Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f13fc02f-a824-3a53-a360-617f1ec4209c.roa
File: f13fc02f-a824-3a53-a360-617f1ec4209c.roa (raw, json)
Hash identifier: PWZpuIwrInr2K0JLpTnqRbFN7InQ+k0IaX40BIrI3OE=
Subject key identifier: BE:21:EB:F4:1F:7C:7B:B9:D2:81:86:1F:4E:39:02:AB:56:64:B5:B0
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F432858491246BA6440B2375F8708F140
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f13fc02f-a824-3a53-a360-617f1ec4209c.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 202
IP address blocks: 192.46.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:ba:64:40:b2:37:5f:87:08:f1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=dd09bcaf-339c-48e1-8003-53966fd0e40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:39:de:b6:19:d5:09:b4:13:d4:b7:ea:65:d4:
aa:39:b1:5a:fb:57:d0:0f:73:38:2d:45:5a:72:6c:
a7:ef:3b:2b:f4:20:b4:24:f0:7f:a0:87:43:43:3c:
1e:9d:39:26:94:5d:49:31:76:31:55:77:12:44:6a:
79:56:d0:68:f3:e4:78:23:45:bb:9d:18:79:cf:02:
9c:f7:f4:3e:b1:15:8b:61:c3:9f:8c:ed:b0:31:57:
9f:f0:ad:cb:81:40:3d:1e:7f:af:dd:0a:50:87:c7:
0d:4f:14:b9:97:e0:96:88:11:af:8c:f4:8d:3a:98:
af:ed:7e:b5:c4:ef:10:e4:9a:17:70:59:ef:36:39:
ed:c5:32:ce:b0:5e:be:ea:0c:b5:ca:e9:9c:7f:97:
f1:45:f8:f5:5a:70:b5:b7:18:8b:4d:91:96:f1:4c:
fc:e6:fc:07:b6:5b:3c:ca:cf:28:4b:20:fa:06:38:
6b:a5:b4:4c:ad:3c:67:53:78:54:b5:2b:38:00:35:
15:b0:67:2e:2e:cf:a8:04:06:c6:34:f8:9b:ee:4d:
3c:49:23:f1:29:38:c7:0a:19:8d:a4:78:7e:0a:d8:
f6:dd:4e:da:9c:f3:53:69:fa:6e:14:10:d9:6b:b6:
12:8b:1f:fd:a9:85:28:85:21:af:9a:39:a8:6d:f2:
bb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:21:EB:F4:1F:7C:7B:B9:D2:81:86:1F:4E:39:02:AB:56:64:B5:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f13fc02f-a824-3a53-a360-617f1ec4209c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
192.46.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:8a:19:1a:9d:0a:1e:7b:b3:84:59:10:3b:57:d7:a4:ba:4f:
7d:f6:6f:2d:78:ef:ff:eb:52:8d:b4:60:75:28:db:8e:82:56:
ea:ed:ca:3e:5f:d7:ce:d1:a7:74:9b:50:23:da:af:28:a1:9e:
ef:46:c1:85:b4:c9:84:d9:17:20:82:51:71:4a:32:7b:41:25:
7f:5c:ec:7a:cb:ef:ee:5d:c7:ba:84:57:15:f3:11:e0:87:bc:
d6:55:1f:a6:57:ec:91:a6:c1:2a:be:ce:f2:45:01:76:f7:46:
cc:c5:5a:70:ac:67:48:ea:ff:5a:19:c3:b5:c7:7f:0d:cd:00:
33:74:9b:f3:0f:6f:b3:3d:4f:f9:c8:e8:cf:02:76:e4:a2:91:
f3:3a:35:53:f1:79:68:75:95:35:af:12:56:88:81:af:64:38:
43:71:ef:ed:4e:48:9c:a3:de:d2:34:98:80:e8:ed:92:ea:e4:
f8:1f:c3:54:e4:70:13:fb:f4:fc:a8:1c:08:97:43:af:f8:70:
a2:f0:63:fa:c6:d1:9a:05:df:85:c4:40:70:9d:3b:cd:d7:75:
a6:97:4c:3d:63:cf:65:6b:b9:89:ac:c6:94:85:c1:42:22:e0:
2a:26:41:31:c0:65:83:82:33:84:86:e9:87:9f:2f:b6:00:f8:
dc:a6:27:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRrpkQLI3X4cI8UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
ZGQwOWJjYWYtMzM5Yy00OGUxLTgwMDMtNTM5NjZmZDBlNDBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDnethnVCbQT1LfqZdSqObFa+1fQD3M4LUVa
cmyn7zsr9CC0JPB/oIdDQzwenTkmlF1JMXYxVXcSRGp5VtBo8+R4I0W7nRh5zwKc
9/Q+sRWLYcOfjO2wMVef8K3LgUA9Hn+v3QpQh8cNTxS5l+CWiBGvjPSNOpiv7X61
xO8Q5JoXcFnvNjntxTLOsF6+6gy1yumcf5fxRfj1WnC1txiLTZGW8Uz85vwHtls8
ys8oSyD6BjhrpbRMrTxnU3hUtSs4ADUVsGcuLs+oBAbGNPib7k08SSPxKTjHChmN
pHh+Ctj23U7anPNTafpuFBDZa7YSix/9qYUohSGvmjmobfK70QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL4h6/QffHu50oGGH045AqtWZLWwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZjEzZmMwMmYtYTgyNC0z
YTUzLWEzNjAtNjE3ZjFlYzQyMDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwC7MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIyKGRqdCh57s4RZEDtX16S6T332by147//rUo20YHUo246CVurtyj5f
187Rp3SbUCParyihnu9GwYW0yYTZFyCCUXFKMntBJX9c7HrL7+5dx7qEVxXzEeCH
vNZVH6ZX7JGmwSq+zvJFAXb3RszFWnCsZ0jq/1oZw7XHfw3NADN0m/MPb7M9T/nI
6M8CduSikfM6NVPxeWh1lTWvElaIga9kOENx7+1OSJyj3tI0mIDo7ZLq5Pgfw1Tk
cBP79PyoHAiXQ6/4cKLwY/rG0ZoF34XEQHCdO83XdaaXTD1jz2VruYmsxpSFwUIi
4ComQTHAZYOCM4SG6YefL7YA+NymJ5s=
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:31 2025 by rpki-client on console.sobornost.net