Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/208a5d2f-5933-32e5-aaaa-898bcac06735.roa
File: 208a5d2f-5933-32e5-aaaa-898bcac06735.roa (raw, json)
Hash identifier: imOftNHbeHu0si9Tqolgp6hm0YtKqWCm7ZYqT6sQjIg=
Subject key identifier: 93:87:65:FE:84:15:EB:C5:2F:B8:2D:8F:65:CA:AF:D7:A7:BA:46:C2
Certificate issuer: /CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
Certificate serial: 010D0C9F43285848573AD2BF4F50190FA18CC680
Authority key identifier: 83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/208a5d2f-5933-32e5-aaaa-898bcac06735.roa
Signing time: Fri 27 Dec 2024 02:00:40 +0000
ROA not before: Fri 27 Dec 2024 02:00:40 +0000
ROA not after: Thu 27 Mar 2025 01:00:40 +0000
asID: 30045
IP address blocks: 199.212.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:57:3a:d2:bf:4f:50:19:0f:a1:8c:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
Validity
Not Before: Dec 27 02:00:40 2024 GMT
Not After : Mar 27 01:00:40 2025 GMT
Subject: CN=57262d48-f8d6-4b52-9abd-5661679c28b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:09:df:d0:19:af:a7:7b:1f:9f:02:b3:39:12:
fe:61:17:86:6d:bd:01:73:e4:ed:fb:53:a4:36:5a:
76:4a:67:a0:b8:2b:89:3f:d1:b4:4c:c9:02:cf:d9:
99:a8:6d:04:b4:44:3f:94:12:fc:78:f3:64:81:70:
a0:8a:ea:ed:c6:8d:c1:8e:98:2d:9b:7e:f3:eb:0d:
3e:40:04:16:66:2b:cf:eb:96:80:90:5a:07:99:41:
17:e2:ac:c5:2a:d7:12:ef:51:69:9c:29:71:83:56:
12:2a:44:f6:be:33:35:92:07:a5:55:45:1b:92:17:
f9:4c:af:38:9a:a5:d9:38:ed:15:25:d8:1f:29:2e:
f8:7c:a5:9d:13:42:eb:b9:db:de:ce:50:73:fd:70:
ab:7d:e2:67:a7:17:e4:6a:d9:74:2c:15:4e:d4:3f:
d0:71:ac:93:be:b3:3c:a2:94:3f:4b:ba:35:74:08:
9c:a9:2e:f4:fa:03:d6:15:77:63:e5:d1:b1:47:d0:
39:5b:ea:3e:79:cb:f7:db:f3:3f:1a:a0:2c:24:de:
bd:a3:c3:02:8a:27:bb:ef:f0:36:bc:66:5e:81:00:
0c:68:36:5d:0d:f4:c2:4a:35:53:03:19:e6:2b:ba:
ac:6c:c0:6a:6e:94:46:b3:ac:d1:55:72:69:23:cf:
1a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:87:65:FE:84:15:EB:C5:2F:B8:2D:8F:65:CA:AF:D7:A7:BA:46:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/208a5d2f-5933-32e5-aaaa-898bcac06735.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl
X509v3 Authority Key Identifier:
keyid:83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
sbgp-ipAddrBlock: critical
IPv4:
199.212.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:0d:7d:eb:70:cb:62:a3:bb:49:76:3c:de:5c:7a:a0:72:38:
a3:05:eb:90:ac:2d:b3:60:b0:db:08:cd:72:93:78:19:2c:20:
