Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/f8f28901-c226-35c0-b637-349a0ecd0236.roa
File: f8f28901-c226-35c0-b637-349a0ecd0236.roa (raw, json)
Hash identifier: pXY8mMKC2x+PLOJ1li5qWNsyBU23TTSW5Ry8r/GhqZ0=
Subject key identifier: AB:2C:BB:95:41:BB:CE:7E:C3:0F:F6:A1:2B:1B:77:F6:03:BA:4E:8C
Certificate issuer: /CN=c682a716-bb81-4916-beba-279628f77a85
Certificate serial: 010D0C9F432858482A8FD5DC95441ED42AE915A0
Authority key identifier: 31:33:86:30:81:B6:CE:2C:43:BF:2D:C1:E2:63:81:23:C4:07:DA:F5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/f8f28901-c226-35c0-b637-349a0ecd0236.roa
Signing time: Wed 11 Dec 2024 02:00:38 +0000
ROA not before: Wed 11 Dec 2024 02:00:38 +0000
ROA not after: Tue 11 Mar 2025 01:00:38 +0000
asID: 16509
IP address blocks: 192.122.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8f:d5:dc:95:44:1e:d4:2a:e9:15:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c682a716-bb81-4916-beba-279628f77a85
Validity
Not Before: Dec 11 02:00:38 2024 GMT
Not After : Mar 11 01:00:38 2025 GMT
Subject: CN=29a6f296-248b-47fa-8a59-86e7c2b71215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f9:13:2c:8e:cb:fe:8f:01:31:58:5a:bf:40:
39:da:ef:23:67:4a:63:8d:e0:54:eb:a7:5f:7a:5f:
f7:31:1e:2e:ac:59:42:53:20:f9:53:e8:0d:8d:b4:
83:9a:16:28:2e:33:b3:6f:10:3f:74:e6:f7:55:7c:
39:fa:7d:35:ee:f5:a3:0d:1b:5f:00:c5:08:8b:da:
d0:ca:0c:21:0b:1a:66:fc:70:e2:74:b0:0b:a3:2c:
b4:a6:b6:85:be:df:d2:da:58:49:d8:38:23:6d:f7:
b0:89:44:8b:2f:03:6d:a6:ca:96:92:cc:4a:94:7d:
a0:a3:a0:61:88:7f:ec:cf:00:f5:d2:8f:62:8b:6f:
2c:97:8d:d1:9c:7b:13:bb:fd:88:4d:c7:11:9e:1c:
f7:b6:b2:6e:a9:06:b6:f1:0b:78:5c:46:bd:38:76:
5f:53:48:d0:01:ac:d9:89:14:c7:8e:62:ae:fd:be:
aa:d4:88:67:8d:0b:f5:d4:a1:80:07:00:50:8a:ce:
26:69:ce:77:08:f1:33:be:82:ce:2a:71:2c:8a:5f:
31:ca:fe:94:a6:1f:f4:b0:99:df:c7:47:25:81:63:
47:cf:71:0a:75:9e:37:1c:79:ed:ea:7d:8c:11:a0:
b8:b0:d0:d2:ce:32:d2:14:1b:60:34:9e:ed:35:d0:
75:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2C:BB:95:41:BB:CE:7E:C3:0F:F6:A1:2B:1B:77:F6:03:BA:4E:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/f8f28901-c226-35c0-b637-349a0ecd0236.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/c682a716-bb81-4916-beba-279628f77a85.crl
X509v3 Authority Key Identifier:
keyid:31:33:86:30:81:B6:CE:2C:43:BF:2D:C1:E2:63:81:23:C4:07:DA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85.cer
sbgp-ipAddrBlock: critical
IPv4:
192.122.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:5e:ee:9f:c4:75:75:35:40:73:3b:26:f2:8e:2a:5d:2b:a3:
