Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/eb2e0c9c-0fe2-3699-a68b-6113a6d0b8c7.roa
File: eb2e0c9c-0fe2-3699-a68b-6113a6d0b8c7.roa (raw, json)
Hash identifier: dpKoLGTyaPFZV9Ee1M+ScChfNpk5A3XHwV6k+lqqUCk=
Subject key identifier: C2:3A:EB:D2:CA:E8:48:57:E0:1A:C1:8E:EE:85:4A:82:75:1D:AE:DA
Certificate issuer: /CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Certificate serial: 010D0C9F43285848A400B69E1C045A27E064AC80
Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/eb2e0c9c-0fe2-3699-a68b-6113a6d0b8c7.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 13627
IP address blocks: 198.186.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:b6:9e:1c:04:5a:27:e0:64:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=5bb9b00b-4a25-4d39-850b-b7fe2bcb41e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:99:5d:14:31:87:27:76:90:bd:4f:86:b2:f3:
05:81:98:c5:d1:2c:88:44:10:d7:3f:01:cd:ad:7a:
a8:94:5b:2f:ed:5c:67:79:3d:10:e0:87:16:ec:52:
63:ef:cf:f2:d0:a1:7c:80:65:07:88:ac:57:f3:4f:
77:0a:62:48:39:b2:d0:0e:dd:c7:56:33:9c:b0:47:
87:64:c9:5e:92:7f:46:04:5b:fe:28:3d:66:07:69:
b7:d7:d1:9f:6f:43:ba:93:92:c1:38:68:67:fc:92:
98:e1:14:c6:da:b1:ff:fc:4b:9c:f9:8d:ee:c8:6f:
ac:e1:01:fc:a0:f2:b9:a4:0d:2e:63:8e:c7:d8:58:
be:bc:2f:ca:36:c9:81:99:9e:12:4c:20:13:e8:25:
da:73:0a:bb:4c:58:85:b4:2c:68:64:5c:2a:8b:92:
b5:d1:80:7c:8f:bf:e2:47:32:ed:6d:29:8f:a8:50:
3d:b7:72:38:77:9f:8b:d8:71:64:b0:ea:88:f8:13:
8d:8e:74:d2:b1:78:5e:62:b7:ce:ac:97:c9:d2:f0:
f6:e4:d3:96:ca:66:b0:50:ed:0a:0b:d6:14:7b:3f:
1d:8f:2a:d2:1b:23:27:47:aa:e5:dc:e9:11:d0:54:
3e:63:70:67:39:d8:a5:3f:eb:07:9c:d7:9a:6a:15:
85:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3A:EB:D2:CA:E8:48:57:E0:1A:C1:8E:EE:85:4A:82:75:1D:AE:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/eb2e0c9c-0fe2-3699-a68b-6113a6d0b8c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl
X509v3 Authority Key Identifier:
keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
sbgp-ipAddrBlock: critical
IPv4:
198.186.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:8a:70:dc:be:fe:9d:07:d5:d3:18:f6:86:0d:4d:4f:1a:dd:
07:37:55:97:8d:ac:f8:95:8a:2a:5e:d3:b5:90:69:c2:31:b2:
fd:1f:a7:41:c0:1e:83:f7:61:26:f0:82:1a:81:47:ac:86:f8:
28:31:49:9a:4a:b8:0f:04:51:25:9e:0c:00:dd:b0:1f:b7:7f:
c1:b8:6c:a4:d5:82:a1:92:f4:bf:8d:4e:9b:84:8e:4c:45:96:
03:ce:c2:44:97:b4:1e:51:31:13:a5:53:48:ec:66:c9:a7:e1:
3a:23:11:0d:43:00:e3:d6:dc:7b:80:2d:15:cf:e8:1c:55:2b:
f6:39:02:db:06:3c:58:0c:9d:81:f2:9d:be:2a:58:10:cb:18:
91:04:a3:88:08:90:26:ee:f0:ba:a3:1e:77:4c:5e:bf:45:2a:
e5:df:40:2a:77:b5:0f:63:6b:ae:cf:04:84:85:13:7b:ef:07:
de:3e:a8:1b:1f:57:af:bc:5c:11:1e:e1:6c:22:ab:d6:33:3f:
4a:24:06:5b:1b:03:07:99:ce:3e:2d:c2:f1:05:32:5d:b3:0c:
b2:78:52:3d:6d:67:fd:98:70:89:01:be:dc:22:8c:cb:6c:9f:
eb:5d:ab:f6:df:25:7d:1d:47:da:a7:90:74:eb:7e:74:fb:7d:
a3:27:2f:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikALaeHARaJ+BkrIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWFlOTc5NmEtNWYzZC00ZjQ3LWIxMTctNDIzNjBhMjEz
ZTM3MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk
NWJiOWIwMGItNGEyNS00ZDM5LTg1MGItYjdmZTJiY2I0MWUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpldFDGHJ3aQvU+GsvMFgZjF0SyIRBDXPwHN
rXqolFsv7VxneT0Q4IcW7FJj78/y0KF8gGUHiKxX8093CmJIObLQDt3HVjOcsEeH
ZMlekn9GBFv+KD1mB2m319Gfb0O6k5LBOGhn/JKY4RTG2rH//Euc+Y3uyG+s4QH8
oPK5pA0uY47H2Fi+vC/KNsmBmZ4STCAT6CXacwq7TFiFtCxoZFwqi5K10YB8j7/i
RzLtbSmPqFA9t3I4d5+L2HFksOqI+BONjnTSsXheYrfOrJfJ0vD25NOWymawUO0K
C9YUez8djyrSGyMnR6rl3OkR0FQ+Y3BnOdilP+sHnNeaahWFqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMI669LK6EhX4BrBju6FSoJ1Ha7aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5
Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2MGEyMTNlMzcvZWIyZTBjOWMtMGZlMi0z
Njk5LWE2OGItNjExM2E2ZDBiOGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWFlOTc5NmEtNWYzZC00ZjQ3LWIx
MTctNDIzNjBhMjEzZTM3LzFhZTk3OTZhLTVmM2QtNGY0Ny1iMTE3LTQyMzYwYTIx
M2UzNy5jcmwwHwYDVR0jBBgwFoAUTss6/l8FHqwG3VnOR6besyl/QdwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2
MGEyMTNlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrqDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF+KcNy+/p0H1dMY9oYNTU8a3Qc3VZeNrPiViipe07WQacIxsv0fp0HA
HoP3YSbwghqBR6yG+CgxSZpKuA8EUSWeDADdsB+3f8G4bKTVgqGS9L+NTpuEjkxF
lgPOwkSXtB5RMROlU0jsZsmn4TojEQ1DAOPW3HuALRXP6BxVK/Y5AtsGPFgMnYHy
nb4qWBDLGJEEo4gIkCbu8LqjHndMXr9FKuXfQCp3tQ9ja67PBISFE3vvB94+qBsf
V6+8XBEe4Wwiq9YzP0okBlsbAweZzj4twvEFMl2zDLJ4Uj1tZ/2YcIkBvtwijMts
n+tdq/bfJX0dR9qnkHTrfnT7faMnL8M=
-----END CERTIFICATE-----
Generated at Wed May 7 05:58:26 2025 by rpki-client