14:f6:ce:e7:a6:c4:15:34:ba:7c:0d:fd:09:6d:70:e7:f9:89:
70:70:60:ea:47:50:3a:23:be:b4:5b:a2:75:73:d4:90:8b:92:
8a:ff:4e:c1:b7:33:70:58:ef:be:b1:e1:82:41:c3:33:f1:5b:
3e:4e:86:25:8e:2f:9f:b6:e0:78:db:83:05:20:26:f2:35:20:
72:28:9a:96:21:e8:f0:90:ac:9f:7e:7a:8b:a9:4f:39:e3:8a:
d4:07:53:f7:72:f9:94:e1:69:50:3e:1a:64:e8:ba:95:8e:7b:
2b:17:3d:63:04:43:59:a4:1e:66:fe:3e:4c:ec:07:d9:2d:1f:
50:e2:64:c2:19:5f:0c:15:2a:4f:e4:aa:ea:ba:4d:80:f5:5a:
9d:21:b8:d9:ba:52:05:39:43:89:c8:d3:1e:0f:3e:10:94:f9:
ce:db:87:2f:51:1a:b1:4a:71:6b:03:53:6e:93:13:33:a9:a9:
e0:b6:57:11:bc:f7:6b:cc:f9:51:92:4f:c5:41:72:20:7d:74:
5c:33:05:15:a3:89:c6:1a:6d:98:7f:7b:5c:5f:aa:ba:0c:07:
7e:d4:21:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhXOtK/T1AZD6GMxoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGFjMWE1NmItZWEzMy00YmQ2LTlkM2UtMDA4OTZhOTFk
YjZiMB4XDTI0MTIyNzAyMDA0MFoXDTI1MDMyNzAxMDA0MFowLzEtMCsGA1UEAxMk
NTcyNjJkNDgtZjhkNi00YjUyLTlhYmQtNTY2MTY3OWMyOGI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwnf0Bmvp3sfnwKzORL+YReGbb0Bc+Tt+1Ok
Nlp2SmeguCuJP9G0TMkCz9mZqG0EtEQ/lBL8ePNkgXCgiurtxo3Bjpgtm37z6w0+
QAQWZivP65aAkFoHmUEX4qzFKtcS71FpnClxg1YSKkT2vjM1kgelVUUbkhf5TK84
mqXZOO0VJdgfKS74fKWdE0LrudvezlBz/XCrfeJnpxfkatl0LBVO1D/QcayTvrM8
opQ/S7o1dAicqS70+gPWFXdj5dGxR9A5W+o+ecv32/M/GqAsJN69o8MCiie77/A2
vGZegQAMaDZdDfTCSjVTAxnmK7qsbMBqbpRGs6zRVXJpI88acwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJOHZf6EFevFL7gtj2XKr9enukbCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YWMx
YTU2Yi1lYTMzLTRiZDYtOWQzZS0wMDg5NmE5MWRiNmIvMjA4YTVkMmYtNTkzMy0z
MmU1LWFhYWEtODk4YmNhYzA2NzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGFjMWE1NmItZWEzMy00YmQ2LTlk
M2UtMDA4OTZhOTFkYjZiLzhhYzFhNTZiLWVhMzMtNGJkNi05ZDNlLTAwODk2YTkx
ZGI2Yi5jcmwwHwYDVR0jBBgwFoAUg3U6Yyir4o99wKc7TDozymMHEyUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YWMxYTU2Yi1lYTMzLTRiZDYtOWQzZS0wMDg5
NmE5MWRiNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx9QEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK8Nfetwy2Kju0l2PN5ceqByOKMF65CsLbNgsNsIzXKTeBksIBT2zuem
xBU0unwN/QltcOf5iXBwYOpHUDojvrRbonVz1JCLkor/TsG3M3BY776x4YJBwzPx
Wz5OhiWOL5+24HjbgwUgJvI1IHIompYh6PCQrJ9+eoupTznjitQHU/dy+ZThaVA+
GmToupWOeysXPWMEQ1mkHmb+PkzsB9ktH1DiZMIZXwwVKk/kquq6TYD1Wp0huNm6
UgU5Q4nI0x4PPhCU+c7bhy9RGrFKcWsDU26TEzOpqeC2VxG892vM+VGST8VBciB9
dFwzBRWjicYabZh/e1xfqroMB37UIQk=
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:26:51 2025 by rpki-client