Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/49cb8b45-24ac-3df5-8192-267514fc0835.roa
File: 49cb8b45-24ac-3df5-8192-267514fc0835.roa (raw, json)
Hash identifier: 1e2KZJ/DsTc8l1JkKHqXD2rlj4RKVf9p7cLfd22BjMM=
Subject key identifier: 26:97:3E:87:06:89:8C:3A:FA:A0:30:ED:77:6F:9A:36:3B:62:21:1E
Certificate issuer: /CN=1fe4e29c-f3ca-4ee5-92da-4443969e3deb
Certificate serial: 010D0C9F432858485470313CFB79C191B0512EC0
Authority key identifier: 09:B5:C9:F4:9A:DD:E7:D5:0E:E8:DB:6E:F5:11:49:5E:86:E6:16:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/49cb8b45-24ac-3df5-8192-267514fc0835.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 26677
IP address blocks: 199.212.252.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:31:3c:fb:79:c1:91:b0:51:2e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe4e29c-f3ca-4ee5-92da-4443969e3deb
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=28348b15-c12d-4641-96dd-00849fcf87ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2c:b5:e8:98:80:85:8a:21:d6:e2:b1:4e:31:
64:b4:62:6f:4d:4f:1b:ee:8f:e1:5e:60:89:fc:be:
22:a7:3d:72:13:fb:7c:ac:57:e5:e3:61:1a:53:a3:
7d:f2:71:b3:6e:95:ee:df:68:24:10:2f:db:03:57:
83:97:73:99:94:6a:f9:5b:9c:36:84:df:b5:96:23:
82:69:f8:52:d4:c2:bc:92:2f:cb:f1:a8:cb:6a:8c:
2e:45:c0:8d:00:9e:d2:b5:2d:b1:bf:14:53:e5:e2:
c7:e3:70:b8:d7:13:a2:22:38:15:4d:b3:35:07:a1:
19:7d:bd:ba:20:51:12:c8:00:de:72:98:21:fd:cb:
48:1f:c0:6b:75:7f:61:09:22:a6:16:46:4e:e5:3f:
16:2a:17:54:8d:ec:50:2b:c7:d6:d9:ba:32:c3:01:
6f:ec:58:a4:94:f4:90:23:48:36:9d:0a:b2:ad:6b:
4f:18:6b:34:1f:87:a7:a3:ff:ed:a5:55:43:69:1e:
1f:7d:d3:35:5f:3b:f1:1b:ba:53:8a:9a:83:90:e6:
16:b8:95:9f:e1:90:f2:48:7e:82:65:02:b5:ff:28:
a5:67:a9:46:9d:c1:35:69:91:6b:85:e2:72:f1:bb:
d0:3c:50:7a:9e:3e:8c:d2:4f:11:f2:83:67:9d:94:
24:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:97:3E:87:06:89:8C:3A:FA:A0:30:ED:77:6F:9A:36:3B:62:21:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/49cb8b45-24ac-3df5-8192-267514fc0835.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.crl
X509v3 Authority Key Identifier:
keyid:09:B5:C9:F4:9A:DD:E7:D5:0E:E8:DB:6E:F5:11:49:5E:86:E6:16:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer
sbgp-ipAddrBlock: critical
IPv4:
199.212.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:c5:23:a4:68:ee:7c:30:93:0d:0a:b8:5a:89:31:0a:c1:31:
f0:05:54:90:80:9f:c2:d0:c4:14:43:9a:96:78:bc:1a:fa:8c:
