Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/7539456a-1ede-30db-a5cf-fe160402f89e.roa
File: 7539456a-1ede-30db-a5cf-fe160402f89e.roa (raw, json)
Hash identifier: OKTsBSBCmhRvrMEkWW+E+qBARY8Iu6xVuSDFzWnYljg=
Subject key identifier: 80:80:E9:63:1A:1F:3D:5B:AD:A4:49:1B:49:88:83:D8:63:D0:E8:B9
Certificate issuer: /CN=dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1
Certificate serial: 010D0C9F432858486C2B13035DB4E00B5DD73600
Authority key identifier: 0A:4D:D1:2F:80:E5:2F:D9:F9:0A:B6:5D:8F:FF:C0:B1:2C:66:58:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/7539456a-1ede-30db-a5cf-fe160402f89e.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 198949
IP address blocks: 198.177.154.0/24 maxlen: 24
204.52.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:13:03:5d:b4:e0:0b:5d:d7:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=29c77c33-9da2-40cb-9839-610897fb5fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5c:f0:fc:04:1e:79:21:f4:b8:50:53:a4:31:
f2:4e:88:b6:5c:c7:f3:a5:82:5b:53:96:40:c8:23:
fb:2d:a3:06:5c:78:1b:f8:49:a3:a3:91:4f:e0:a8:
2e:15:3f:f1:c4:19:94:29:c7:e2:9c:37:1a:69:54:
50:4d:ea:8d:77:a9:eb:8c:7c:21:da:03:77:2d:1c:
82:e8:38:b3:74:b6:84:dc:4a:62:c9:fa:00:6d:3d:
d8:6f:45:53:7e:2c:6d:a6:8f:69:0e:d6:94:61:45:
b1:46:e8:58:41:9b:55:1f:51:83:05:e4:98:3a:70:
89:b1:39:a5:ff:f7:e0:24:49:25:52:a3:cc:73:12:
cf:b2:5a:27:ca:70:5a:d5:ab:37:ea:22:41:db:bf:
60:2a:0f:0e:d4:2e:6b:3f:b8:87:2c:68:bc:f2:95:
d4:b6:b4:c0:f1:98:b9:a5:6c:49:df:8a:f6:eb:74:
f4:76:f7:63:ad:b4:34:28:3b:7e:79:77:5c:8d:05:
23:05:14:c5:c1:84:57:47:af:94:86:e5:13:ec:c0:
84:b8:a9:ee:01:b2:b7:37:25:35:79:2d:db:cd:4b:
1f:74:1d:26:6c:8a:22:33:bd:c1:61:3f:a1:03:84:
c8:f3:27:26:ef:8c:98:70:e7:4b:01:84:e3:ec:a7:
72:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:80:E9:63:1A:1F:3D:5B:AD:A4:49:1B:49:88:83:D8:63:D0:E8:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/7539456a-1ede-30db-a5cf-fe160402f89e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.crl
X509v3 Authority Key Identifier:
keyid:0A:4D:D1:2F:80:E5:2F:D9:F9:0A:B6:5D:8F:FF:C0:B1:2C:66:58:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.cer
sbgp-ipAddrBlock: critical
IPv4:
198.177.154.0/24
204.52.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:43:1c:13:c2:19:bc:76:e1:48:6f:d2:b5:03:7b:8a:c8:24:
d4:6c:d1:e4:b0:64:a3:be:48:81:89:dd:bc:29:52:c9:d5:51:
d5:55:4a:45:b3:51:ac:ca:93:51:bb:4c:2a:37:07:ec:e1:5d:
83:6b:32:ee:2a:90:3e:63:a2:ff:1e:d9:47:47:52:13:e1:fa:
e6:5b:5d:18:5b:88:b5:3f:44:b9:62:d0:73:69:a5:03:0b:46:
23:85:e4:05:d4:24:59:ed:56:de:12:c3:70:1f:92:ef:40:a2:
11:44:a3:b6:15:55:f3:2d:32:6a:df:b3:cb:0e:63:ea:ac:85:
52:d2:c0:63:f5:9b:d0:f6:04:08:8b:be:6f:29:45:7f:49:18:
82:38:65:4d:ba:ba:79:7b:13:96:63:83:f2:48:f7:52:9a:64:
8e:79:96:0a:8f:02:e3:93:42:ff:3a:b5:19:1b:95:5b:bf:ac:
f3:1e:7d:99:03:69:80:7d:a1:69:78:0b:17:25:c7:47:37:1e:
f6:d2:a4:b5:65:d9:ca:d7:1f:b3:49:5a:07:26:26:4d:e7:44:
a5:65:85:56:92:8c:16:f5:68:91:d2:5c:f3:27:ca:c7:e8:73:
c1:3e:7c:b1:85:6f:8a:44:f8:39:4d:c5:c0:a9:d3:57:f7:84:
b4:01:b3:f4
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEhsKxMDXbTgC13XNgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGNiMGE1OTctZjZlYi00Yzk3LWFhNmMtMzZkMDRiZDdj
MmQxMB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk
MjljNzdjMzMtOWRhMi00MGNiLTk4MzktNjEwODk3ZmI1ZmRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFzw/AQeeSH0uFBTpDHyToi2XMfzpYJbU5ZA
yCP7LaMGXHgb+Emjo5FP4KguFT/xxBmUKcfinDcaaVRQTeqNd6nrjHwh2gN3LRyC
6DizdLaE3EpiyfoAbT3Yb0VTfixtpo9pDtaUYUWxRuhYQZtVH1GDBeSYOnCJsTml
//fgJEklUqPMcxLPslonynBa1as36iJB279gKg8O1C5rP7iHLGi88pXUtrTA8Zi5
pWxJ34r263T0dvdjrbQ0KDt+eXdcjQUjBRTFwYRXR6+UhuUT7MCEuKnuAbK3NyU1
eS3bzUsfdB0mbIoiM73BYT+hA4TI8ycm74yYcOdLAYTj7KdyeQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFICA6WMaHz1braRJG0mIg9hj0Oi5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Iw
YTU5Ny1mNmViLTRjOTctYWE2Yy0zNmQwNGJkN2MyZDEvNzUzOTQ1NmEtMWVkZS0z
MGRiLWE1Y2YtZmUxNjA0MDJmODllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNiMGE1OTctZjZlYi00Yzk3LWFh
NmMtMzZkMDRiZDdjMmQxL2RjYjBhNTk3LWY2ZWItNGM5Ny1hYTZjLTM2ZDA0YmQ3
YzJkMS5jcmwwHwYDVR0jBBgwFoAUCk3RL4DlL9n5CrZdj//AsSxmWLUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2IwYTU5Ny1mNmViLTRjOTctYWE2Yy0zNmQw
NGJkN2MyZDEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAxrGaAwQA
zDT8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFJDHBPCGbx24Uhv0rUDe4rIJNRs0eSwZKO+SIGJ3bwpUsnV
UdVVSkWzUazKk1G7TCo3B+zhXYNrMu4qkD5jov8e2UdHUhPh+uZbXRhbiLU/RLli
0HNppQMLRiOF5AXUJFntVt4Sw3Afku9AohFEo7YVVfMtMmrfs8sOY+qshVLSwGP1
m9D2BAiLvm8pRX9JGII4ZU26unl7E5Zjg/JI91KaZI55lgqPAuOTQv86tRkblVu/
rPMefZkDaYB9oWl4Cxclx0c3HvbSpLVl2crXH7NJWgcmJk3nRKVlhVaSjBb1aJHS
XPMnysfoc8E+fLGFb4pE+DlNxcCp01f3hLQBs/Q=
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:16:02 2025 by rpki-client