Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/654b5ba3-a06d-3bfa-b056-bb99147e64fc.roa
File: 654b5ba3-a06d-3bfa-b056-bb99147e64fc.roa (raw, json)
Hash identifier: 4YgWggGrZRiPY2iw/aLkLPrP5p8pNGQRKzdCcyhyN1U=
Subject key identifier: D2:55:59:41:40:4F:FD:98:A4:EF:98:36:62:0C:94:90:C3:7B:C2:4E
Certificate issuer: /CN=fc37b0c2-03f7-4d4d-9048-a7041df8c288
Certificate serial: 010D0C9F432858494E2EB157DC2B36ACB2768948
Authority key identifier: 03:27:42:47:A0:F0:A9:68:65:E9:72:0C:27:71:CE:C8:63:B2:77:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/654b5ba3-a06d-3bfa-b056-bb99147e64fc.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 199563
IP address blocks: 132.190.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:b1:57:dc:2b:36:ac:b2:76:89:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc37b0c2-03f7-4d4d-9048-a7041df8c288
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=99ac4a71-fda0-4934-b37a-48cda79c5415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c4:f5:e4:ff:00:49:55:f1:c5:89:36:bb:ac:
d2:0f:97:fd:0b:6c:e8:aa:98:ce:15:4a:73:86:9a:
c3:3b:b8:0d:8b:da:19:40:74:a7:c7:5a:1b:54:93:
2f:eb:be:c0:c0:34:36:ac:ca:61:ff:64:20:19:34:
e6:7e:27:70:33:0e:9a:c0:45:31:ed:34:71:a4:ec:
62:6e:fa:6c:22:31:c0:38:c2:ef:68:6f:0f:62:86:
ad:ba:b8:e9:f7:2d:ea:1f:b8:a8:03:ba:69:85:68:
85:4a:bd:c7:de:7b:f8:e3:eb:85:0d:6c:9e:59:7d:
a3:f7:8d:6a:88:e7:92:61:d8:43:79:77:f4:00:4c:
a4:af:c0:c4:f0:e1:5d:50:27:3b:1a:cc:c4:b5:d4:
97:82:e2:65:6e:62:18:3b:42:14:69:68:50:6e:9a:
da:c9:71:bf:36:3b:08:3f:da:96:e9:18:2b:35:7a:
b5:bf:64:37:68:ee:d2:59:1e:d2:82:6d:9c:62:54:
0b:e3:ea:e3:27:bd:0a:d9:f1:0d:d0:15:54:01:46:
39:a9:f4:d2:09:a1:04:17:7a:47:18:e5:a5:a5:50:
1b:aa:f8:05:4d:71:75:45:5e:83:fb:1b:bd:99:cb:
5a:3a:76:f6:b9:df:21:d7:62:2f:6b:57:71:57:2f:
2a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:55:59:41:40:4F:FD:98:A4:EF:98:36:62:0C:94:90:C3:7B:C2:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/654b5ba3-a06d-3bfa-b056-bb99147e64fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/fc37b0c2-03f7-4d4d-9048-a7041df8c288.crl
X509v3 Authority Key Identifier:
keyid:03:27:42:47:A0:F0:A9:68:65:E9:72:0C:27:71:CE:C8:63:B2:77:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288.cer
sbgp-ipAddrBlock: critical
IPv4:
132.190.80.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:82:c9:a2:f5:6e:91:fc:15:fe:0d:2c:70:54:54:32:27:6c:
6b:79:d2:ea:ad:ab:63:aa:bd:7d:84:5c:a2:fa:45:08:2c:c5:
