Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/b34b4720-1cd8-3efd-b8ef-cbe859c2c468.roa
File: b34b4720-1cd8-3efd-b8ef-cbe859c2c468.roa (raw, json)
Hash identifier: cIeHIYuQQmiK3RbkRK87ghz5irX9khMZuVxt74VWuuM=
Subject key identifier: D2:C5:6F:0E:BA:2D:C6:2E:DA:56:E6:49:E3:66:04:7A:76:58:CB:64
Certificate issuer: /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial: 010D0C9F4328584871C0703D96D06B05E3745100
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/b34b4720-1cd8-3efd-b8ef-cbe859c2c468.roa
Signing time: Sun 05 Jan 2025 14:00:52 +0000
ROA not before: Sun 05 Jan 2025 14:00:52 +0000
ROA not after: Sat 05 Apr 2025 13:00:52 +0000
asID: 19551
IP address blocks: 198.37.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:71:c0:70:3d:96:d0:6b:05:e3:74:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Validity
Not Before: Jan 5 14:00:52 2025 GMT
Not After : Apr 5 13:00:52 2025 GMT
Subject: CN=8eb6745b-8a50-45dc-bd1e-d924f05052a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3d:bf:b4:82:71:2f:3d:9d:a7:1a:65:f5:99:
8f:71:0c:b6:f3:1c:02:78:57:88:f0:a8:76:0e:eb:
6a:f9:87:74:c2:8b:8f:c7:59:6c:58:2c:6b:ce:2c:
3e:7e:6a:ad:25:3b:14:8a:98:8b:1e:db:2b:21:79:
c6:db:30:fc:be:37:19:6a:0e:30:a7:b3:ba:3d:df:
e4:91:23:df:29:80:ef:3c:05:74:68:2b:20:7e:99:
5a:da:86:0f:b7:35:e4:f2:56:c7:4b:9a:5b:db:b0:
3a:2b:4b:5a:e5:6c:a9:19:72:39:00:d7:3a:07:b6:
21:25:52:12:aa:ac:87:76:92:ca:be:97:6a:dd:a6:
23:84:f5:43:d4:34:f9:c8:16:7a:53:25:1f:50:e4:
dd:e6:be:94:8e:50:2d:27:cc:b6:a2:52:4a:fb:c2:
68:33:ba:77:b9:ee:79:dc:88:03:72:2e:07:c9:ba:
70:1a:40:5d:fc:b0:7a:49:c8:e3:22:0d:37:70:3c:
43:12:cd:9f:70:ee:10:70:c4:92:41:af:22:d9:fc:
4e:0c:65:25:f6:9f:67:79:bb:cd:84:08:50:6f:9d:
99:f2:4c:39:d5:c9:08:20:72:92:22:21:c9:0f:48:
28:3f:76:fc:78:a5:4c:ea:a4:20:2c:c6:c5:f6:48:
74:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C5:6F:0E:BA:2D:C6:2E:DA:56:E6:49:E3:66:04:7A:76:58:CB:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/b34b4720-1cd8-3efd-b8ef-cbe859c2c468.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl
X509v3 Authority Key Identifier:
keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
sbgp-ipAddrBlock: critical
IPv4:
198.37.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:c7:20:d2:af:c6:5a:a2:79:05:62:53:80:a5:12:4f:56:08:
04:bc:5f:71:cb:f7:6e:ed:e8:84:03:13:06:24:7c:c8:b0:e9:
ec:13:a6:a5:76:37:35:b5:81:78:76:89:8a:ad:88:67:9e:be:
