMXPSybtO7Di
zWVT9a/poh5l/xnfQ3zSWIA85z08fE5vmDsmyVZL6LQ/vd5oUnbzXi19ejKnrWNm
9yPAudGOzvPDsyCfM7x9/blhh6akHTI=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:35:09 2025 by rpki-client