Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/f4b77982-a527-36ff-ae39-20c8febccd87.roa
File: f4b77982-a527-36ff-ae39-20c8febccd87.roa (raw, json)
Hash identifier: E977asayB0hxkwn7pUuY9XgfrIX8VQiKprM7Iixs9cg=
Subject key identifier: DE:F8:66:4D:4C:7A:14:FC:71:7E:4E:D2:64:11:76:AE:6C:58:3F:55
Certificate issuer: /CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5
Certificate serial: 010D0C9F4328584824FA8154D3E8C2A267592B00
Authority key identifier: 91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/f4b77982-a527-36ff-ae39-20c8febccd87.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 32762
IP address blocks: 198.96.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:81:54:d3:e8:c2:a2:67:59:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=cbfb4794-79fd-4f81-99ef-807c456ccd41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7c:01:86:e0:18:1c:d5:df:a4:93:48:f2:ca:
d1:70:b9:19:29:2b:11:80:84:4e:92:fe:09:fc:ab:
46:fd:02:ab:7f:4d:f4:c3:51:d0:bb:d0:f7:1f:de:
f8:ce:15:a7:e8:bc:fc:22:9e:d9:09:67:dd:b0:c4:
38:fb:d6:9a:6e:94:dd:0a:23:1d:82:c1:6b:aa:81:
a6:d7:e2:0a:77:cb:46:62:56:d8:68:87:76:56:7a:
67:0e:65:0e:1d:dd:33:67:37:48:57:ca:84:33:d5:
ec:b3:62:c1:dd:06:b9:a4:7a:04:e8:60:14:9a:75:
2f:0b:2d:fc:91:86:49:0b:f9:58:34:a2:26:ea:d2:
5f:cd:66:fe:3e:cb:c2:33:04:2c:3f:8c:f8:51:30:
49:f4:39:2c:95:43:f5:fc:5b:c7:42:d7:7d:88:68:
39:a2:2f:4f:6f:26:38:b6:4d:fb:94:9e:43:d8:ee:
0b:9b:a2:37:1c:4c:5e:e8:5d:76:1d:01:04:dd:ae:
7f:92:2f:fd:36:be:ea:65:72:e5:bd:b8:00:46:88:
9d:d3:7f:ce:1c:92:8d:8d:0d:4a:3e:95:0f:d7:96:
90:ec:f3:cc:25:a4:e7:89:b5:25:53:1f:c5:8d:7f:
a8:72:bc:0c:b3:1e:1f:a3:9c:44:1f:1d:aa:62:34:
44:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F8:66:4D:4C:7A:14:FC:71:7E:4E:D2:64:11:76:AE:6C:58:3F:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/f4b77982-a527-36ff-ae39-20c8febccd87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl
X509v3 Authority Key Identifier:
keyid:91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer
sbgp-ipAddrBlock: critical
IPv4:
198.96.24.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:11:20:d6:42:f1:4b:29:86:fb:64:10:2b:8a:d1:06:2b:b1:
2a:ea:54:db:2a:b6:34:cc:53:dc:e3:72:24:bc:7d:5e:2e:72:
cb:8f:ac:4b:ab:52:28:a3:0a:95:bd:f1:4b:86:3a:be:a1:d9:
ab:dc:86:46:1c:dc:a6:cc:6c:42:57:10:b4:3f:c8:03:eb:c9:
e7:d8:6c:42:5a:10:6b:3d:df:9a:40:88:1b:8c:d8:1f:f6:45:
66:b5:20:3b:02:96:81:3e:c2:ea:86:95:04:50:7f:08:9b:b9:
a7:9d:cf:5d:e0:65:27:44:aa:ab:90:59:fd:06:d2:9d:76:92:
72:49:6e:bb:c9:4d:d1:ea:b2:15:1e:a7:e7:92:07:db:5e:6a:
dd:a7:3b:18:f4:14:62:2f:98:f6:05:87:6a:be:eb:2c:9a:cc:
b9:f1:3d:ad:97:2a:fd:c3:56:3b:66:12:77:74:fc:bc:d4:56:
ab:a3:6d:7e:d3:29:03:52:db:4b:30:cb:a2:00:b9:b7:94:37:
17:63:fb:66:96:4d:99:01:f4:6c:3e:2a:8a:49:f7:81:72:9e:
c3:40:94:47:46:9e:f3:40:53:33:37:a2:33:4b:83:57:65:7f:
27:f8:a7:8e:75:53:d8:af:29:cd:0c:85:d5:e3:77:ad:32:0a:
2c:42:5a:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgk+oFU0+jComdZKwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmE1NzAzZmMtYjBlMi00ZGQzLWFiYmMtNzFkMDhlMWM2
N2M1MB4XDTI0MTIwOTAyMDA0MFoXDTI1MDMwOTAyMDA0MFowLzEtMCsGA1UEAxMk
Y2JmYjQ3OTQtNzlmZC00ZjgxLTk5ZWYtODA3YzQ1NmNjZDQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nwBhuAYHNXfpJNI8srRcLkZKSsRgIROkv4J
/KtG/QKrf030w1HQu9D3H974zhWn6Lz8Ip7ZCWfdsMQ4+9aabpTdCiMdgsFrqoGm
1+IKd8tGYlbYaId2VnpnDmUOHd0zZzdIV8qEM9Xss2LB3Qa5pHoE6GAUmnUvCy38
kYZJC/lYNKIm6tJfzWb+PsvCMwQsP4z4UTBJ9DkslUP1/FvHQtd9iGg5oi9PbyY4
tk37lJ5D2O4Lm6I3HExe6F12HQEE3a5/ki/9Nr7qZXLlvbgARoid03/OHJKNjQ1K
PpUP15aQ7PPMJaTnibUlUx/FjX+ocrwMsx4fo5xEHx2qYjREpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN74Zk1MehT8cX5O0mQRdq5sWD9VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3
MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQwOGUxYzY3YzUvZjRiNzc5ODItYTUyNy0z
NmZmLWFlMzktMjBjOGZlYmNjZDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmE1NzAzZmMtYjBlMi00ZGQzLWFi
YmMtNzFkMDhlMWM2N2M1L2JhNTcwM2ZjLWIwZTItNGRkMy1hYmJjLTcxZDA4ZTFj
NjdjNS5jcmwwHwYDVR0jBBgwFoAUkaMiLb6LWI+0+yzNjJHeFoQNiAswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQw
OGUxYzY3YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxmAYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKgRINZC8UsphvtkECuK0QYrsSrqVNsqtjTMU9zjciS8fV4ucsuPrEur
UiijCpW98UuGOr6h2avchkYc3KbMbEJXELQ/yAPryefYbEJaEGs935pAiBuM2B/2
RWa1IDsCloE+wuqGlQRQfwibuaedz13gZSdEqquQWf0G0p12knJJbrvJTdHqshUe
p+eSB9teat2nOxj0FGIvmPYFh2q+6yyazLnxPa2XKv3DVjtmEnd0/LzUVqujbX7T
KQNS20swy6IAubeUNxdj+2aWTZkB9Gw+KopJ94FynsNAlEdGnvNAUzM3ojNLg1dl
fyf4p451U9ivKc0MhdXjd60yCixCWis=
-----END CERTIFICATE-----
Generated at Sat May 3 14:00:28 2025 by rpki-client