Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a/a43cf8c1-2497-3003-b8de-65129c6513b9.roa
File: a43cf8c1-2497-3003-b8de-65129c6513b9.roa (raw, json)
Hash identifier: csjGMrpsFAgzVKp45EaBkNP9wuWVeZlBk29JJpthg88=
Subject key identifier: 63:DB:2F:EB:B8:1F:CC:73:96:23:3F:4A:24:31:65:41:16:35:99:64
Certificate issuer: /CN=129538be-cccb-40d0-8a7d-ac02bf86976a
Certificate serial: 010D0C9F4328584858A055E339A179D692607B80
Authority key identifier: ED:6A:E0:E8:80:3F:B4:BB:6D:95:60:DC:8E:5D:F0:3F:8B:2A:D0:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a/a43cf8c1-2497-3003-b8de-65129c6513b9.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 16509
IP address blocks: 198.212.172.0/22 maxlen: 22
198.212.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:55:e3:39:a1:79:d6:92:60:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=129538be-cccb-40d0-8a7d-ac02bf86976a
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=bca0e2ac-ec50-4dd1-bc1c-75bad557743c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2b:cf:9d:de:6e:e0:1a:5c:2e:7f:c7:04:b9:
62:b5:c4:f5:96:23:b2:ea:64:13:8c:62:f2:4e:4a:
43:49:5d:2f:4b:7c:34:75:23:73:06:50:a1:d6:a8:
e8:0b:0d:fd:ae:81:aa:50:e9:98:52:22:ff:d4:e2:
e9:f8:fc:66:17:02:eb:30:1f:be:b5:22:cf:11:d0:
ba:3a:23:32:7c:b0:1a:65:be:2e:61:db:28:4f:fc:
72:59:92:4d:4f:2c:5a:35:5f:05:79:1f:c9:9d:0f:
12:e9:e5:42:96:73:68:63:4e:cc:11:90:9b:04:a8:
07:eb:b2:4f:e8:6c:37:e9:a5:8c:26:be:76:dc:30:
5b:c7:e6:5b:bb:9d:7d:30:e2:8f:e9:e8:56:0c:67:
e3:66:c6:04:b4:a0:4f:ee:1e:d6:9d:34:1c:7f:ee:
ab:5e:d3:a9:e1:49:ba:5b:1a:ba:52:83:66:04:e7:
87:67:e8:b6:a4:ea:f0:d4:46:70:3d:be:6c:43:83:
5d:0b:83:63:93:f6:cc:42:47:06:ba:47:a9:4a:19:
b4:63:38:98:c1:fb:88:ae:f8:06:d1:be:0d:6f:d3:
c3:e9:85:48:0f:98:04:04:fe:00:8d:f5:89:4f:24:
68:62:a3:49:9b:2d:5c:39:65:2a:17:27:c9:09:1c:
53:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DB:2F:EB:B8:1F:CC:73:96:23:3F:4A:24:31:65:41:16:35:99:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a/a43cf8c1-2497-3003-b8de-65129c6513b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a/129538be-cccb-40d0-8a7d-ac02bf86976a.crl
X509v3 Authority Key Identifier:
keyid:ED:6A:E0:E8:80:3F:B4:BB:6D:95:60:DC:8E:5D:F0:3F:8B:2A:D0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.212.172.0-198.212.176.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:a1:d1:b7:66:3b:f2:ba:71:f9:34:69:d3:f4:ec:7d:e3:9a:
b7:12:2e:bd:59:16:84:8a:54:60:8d:7e:cb:25:f1:22:13:86:
