Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7dffed8c-b870-3970-b540-0fa3a4ab42ca.roa
File: 7dffed8c-b870-3970-b540-0fa3a4ab42ca.roa (raw, json)
Hash identifier: 9Lo47VLbDdHw9TzWEwi1bVtxIBLDT4Dl7/77953uXoE=
Subject key identifier: 53:87:0A:26:DC:38:9C:F0:A5:8C:C5:5E:1E:6E:3B:7E:94:14:17:60
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F432858483F8041A4CF763B9FC1FE8A90
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7dffed8c-b870-3970-b540-0fa3a4ab42ca.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 16839
IP address blocks: 199.91.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:41:a4:cf:76:3b:9f:c1:fe:8a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=b4f0e3eb-e985-4403-ba68-62a5855a171f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e4:f1:c9:0e:73:90:39:8f:db:64:cf:e9:9e:
6b:33:9d:dd:50:aa:d1:56:6a:8c:65:55:45:de:08:
ad:35:c2:bd:8b:66:13:2c:0a:76:66:07:80:b7:8a:
5d:33:83:9f:61:6c:36:06:b8:b9:e8:6a:e1:c3:3a:
ce:71:4d:ed:7a:a3:ef:ab:c0:1c:55:60:ff:d8:ff:
4c:30:90:4f:c0:6b:58:c1:38:c6:03:d8:a9:dc:91:
57:af:40:a3:12:38:03:eb:5c:39:f5:69:e0:30:1a:
18:b5:95:8d:2e:18:06:90:fa:ff:85:2d:10:03:38:
57:4f:7c:57:33:4e:d1:f3:dc:0a:2b:59:b8:74:67:
f8:3b:9c:cb:29:26:f2:6b:b5:f9:b1:9b:df:7d:c2:
0e:2c:6f:0f:62:f8:5b:1e:36:7c:cf:66:0b:1c:36:
8f:a9:4b:82:41:b7:26:15:9c:9c:d1:51:47:c5:ef:
d7:27:2d:b9:43:7a:d5:27:e4:ce:c3:fd:46:d8:a1:
c2:a9:13:59:17:bd:e8:fb:92:94:58:8f:bb:e7:ae:
d1:e9:76:5a:28:ab:9a:71:b1:10:eb:59:55:49:2a:
19:3a:6a:e6:ae:7b:f8:67:2f:d6:f0:c7:c4:eb:b4:
73:13:0c:59:49:e0:0d:4c:bb:6f:5d:5e:f9:fb:46:
ad:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:87:0A:26:DC:38:9C:F0:A5:8C:C5:5E:1E:6E:3B:7E:94:14:17:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7dffed8c-b870-3970-b540-0fa3a4ab42ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.91.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:5b:6b:44:0c:a5:c5:99:7f:98:46:ae:1b:d5:fb:ed:a7:1b:
76:b2:95:7c:51:e5:0e:ea:4c:14:4b:37:2c:42:04:39:ac:ed:
a0:d5:4b:28:53:d1:48:2c:9d:52:32:7a:63:9b:fc:cf:5e:22:
ea:38:30:e9:c0:a0:45:47:17:e5:14:33:d6:30:fc:33:cd:29:
f2:52:43:6e:4b:7f:a5:fa:44:20:71:be:76:3d:b9:e2:7d:9b:
99:2a:ee:33:66:40:6b:d2:30:6d:b0:fd:50:54:c1:11:ca:3f:
11:4a:05:3c:f5:ee:24:43:9a:de:89:a6:2d:27:a6:a4:d4:6e:
c8:b3:44:1d:34:a6:1d:b6:3a:5a:09:6b:61:1d:d8:07:e5:f9:
32:a1:8f:3b:49:31:19:e6:d8:bb:5b:d5:09:cd:72:6e:07:1e:
18:3b:a5:0d:d7:b4:38:cc:3e:0a:fc:d8:41:2c:2a:fd:92:62:
e2:b2:d0:fd:49:c1:15:30:ba:2d:ec:1b:9e:40:98:e9:87:bf:
54:f3:83:11:ae:bc:0e:22:9d:71:df:c4:59:4e:cf:65:e3:01:
78:69:70:65:7c:41:88:ec:92:f4:36:8c:ff:ab:b2:f1:f3:06:
08:82:72:ba:1e:3c:46:3c:02:2d:ac:01:a8:bf:2d:a0:9c:64:
df:05:69:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg/gEGkz3Y7n8H+ipAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm
MjlhMB4XDTI0MTIxODE0MDA1MloXDTI1MDMxODEzMDA1MlowLzEtMCsGA1UEAxMk
YjRmMGUzZWItZTk4NS00NDAzLWJhNjgtNjJhNTg1NWExNzFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieTxyQ5zkDmP22TP6Z5rM53dUKrRVmqMZVVF
3gitNcK9i2YTLAp2ZgeAt4pdM4OfYWw2Bri56GrhwzrOcU3teqPvq8AcVWD/2P9M
MJBPwGtYwTjGA9ip3JFXr0CjEjgD61w59WngMBoYtZWNLhgGkPr/hS0QAzhXT3xX
M07R89wKK1m4dGf4O5zLKSbya7X5sZvffcIOLG8PYvhbHjZ8z2YLHDaPqUuCQbcm
FZyc0VFHxe/XJy25Q3rVJ+TOw/1G2KHCqRNZF73o+5KUWI+7567R6XZaKKuacbEQ
61lVSSoZOmrmrnv4Zy/W8MfE67RzEwxZSeANTLtvXV75+0atyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFOHCibcOJzwpYzFXh5uO36UFBdgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm
NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvN2RmZmVkOGMtYjg3MC0z
OTcwLWI1NDAtMGZhM2E0YWI0MmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk
N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk
ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh
NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALVba0QMpcWZf5hGrhvV++2nG3aylXxR5Q7qTBRLNyxCBDms7aDVSyhT
0UgsnVIyemOb/M9eIuo4MOnAoEVHF+UUM9Yw/DPNKfJSQ25Lf6X6RCBxvnY9ueJ9
m5kq7jNmQGvSMG2w/VBUwRHKPxFKBTz17iRDmt6Jpi0npqTUbsizRB00ph22OloJ
a2Ed2Afl+TKhjztJMRnm2Ltb1QnNcm4HHhg7pQ3XtDjMPgr82EEsKv2SYuKy0P1J
wRUwui3sG55AmOmHv1TzgxGuvA4inXHfxFlOz2XjAXhpcGV8QYjskvQ2jP+rsvHz
BgiCcroePEY8Ai2sAai/LaCcZN8FabA=
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:36 2025 by rpki-client