Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29fa00dd-a4c4-39a1-bbfa-c05e55cd9363.roa
File: 29fa00dd-a4c4-39a1-bbfa-c05e55cd9363.roa (raw, json)
Hash identifier: gm47wQHmawgC9Iptmmv8wLDzDV97LoYoN7ltBBqqsNk=
Subject key identifier: F5:55:D9:D5:50:1D:15:8A:12:9A:BB:8B:E8:64:00:14:70:4F:7A:9D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848EF614E0358CF2A30EAB8C500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29fa00dd-a4c4-39a1-bbfa-c05e55cd9363.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 36183
IP address blocks: 172.225.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:4e:03:58:cf:2a:30:ea:b8:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=e96b308a-81c5-413f-b3cd-09630abde9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:86:a5:49:02:d3:db:0f:c6:ff:26:d1:64:62:
8b:97:4b:c7:02:2c:83:7c:a9:fa:28:c6:ee:0d:47:
d1:24:1c:e3:4b:bb:26:32:73:0a:b9:a7:a0:ed:32:
cb:bf:39:c7:74:1b:ce:39:1c:9f:29:5b:36:a2:f4:
c0:f0:98:aa:37:32:6b:3a:62:29:c6:db:aa:0b:7d:
b3:ac:11:f1:46:4c:34:71:6e:42:3b:f9:8e:24:fb:
c6:64:3b:ef:98:b4:5a:2f:2b:33:b9:05:7e:3e:dc:
24:e0:0c:be:64:8c:1c:8b:13:7c:1b:1d:e5:73:e5:
39:ef:f3:19:28:a3:5a:5b:7f:3a:b5:34:69:f5:ee:
b8:f8:3f:95:d7:6e:5c:46:b8:63:4a:d2:e9:f2:1b:
96:df:a5:08:cc:a8:73:a7:d9:54:5e:fa:64:5d:7b:
0c:e6:9c:1a:f2:5f:81:20:18:69:74:6c:08:aa:80:
c7:3d:78:95:2e:7c:65:e5:98:63:97:96:6e:a0:7c:
6a:25:ac:bf:cc:65:45:5f:a3:a2:b1:b8:59:02:ae:
4d:ed:fe:d0:46:fb:1c:1d:2d:8e:b3:51:57:03:ad:
c6:68:40:b1:95:8d:ef:b5:dc:a8:a7:f3:b0:ea:8e:
f1:f7:aa:50:bc:58:a2:8b:c3:6d:bf:77:45:69:cd:
e8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:55:D9:D5:50:1D:15:8A:12:9A:BB:8B:E8:64:00:14:70:4F:7A:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29fa00dd-a4c4-39a1-bbfa-c05e55cd9363.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:90:3d:2a:3a:88:0c:0c:2a:5f:1d:1b:9f:e9:21:a2:02:d7:
f6:c6:02:57:3f:43:24:4c:8a:82:c6:26:a3:10:05:d9:9c:da:
e4:b1:c4:96:25:47:54:f3:d3:a1:9f:50:2b:60:67:24:9a:02:
c8:bc:39:92:67:5b:e1:41:1e:14:84:28:fc:a1:90:b4:4f:41:
5c:08:bd:c3:eb:ed:e4:ce:1c:49:c2:d3:55:04:78:69:d0:25:
7e:2c:6c:68:21:e3:2c:6b:ae:fe:dd:ed:3a:13:97:6f:15:32:
34:3b:7e:f2:d6:a6:9e:15:c1:90:4c:11:2e:ef:e2:0e:15:5d:
af:2f:22:bd:21:36:93:18:29:25:37:35:29:01:20:87:dd:84:
d9:2c:6b:87:6b:bf:b9:56:3b:75:28:66:f2:de:47:47:5b:db:
af:ba:58:15:58:7c:0d:24:a5:5b:27:11:c8:f2:26:b4:29:a7:
c0:bd:c1:de:51:24:51:79:53:c9:61:32:a5:f2:cf:c8:b4:f0:
3f:f9:40:0b:e7:c1:0c:e2:0c:14:61:7e:17:77:14:a6:ab:c4:
c6:62:c8:d9:90:3d:ad:be:c9:7f:ec:4a:19:98:a5:df:6b:0f:
c2:a6:96:a0:72:31:da:2b:25:a6:3d:c1:2d:af:81:be:b8:2e:
26:b2:a3:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYU4DWM8qMOq4xQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
ZTk2YjMwOGEtODFjNS00MTNmLWIzY2QtMDk2MzBhYmRlOWI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4alSQLT2w/G/ybRZGKLl0vHAiyDfKn6KMbu
DUfRJBzjS7smMnMKuaeg7TLLvznHdBvOORyfKVs2ovTA8JiqNzJrOmIpxtuqC32z
rBHxRkw0cW5CO/mOJPvGZDvvmLRaLyszuQV+Ptwk4Ay+ZIwcixN8Gx3lc+U57/MZ
KKNaW386tTRp9e64+D+V125cRrhjStLp8huW36UIzKhzp9lUXvpkXXsM5pwa8l+B
IBhpdGwIqoDHPXiVLnxl5Zhjl5ZuoHxqJay/zGVFX6OisbhZAq5N7f7QRvscHS2O
s1FXA63GaECxlY3vtdyop/Ow6o7x96pQvFiii8Ntv3dFac3ozwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPVV2dVQHRWKEpq7i+hkABRwT3qdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjlmYTAwZGQtYTRjNC0z
OWExLWJiZmEtYzA1ZTU1Y2Q5MzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG+QPSo6iAwMKl8dG5/pIaIC1/bGAlc/QyRMioLGJqMQBdmc2uSxxJYl
R1Tz06GfUCtgZySaAsi8OZJnW+FBHhSEKPyhkLRPQVwIvcPr7eTOHEnC01UEeGnQ
JX4sbGgh4yxrrv7d7ToTl28VMjQ7fvLWpp4VwZBMES7v4g4VXa8vIr0hNpMYKSU3
NSkBIIfdhNksa4drv7lWO3UoZvLeR0db26+6WBVYfA0kpVsnEcjyJrQpp8C9wd5R
JFF5U8lhMqXyz8i08D/5QAvnwQziDBRhfhd3FKarxMZiyNmQPa2+yX/sShmYpd9r
D8KmlqByMdorJaY9wS2vgb64LiayowU=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:39 2025 by rpki-client on console.sobornost.net