4c:18:86:4a:40:0d:05:92:34:17:9a:84:aa:b9:d4:71:6f:9d:
af:c3:f7:4b:78:cc:a0:eb:91:07:96:38:0f:de:37:2a:a6:f7:
dc:8e:9e:db:70:66:45:3c:1b:35:90:2c:dc:f1:b6:87:08:b9:
c1:8a:50:6e:0f:22:94:20:75:82:97:61:34:d2:55:b7:86:b1:
c8:a4:9b:3e:44:54:b7:b0:70:28:1b:a6:67:3d:78:08:79:19:
65:93:7f:e8:06:29:eb:34:b9:8b:b6:64:81:d7:e3:f3:0f:ad:
1d:ad:20:4b:ff:51:a1:84:8e:73:44:a8:91:b9:c9:5b:0b:5b:
f5:07:9b:a4:6f:4a:d6:92:a1:41:0a:95:73:0a:51:f0:28:ce:
ca:c2:9f:a8:b2:7f:08:03:12:78:9f:d5:b4:4e:9d:53:32:99:
79:66:b1:c5:58:d7:a6:6c:fe:d1:01:3b:5f:b1:a2:41:9d:ea:
73:c2:aa:52:ef:9b:81:f7:6d:7e:68:a5:6c:09:c6:8a:35:01:
c0:82:7c:a7:72:01:b8:36:aa:77:ee:4f:22:31:e8:92:7f:35:
2a:d8:4f:67
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEhYoFXjOaF51pJge4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTI5NTM4YmUtY2NjYi00MGQwLThhN2QtYWMwMmJmODY5
NzZhMB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk
YmNhMGUyYWMtZWM1MC00ZGQxLWJjMWMtNzViYWQ1NTc3NDNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyvPnd5u4BpcLn/HBLlitcT1liOy6mQTjGLy
TkpDSV0vS3w0dSNzBlCh1qjoCw39roGqUOmYUiL/1OLp+PxmFwLrMB++tSLPEdC6
OiMyfLAaZb4uYdsoT/xyWZJNTyxaNV8FeR/JnQ8S6eVClnNoY07MEZCbBKgH67JP
6Gw36aWMJr523DBbx+Zbu519MOKP6ehWDGfjZsYEtKBP7h7WnTQcf+6rXtOp4Um6
Wxq6UoNmBOeHZ+i2pOrw1EZwPb5sQ4NdC4Njk/bMQkcGukepShm0YziYwfuIrvgG
0b4Nb9PD6YVID5gEBP4AjfWJTyRoYqNJmy1cOWUqFyfJCRxT3QIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFGPbL+u4H8xzliM/SiQxZUEWNZlkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xMjk1
MzhiZS1jY2NiLTQwZDAtOGE3ZC1hYzAyYmY4Njk3NmEvYTQzY2Y4YzEtMjQ5Ny0z
MDAzLWI4ZGUtNjUxMjljNjUxM2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTI5NTM4YmUtY2NjYi00MGQwLThh
N2QtYWMwMmJmODY5NzZhLzEyOTUzOGJlLWNjY2ItNDBkMC04YTdkLWFjMDJiZjg2
OTc2YS5jcmwwHwYDVR0jBBgwFoAU7Wrg6IA/tLttlWDcjl3wP4sq0GMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xMjk1MzhiZS1jY2NiLTQwZDAtOGE3ZC1hYzAy
YmY4Njk3NmEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALG1KwD
BADG1LAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAKaHRt2Y78rpx+TRp0/TsfeOatxIuvVkWhIpUYI1+yyXx
IhOGTBiGSkANBZI0F5qEqrnUcW+dr8P3S3jMoOuRB5Y4D943Kqb33I6e23BmRTwb
NZAs3PG2hwi5wYpQbg8ilCB1gpdhNNJVt4axyKSbPkRUt7BwKBumZz14CHkZZZN/
6AYp6zS5i7Zkgdfj8w+tHa0gS/9RoYSOc0SokbnJWwtb9QebpG9K1pKhQQqVcwpR
8CjOysKfqLJ/CAMSeJ/VtE6dUzKZeWaxxVjXpmz+0QE7X7GiQZ3qc8KqUu+bgfdt
fmilbAnGijUBwIJ8p3IBuDaqd+5PIjHokn81KthPZw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:43 2025 by rpki-client