Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/b3ba9344-3997-35e9-8110-a2249f4bd801.roa
File: b3ba9344-3997-35e9-8110-a2249f4bd801.roa (raw, json)
Hash identifier: 8/Hh1PBou9gg9RxRojJW6UhzVckqopF9Nf948T3ynfY=
Subject key identifier: 95:83:80:4D:C9:23:55:74:0A:9C:5F:6E:9E:52:41:8B:85:05:98:42
Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Certificate serial: 010D0C9F432858481C9A97F0AE8027852EB64E00
Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/b3ba9344-3997-35e9-8110-a2249f4bd801.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 3082
IP address blocks: 199.103.69.0/24 maxlen: 24
199.103.70.0/23 maxlen: 23
199.103.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:97:f0:ae:80:27:85:2e:b6:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=d5268a12-83b8-4689-ae49-33b371b4973b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a4:e9:5d:d9:01:89:87:1c:a8:6c:d1:ad:a1:
ef:a4:16:40:0c:7f:8a:72:cf:26:24:2d:94:f3:c4:
b6:09:da:01:f2:72:e0:51:55:60:1b:bd:86:6f:9c:
f5:45:1b:39:96:ae:14:95:5f:9d:72:5c:84:77:c8:
42:d9:ba:ec:b8:a3:e6:5b:e5:7a:8f:9a:68:ae:71:
b9:b4:7a:fa:da:79:67:00:77:1a:81:5d:a2:6d:08:
7a:09:8b:54:b0:7d:d5:21:69:ab:cf:91:2b:a4:d1:
63:5d:6a:d1:f6:ae:69:6e:98:36:5e:ea:0b:bc:73:
a9:b5:b4:8f:6c:4d:38:73:dd:0e:18:7a:a8:20:72:
0a:6a:57:95:f1:fc:c6:68:aa:f7:9c:29:a1:f0:4e:
d3:91:a0:0d:99:d6:59:1b:a2:8f:51:2f:c6:3e:2c:
a5:b8:c0:81:c5:a1:e3:e6:a9:59:22:f0:52:21:0c:
96:27:73:34:20:73:bf:07:f4:53:eb:b8:0c:1f:00:
64:95:81:0a:e5:39:45:2c:45:ac:2d:e0:fe:c6:9d:
f6:82:2d:31:35:df:bc:d1:68:7f:bc:ba:c6:36:78:
3f:4c:de:8e:e4:de:fd:5b:0e:5e:e0:93:79:20:9a:
d5:57:ac:f9:9b:1f:5a:ad:d2:86:33:fe:10:80:b5:
38:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:83:80:4D:C9:23:55:74:0A:9C:5F:6E:9E:52:41:8B:85:05:98:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/b3ba9344-3997-35e9-8110-a2249f4bd801.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl
X509v3 Authority Key Identifier:
keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
sbgp-ipAddrBlock: critical
IPv4:
199.103.69.0-199.103.72.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:94:9b:37:8f:71:aa:35:66:22:6d:7e:a5:7e:d5:7c:e6:90:
bd:82:89:7a:94:86:41:08:ac:a7:27:02:16:89:f4:9b:c8:c7:
bf:05:38:ea:84:93:94:b9:a7:a8:3c:b0:17:f3:b0:6f:42:9e:
9e:26:3c:87:cb:a0:83:7f:db:c3:0f:09:05:a4:43:56:40:5c:
0c:1c:af:d3:db:d1:55:87:e9:f7:4f:26:ce:ad:16:eb:f9:87:
d1:c4:1a:b2:e0:3f:a8:88:69:44:27:86:cf:3f:c9:86:16:42:
4f:7f:7a:bc:1f:09:dc:8b:76:39:b5:21:ac:06:37:cf:91:8c:
6e:73:47:74:98:9f:cc:b2:e2:90:d3:8a:70:6d:1f:cd:1b:79:
1f:46:fd:de:b5:3d:16:0f:0f:1b:40:5c:23:4e:2e:e0:08:8d:
f9:86:9b:1e:81:ea:2d:79:17:ff:87:57:bc:f4:bb:9d:a4:74:
3c:62:06:8f:a2:5f:80:6d:70:5f:c8:85:60:08:b3:d0:7e:38:
55:c2:ce:51:2f:cb:df:7f:4d:d9:54:87:ab:57:ec:24:7e:b4:
4d:20:77:42:de:39:1f:9c:28:86:f7:27:4f:22:f4:86:e4:b6:
88:58:80:88:01:03:05:36:9d:a0:13:6b:8a:6a:05:27:f1:ec:
ce:ce:6a:33
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEgcmpfwroAnhS62TgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4
Mjc5MB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk
ZDUyNjhhMTItODNiOC00Njg5LWFlNDktMzNiMzcxYjQ5NzNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqTpXdkBiYccqGzRraHvpBZADH+Kcs8mJC2U
88S2CdoB8nLgUVVgG72Gb5z1RRs5lq4UlV+dclyEd8hC2brsuKPmW+V6j5pornG5
tHr62nlnAHcagV2ibQh6CYtUsH3VIWmrz5ErpNFjXWrR9q5pbpg2XuoLvHOptbSP
bE04c90OGHqoIHIKaleV8fzGaKr3nCmh8E7TkaANmdZZG6KPUS/GPiyluMCBxaHj
5qlZIvBSIQyWJ3M0IHO/B/RT67gMHwBklYEK5TlFLEWsLeD+xp32gi0xNd+80Wh/
vLrGNng/TN6O5N79Ww5e4JN5IJrVV6z5mx9ardKGM/4QgLU45QIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFJWDgE3JI1V0Cpxfbp5SQYuFBZhCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5
N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvYjNiYTkzNDQtMzk5Ny0z
NWU5LTgxMTAtYTIyNDlmNGJkODAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5
ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw
ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0
OWRjMDgyNzkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADHZ0UD
BADHZ0gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAcJSbN49xqjVmIm1+pX7VfOaQvYKJepSGQQispycCFon0
m8jHvwU46oSTlLmnqDywF/Owb0KeniY8h8ugg3/bww8JBaRDVkBcDByv09vRVYfp
908mzq0W6/mH0cQasuA/qIhpRCeGzz/JhhZCT396vB8J3It2ObUhrAY3z5GMbnNH
dJifzLLikNOKcG0fzRt5H0b93rU9Fg8PG0BcI04u4AiN+YabHoHqLXkX/4dXvPS7
naR0PGIGj6JfgG1wX8iFYAiz0H44VcLOUS/L339N2VSHq1fsJH60TSB3Qt45H5wo
hvcnTyL0huS2iFiAiAEDBTadoBNrimoFJ/Hszs5qMw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:37 2025 by rpki-client