5f:6b:5c:56:68:92:5a:31:f1:6e:2c:a3:1f:7d:00:5c:1c:20:
ca:4d:fd:09:48:ca:ea:e2:28:48:16:7f:6c:25:8e:3b:e8:41:
c2:91:5a:39:b4:f8:d1:62:65:f2:7f:cf:30:1c:0a:5c:d2:06:
e4:f0:ae:2c:23:69:d7:0a:a5:22:a6:b8:77:62:0a:a9:9d:a6:
e1:d2:d7:d8:70:c7:76:a4:81:c7:39:82:d5:07:36:b2:0e:3b:
be:40:95:8d:ed:9a:a6:98:08:fa:11:f4:41:78:66:2e:a5:c1:
45:e6:35:f4:a6:ec:b1:5a:67:31:1a:78:bf:fd:0c:e2:16:1f:
da:1d:88:c2:5f:23:bd:68:ef:e6:2d:d0:e1:5a:8a:2e:e7:e7:
51:81:9b:f9:de:fa:00:fd:4a:b1:b2:9e:a5:56:98:d8:d3:3f:
02:0a:c1:c0:27:59:09:6b:db:ff:8d:d7:28:a9:f6:5d:c4:ab:
1f:8f:eb:71:91:b4:c8:23:7a:63:27:e0:ff:e6:b0:6b:83:6f:
ff:01:18:d9:05:4d:1f:f9:60:6f:fa:37:a3:29:08:5e:27:15:
e9:a1:b3:ad:85:62:20:64:57:ce:54:f2:7d:39:8c:72:6a:1b:
c3:cf:0c:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgqj9XclUQe1CrpFaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzY4MmE3MTYtYmI4MS00OTE2LWJlYmEtMjc5NjI4Zjc3
YTg1MB4XDTI0MTIxMTAyMDAzOFoXDTI1MDMxMTAxMDAzOFowLzEtMCsGA1UEAxMk
MjlhNmYyOTYtMjQ4Yi00N2ZhLThhNTktODZlN2MyYjcxMjE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/kTLI7L/o8BMVhav0A52u8jZ0pjjeBU66df
el/3MR4urFlCUyD5U+gNjbSDmhYoLjOzbxA/dOb3VXw5+n017vWjDRtfAMUIi9rQ
ygwhCxpm/HDidLALoyy0praFvt/S2lhJ2DgjbfewiUSLLwNtpsqWksxKlH2go6Bh
iH/szwD10o9ii28sl43RnHsTu/2ITccRnhz3trJuqQa28Qt4XEa9OHZfU0jQAazZ
iRTHjmKu/b6q1IhnjQv11KGABwBQis4mac53CPEzvoLOKnEsil8xyv6Uph/0sJnf
x0clgWNHz3EKdZ43HHnt6n2MEaC4sNDSzjLSFBtgNJ7tNdB1RQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKssu5VBu85+ww/2oSsbd/YDuk6MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNjgy
YTcxNi1iYjgxLTQ5MTYtYmViYS0yNzk2MjhmNzdhODUvZjhmMjg5MDEtYzIyNi0z
NWMwLWI2MzctMzQ5YTBlY2QwMjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzY4MmE3MTYtYmI4MS00OTE2LWJl
YmEtMjc5NjI4Zjc3YTg1L2M2ODJhNzE2LWJiODEtNDkxNi1iZWJhLTI3OTYyOGY3
N2E4NS5jcmwwHwYDVR0jBBgwFoAUMTOGMIG2zixDvy3B4mOBI8QH2vUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNjgyYTcxNi1iYjgxLTQ5MTYtYmViYS0yNzk2
MjhmNzdhODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHr/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB1e7p/EdXU1QHM7JvKOKl0ro19rXFZoklox8W4sox99AFwcIMpN/QlI
yuriKEgWf2wljjvoQcKRWjm0+NFiZfJ/zzAcClzSBuTwriwjadcKpSKmuHdiCqmd
puHS19hwx3akgcc5gtUHNrIOO75AlY3tmqaYCPoR9EF4Zi6lwUXmNfSm7LFaZzEa
eL/9DOIWH9odiMJfI71o7+Yt0OFaii7n51GBm/ne+gD9SrGynqVWmNjTPwIKwcAn
WQlr2/+N1yip9l3Eqx+P63GRtMgjemMn4P/msGuDb/8BGNkFTR/5YG/6N6MpCF4n
Femhs62FYiBkV85U8n05jHJqG8PPDHI=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:16 2025 by rpki-client