Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0c921e76-6576-3175-8c68-8b8667dfc669.roa
File: 0c921e76-6576-3175-8c68-8b8667dfc669.roa (raw, json)
Hash identifier: eKfUzSa7FdIr8FooABkhquNxMIXVBH8N3Yy0gRdTURM=
Subject key identifier: F6:D5:98:B3:B1:05:C4:B2:D1:5B:B8:7D:1C:30:AD:C1:D3:04:16:4F
Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial: 010D0C9F43285847FB1A225B589E560601A4E0D0
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0c921e76-6576-3175-8c68-8b8667dfc669.roa
Signing time: Sun 24 Nov 2024 02:00:27 +0000
ROA not before: Sun 24 Nov 2024 02:00:27 +0000
ROA not after: Sat 22 Feb 2025 02:00:27 +0000
asID: 397422
IP address blocks: 199.193.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:1a:22:5b:58:9e:56:06:01:a4:e0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Validity
Not Before: Nov 24 02:00:27 2024 GMT
Not After : Feb 22 02:00:27 2025 GMT
Subject: CN=196f426e-9725-43db-87fd-5e1ecb7e85b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6d:fd:b1:6f:ee:ac:d7:ce:bd:5d:2b:f6:e3:
cf:8c:3b:c1:33:7c:eb:13:f4:2c:13:3c:34:ae:89:
3a:a6:37:55:14:fe:74:cd:7c:82:48:b8:7c:ff:6e:
50:42:e8:5e:c9:71:77:05:eb:9c:4b:37:b5:6b:bc:
ec:b4:15:d9:5d:d0:95:88:44:2f:ef:e1:69:49:01:
41:52:b0:32:98:4a:d7:2a:7a:ab:ef:85:ba:0c:ab:
98:c2:51:4b:fa:2e:bf:c9:62:0e:8e:24:e1:84:ca:
a0:78:13:30:c5:4e:b0:88:96:e0:21:86:c9:3d:9c:
6a:d6:88:4a:a7:9f:6d:7e:0e:14:27:60:0f:d9:6e:
87:f7:df:98:52:8a:fc:1e:6f:8c:4c:3a:1e:81:1f:
b3:d3:97:ef:64:8c:43:65:85:b7:f3:26:84:2f:4d:
08:4f:05:f6:6b:43:37:dd:48:4f:9a:b0:9d:2e:3c:
00:3c:42:89:8d:06:5a:10:c6:2b:e5:54:e9:71:4a:
1f:10:e6:ed:17:79:da:06:31:bc:91:c5:14:18:96:
3b:d0:1d:41:d5:6e:04:5c:b9:33:92:b5:34:1b:97:
e9:bc:6c:71:e1:b5:29:3b:85:2d:a6:8a:4b:e7:d2:
dc:a8:17:3a:08:e8:8f:5d:fa:90:d7:46:e1:8f:cd:
80:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D5:98:B3:B1:05:C4:B2:D1:5B:B8:7D:1C:30:AD:C1:D3:04:16:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0c921e76-6576-3175-8c68-8b8667dfc669.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
X509v3 Authority Key Identifier:
keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
sbgp-ipAddrBlock: critical
IPv4:
199.193.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:7f:7c:04:d8:63:45:27:84:06:2d:b7:af:98:c6:23:e3:20:
21:d0:1c:5f:3f:b6:a8:75:fb:17:0c:ef:cd:c0:b8:5e:09:60:
5b:f6:75:ef:cb:a6:5b:26:c8:53:3f:16:6f:a4:fc:fa:13:0d:
83:0d:e6:9b:81:03:88:77:07:52:29:59:96:11:98:6c:35:f6:
3c:ca:90:30:fd:1d:18:fa:f4:ac:41:1e:29:cb:86:ab:10:4a:
1c:6c:46:90:37:9d:4a:93:96:da:49:20:d1:ca:6f:9e:ff:01:
e5:83:0d:40:a6:db:30:36:bf:c9:0b:ae:2b:9d:34:2f:75:8d:
7e:2d:6c:1e:9d:ed:79:b2:7a:fe:cd:3e:dd:d5:70:34:74:6e:
0e:c5:7f:2c:e9:40:61:65:0a:21:79:e8:10:50:c5:b8:99:ae:
d3:b0:1a:b6:a0:72:6c:10:8c:19:b6:5c:73:df:0a:fe:ee:17:
81:41:0a:e8:2d:57:58:ad:47:93:69:6b:51:82:21:ba:ae:b9:
02:9a:aa:9e:2f:1d:fb:42:75:2c:99:49:1d:25:c6:8c:e0:9a:
22:df:c3:d9:e9:97:b5:74:33:1a:9d:df:be:18:1d:b4:6e:05:
67:cd:b5:68:e8:42:f2:7a:c0:12:62:8e:de:fb:c1:2d:05:1b:
da:dd:48:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf7GiJbWJ5WBgGk4NAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI0MTEyNDAyMDAyN1oXDTI1MDIyMjAyMDAyN1owLzEtMCsGA1UEAxMk
MTk2ZjQyNmUtOTcyNS00M2RiLTg3ZmQtNWUxZWNiN2U4NWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw239sW/urNfOvV0r9uPPjDvBM3zrE/QsEzw0
rok6pjdVFP50zXyCSLh8/25QQuheyXF3BeucSze1a7zstBXZXdCViEQv7+FpSQFB
UrAymErXKnqr74W6DKuYwlFL+i6/yWIOjiThhMqgeBMwxU6wiJbgIYbJPZxq1ohK
p59tfg4UJ2AP2W6H99+YUor8Hm+MTDoegR+z05fvZIxDZYW38yaEL00ITwX2a0M3
3UhPmrCdLjwAPEKJjQZaEMYr5VTpcUofEObtF3naBjG8kcUUGJY70B1B1W4EXLkz
krU0G5fpvGxx4bUpO4UtpopL59LcqBc6COiPXfqQ10bhj82APQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPbVmLOxBcSy0Vu4fRwwrcHTBBZPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvMGM5MjFlNzYtNjU3Ni0z
MTc1LThjNjgtOGI4NjY3ZGZjNjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8HoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHx/fATYY0UnhAYtt6+YxiPjICHQHF8/tqh1+xcM783AuF4JYFv2de/L
plsmyFM/Fm+k/PoTDYMN5puBA4h3B1IpWZYRmGw19jzKkDD9HRj69KxBHinLhqsQ
ShxsRpA3nUqTltpJINHKb57/AeWDDUCm2zA2v8kLriudNC91jX4tbB6d7Xmyev7N
Pt3VcDR0bg7FfyzpQGFlCiF56BBQxbiZrtOwGragcmwQjBm2XHPfCv7uF4FBCugt
V1itR5Npa1GCIbquuQKaqp4vHftCdSyZSR0lxozgmiLfw9npl7V0Mxqd374YHbRu
BWfNtWjoQvJ6wBJijt77wS0FG9rdSAo=
-----END CERTIFICATE-----
Generated at Sat May 10 10:18:17 2025 by rpki-client