a6:36:b3:ee:bb:de:2c:fb:1c:8f:0c:cc:c1:5b:90:9f:31:1c:
c5:30:8c:c4:b1:89:a2:4d:88:3b:a2:4a:82:39:5e:f9:c2:96:
2c:45:9d:82:c4:d8:4e:33:f4:41:26:b9:b6:bb:63:e4:28:b9:
55:3c:ff:f0:18:7a:67:93:22:41:fd:49:53:d8:c6:35:86:75:
f5:8d:80:2a:13:43:86:ff:ea:44:51:f8:b7:df:2a:21:e2:2d:
9b:e0:b5:bd:48:2f:29:d9:15:52:03:c8:53:e9:0c:72:7b:75:
25:c6:ed:b9:86:b2:cc:a8:51:5e:43:d4:2c:79:13:4c:67:dd:
b3:ce:99:0c:bd:97:6b:bf:c1:89:c3:a4:c2:e5:f5:d8:ea:d7:
65:52:8b:ae:9b:5e:29:0c:f5:f0:ca:98:00:2d:37:14:72:2e:
17:ca:76:3a:9d:b7:fe:a4:9e:78:5a:88:aa:3a:d5:7f:63:7b:
17:ab:77:8f:3f:58:c4:c8:24:bc:b9:c4:51:9f:9d:2d:3f:81:
5f:e2:0f:17:78:fc:c5:5e:14:e4:7c:f9:4d:b2:89:40:b6:1b:
c6:de:18:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLrFX3Cs2rLJ2iUgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmMzN2IwYzItMDNmNy00ZDRkLTkwNDgtYTcwNDFkZjhj
Mjg4MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk
OTlhYzRhNzEtZmRhMC00OTM0LWIzN2EtNDhjZGE3OWM1NDE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsT15P8ASVXxxYk2u6zSD5f9C2zoqpjOFUpz
hprDO7gNi9oZQHSnx1obVJMv677AwDQ2rMph/2QgGTTmfidwMw6awEUx7TRxpOxi
bvpsIjHAOMLvaG8PYoaturjp9y3qH7ioA7pphWiFSr3H3nv44+uFDWyeWX2j941q
iOeSYdhDeXf0AEykr8DE8OFdUCc7GszEtdSXguJlbmIYO0IUaWhQbprayXG/NjsI
P9qW6RgrNXq1v2Q3aO7SWR7Sgm2cYlQL4+rjJ70K2fEN0BVUAUY5qfTSCaEEF3pH
GOWlpVAbqvgFTXF1RV6D+xu9mctaOnb2ud8h12Iva1dxVy8q0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNJVWUFAT/2YpO+YNmIMlJDDe8JOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9mYzM3
YjBjMi0wM2Y3LTRkNGQtOTA0OC1hNzA0MWRmOGMyODgvNjU0YjViYTMtYTA2ZC0z
YmZhLWIwNTYtYmI5OTE0N2U2NGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZmMzN2IwYzItMDNmNy00ZDRkLTkw
NDgtYTcwNDFkZjhjMjg4L2ZjMzdiMGMyLTAzZjctNGQ0ZC05MDQ4LWE3MDQxZGY4
YzI4OC5jcmwwHwYDVR0jBBgwFoAUAydCR6DwqWhl6XIMJ3HOyGOyd4IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9mYzM3YjBjMi0wM2Y3LTRkNGQtOTA0OC1hNzA0
MWRmOGMyODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhL5QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHOCyaL1bpH8Ff4NLHBUVDInbGt50uqtq2OqvX2EXKL6RQgsxaY2s+67
3iz7HI8MzMFbkJ8xHMUwjMSxiaJNiDuiSoI5XvnClixFnYLE2E4z9EEmuba7Y+Qo
uVU8//AYemeTIkH9SVPYxjWGdfWNgCoTQ4b/6kRR+LffKiHiLZvgtb1ILynZFVID
yFPpDHJ7dSXG7bmGssyoUV5D1Cx5E0xn3bPOmQy9l2u/wYnDpMLl9djq12VSi66b
XikM9fDKmAAtNxRyLhfKdjqdt/6knnhaiKo61X9jexerd48/WMTIJLy5xFGfnS0/
gV/iDxd4/MVeFOR8+U2yiUC2G8beGOc=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:23 2025 by rpki-client on console.sobornost.net