09:a8:ab:da:6e:2a:0a:03:a7:80:4f:1a:9f:55:01:79:d3:58:
68:02:69:e2:ca:de:51:c7:94:af:59:f1:30:31:25:20:b9:b5:
a4:65:be:33:e2:33:c7:08:a8:04:76:c5:1a:aa:e0:96:b5:4c:
a2:3a:b5:0f:50:91:9e:59:3b:a7:92:7e:13:19:9b:ed:79:f1:
a7:a2:a1:ec:dc:6f:f8:59:57:a9:25:57:8d:73:18:18:a5:fe:
ea:2b:79:15:fd:c8:e1:37:42:73:a2:15:3e:04:86:5c:fc:f5:
36:08:15:cc:a4:5b:57:48:dc:3b:c7:78:37:52:cd:91:a5:b6:
9c:6e:07:60:f6:5a:83:e1:f7:88:3a:73:a8:79:ff:3b:6a:12:
c2:20:f5:c6:3c:9a:db:75:ce:43:db:49:ab:ee:72:24:1d:d3:
f7:db:40:dc:cf:a3:c2:f8:55:18:83:a1:e6:5e:1e:40:65:8c:
0a:da:c9:b9:4d:4d:23:bc:22:18:2e:55:c2:6c:5a:0b:ad:47:
99:a4:8c:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhxwHA9ltBrBeN0UQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJkZmJjMjAtYjQ4ZC00YWQzLTlhZGEtYWFhMWE4ODU3
MGRjMB4XDTI1MDEwNTE0MDA1MloXDTI1MDQwNTEzMDA1MlowLzEtMCsGA1UEAxMk
OGViNjc0NWItOGE1MC00NWRjLWJkMWUtZDkyNGYwNTA1MmExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT2/tIJxLz2dpxpl9ZmPcQy28xwCeFeI8Kh2
Dutq+Yd0wouPx1lsWCxrziw+fmqtJTsUipiLHtsrIXnG2zD8vjcZag4wp7O6Pd/k
kSPfKYDvPAV0aCsgfpla2oYPtzXk8lbHS5pb27A6K0ta5WypGXI5ANc6B7YhJVIS
qqyHdpLKvpdq3aYjhPVD1DT5yBZ6UyUfUOTd5r6UjlAtJ8y2olJK+8JoM7p3ue55
3IgDci4HybpwGkBd/LB6ScjjIg03cDxDEs2fcO4QcMSSQa8i2fxODGUl9p9nebvN
hAhQb52Z8kw51ckIIHKSIiHJD0goP3b8eKVM6qQgLMbF9kh0/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNLFbw66LcYu2lbmSeNmBHp2WMtkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMmRm
YmMyMC1iNDhkLTRhZDMtOWFkYS1hYWExYTg4NTcwZGMvYjM0YjQ3MjAtMWNkOC0z
ZWZkLWI4ZWYtY2JlODU5YzJjNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjJkZmJjMjAtYjQ4ZC00YWQzLTlh
ZGEtYWFhMWE4ODU3MGRjLzIyZGZiYzIwLWI0OGQtNGFkMy05YWRhLWFhYTFhODg1
NzBkYy5jcmwwHwYDVR0jBBgwFoAU1CRpq+RlUcheIrjvsqe6UvFiZYAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMmRmYmMyMC1iNDhkLTRhZDMtOWFkYS1hYWEx
YTg4NTcwZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiU5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEvHINKvxlqieQViU4ClEk9WCAS8X3HL927t6IQDEwYkfMiw6ewTpqV2
NzW1gXh2iYqtiGeevgmoq9puKgoDp4BPGp9VAXnTWGgCaeLK3lHHlK9Z8TAxJSC5
taRlvjPiM8cIqAR2xRqq4Ja1TKI6tQ9QkZ5ZO6eSfhMZm+158aeioezcb/hZV6kl
V41zGBil/uoreRX9yOE3QnOiFT4Ehlz89TYIFcykW1dI3DvHeDdSzZGltpxuB2D2
WoPh94g6c6h5/ztqEsIg9cY8mtt1zkPbSavuciQd0/fbQNzPo8L4VRiDoeZeHkBl
jArayblNTSO8IhguVcJsWgutR5mkjKE=
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:30:54 2025 by rpki-client