f8:ac:18:71:5d:28:8b:6e:8a:13:8e:be:af:6a:45:74:73:a0:
29:fc:a4:c8:5e:40:1b:32:1d:06:b5:50:03:d8:01:eb:41:40:
2c:54:e5:90:13:66:cc:8e:d6:6c:76:6d:08:df:e6:4a:8d:49:
3d:ec:97:d9:6e:e2:b2:b1:00:1e:92:07:01:30:5c:57:7a:e7:
62:7a:9e:19:15:34:3a:31:94:04:b3:0e:c2:38:32:0c:d3:6c:
11:ce:26:68:04:98:62:96:02:27:cf:90:96:5c:a5:8d:db:d9:
39:86:e8:30:a7:06:74:45:43:dc:4c:41:d4:0f:35:3b:c4:f5:
ce:9e:b7:fe:20:26:35:82:c1:1e:2e:93:7d:b1:6a:98:1c:3d:
4b:e4:05:7b:1f:74:a9:18:18:42:df:45:8c:e8:e2:5d:f5:db:
91:e8:0a:76:13:9a:b1:6e:08:4d:54:b1:02:49:6a:cd:ba:cb:
d2:09:78:be:b5:64:70:b4:31:ec:d2:5d:82:e6:f8:00:a7:97:
38:43:01:d0:e9:28:43:74:1d:af:ca:e5:f0:d0:43:b1:14:22:
12:e7:33:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhUcDE8+3nBkbBRLsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZlNGUyOWMtZjNjYS00ZWU1LTkyZGEtNDQ0Mzk2OWUz
ZGViMB4XDTI0MTIyNjAyMDA0MFoXDTI1MDMyNjAxMDA0MFowLzEtMCsGA1UEAxMk
MjgzNDhiMTUtYzEyZC00NjQxLTk2ZGQtMDA4NDlmY2Y4N2VlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyy16JiAhYoh1uKxTjFktGJvTU8b7o/hXmCJ
/L4ipz1yE/t8rFfl42EaU6N98nGzbpXu32gkEC/bA1eDl3OZlGr5W5w2hN+1liOC
afhS1MK8ki/L8ajLaowuRcCNAJ7StS2xvxRT5eLH43C41xOiIjgVTbM1B6EZfb26
IFESyADecpgh/ctIH8BrdX9hCSKmFkZO5T8WKhdUjexQK8fW2boywwFv7FiklPSQ
I0g2nQqyrWtPGGs0H4eno//tpVVDaR4ffdM1XzvxG7pTipqDkOYWuJWf4ZDySH6C
ZQK1/yilZ6lGncE1aZFrheJy8bvQPFB6nj6M0k8R8oNnnZQkcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCaXPocGiYw6+qAw7XdvmjY7YiEeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xZmU0
ZTI5Yy1mM2NhLTRlZTUtOTJkYS00NDQzOTY5ZTNkZWIvNDljYjhiNDUtMjRhYy0z
ZGY1LTgxOTItMjY3NTE0ZmMwODM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMWZlNGUyOWMtZjNjYS00ZWU1LTky
ZGEtNDQ0Mzk2OWUzZGViLzFmZTRlMjljLWYzY2EtNGVlNS05MmRhLTQ0NDM5Njll
M2RlYi5jcmwwHwYDVR0jBBgwFoAUCbXJ9Jrd59UO6Ntu9RFJXobmFlwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xZmU0ZTI5Yy1mM2NhLTRlZTUtOTJkYS00NDQz
OTY5ZTNkZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx9T8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFrFI6Ro7nwwkw0KuFqJMQrBMfAFVJCAn8LQxBRDmpZ4vBr6jPisGHFd
KItuihOOvq9qRXRzoCn8pMheQBsyHQa1UAPYAetBQCxU5ZATZsyO1mx2bQjf5kqN
ST3sl9lu4rKxAB6SBwEwXFd652J6nhkVNDoxlASzDsI4MgzTbBHOJmgEmGKWAifP
kJZcpY3b2TmG6DCnBnRFQ9xMQdQPNTvE9c6et/4gJjWCwR4uk32xapgcPUvkBXsf
dKkYGELfRYzo4l3125HoCnYTmrFuCE1UsQJJas26y9IJeL61ZHC0MezSXYLm+ACn
lzhDAdDpKEN0Ha/K5fDQQ7EUIhLnM68=
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:07:38 2025 by rpki-client