Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/3dbcbaee-a2a6-3ca0-b9f7-d25846356dc9.roa
File: 3dbcbaee-a2a6-3ca0-b9f7-d25846356dc9.roa (raw, json)
Hash identifier: xrhifQjK0F6ybhno7EALzZ6j6KPI3hESav+VdBkHOIA=
Subject key identifier: 13:C5:27:24:88:E0:53:A5:A8:A5:3B:A3:50:75:85:57:D9:DD:9E:6A
Certificate issuer: /CN=58d440e8-959f-43ab-a410-371a599ce552
Certificate serial: 010D0C9F4328584819CFE2BF8139D7DEA7922FF0
Authority key identifier: FA:8F:D3:BC:E0:72:04:46:78:07:43:1B:41:90:EA:40:C1:6E:F8:83
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/3dbcbaee-a2a6-3ca0-b9f7-d25846356dc9.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 26806
IP address blocks: 198.169.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:e2:bf:81:39:d7:de:a7:92:2f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d440e8-959f-43ab-a410-371a599ce552
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=30196596-989a-4aaf-9b2a-3e1986a37182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:90:07:87:45:52:c4:26:ab:b0:e4:33:dd:aa:
7c:9a:51:fe:ac:3a:85:4b:5f:85:05:b6:ba:24:1d:
44:8b:c7:8b:bf:af:ec:24:57:8c:a8:cb:d7:ab:01:
2f:f1:d7:51:40:3b:31:3f:b6:10:1a:08:a2:7f:16:
b6:a9:e4:e4:6d:e3:b1:6a:e2:a8:ce:9c:b2:2b:b0:
ee:99:c0:3d:28:64:2c:75:b2:f0:09:10:bf:3f:4d:
f8:e0:42:82:ff:d6:de:36:0f:e4:5e:0c:52:0d:2f:
bd:d7:35:0a:fb:7b:3e:72:54:c3:23:dc:b3:ea:e7:
ca:23:6f:76:18:2e:18:2e:75:d5:ff:ab:4d:e5:87:
8a:b7:94:ae:7a:5d:05:55:20:ba:60:a6:b4:79:cf:
a2:0f:d0:e7:d1:95:79:30:08:0c:5a:a2:d4:f1:5a:
ba:97:85:d2:9a:41:c7:a8:57:e9:71:b0:b0:f5:1f:
b5:bf:94:22:b4:c1:03:d2:94:a4:58:f7:a8:88:c3:
32:cb:ba:13:42:b8:09:93:7b:1b:98:1b:13:dc:2f:
85:de:0c:15:5d:d6:ba:a8:be:6b:f2:d2:85:f7:82:
e6:36:9f:e3:ee:0f:05:ac:d0:00:84:1b:28:46:88:
16:8e:92:5a:db:1f:e6:3b:94:7f:ec:3d:59:99:84:
65:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C5:27:24:88:E0:53:A5:A8:A5:3B:A3:50:75:85:57:D9:DD:9E:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/3dbcbaee-a2a6-3ca0-b9f7-d25846356dc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/58d440e8-959f-43ab-a410-371a599ce552.crl
X509v3 Authority Key Identifier:
keyid:FA:8F:D3:BC:E0:72:04:46:78:07:43:1B:41:90:EA:40:C1:6E:F8:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552.cer
sbgp-ipAddrBlock: critical
IPv4:
198.169.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:03:f9:2c:4f:c7:b9:ee:d7:00:6f:b0:f1:00:f9:91:25:47:
e8:65:0a:f2:8f:9e:88:37:d6:26:77:9c:21:bc:fc:87:25:48:
c4:40:93:6b:c2:c2:93:b1:5a:3b:22:f3:9f:1c:16:2e:e7:a9:
b6:39:fc:66:b6:5f:32:7b:54:52:f4:5a:0d:10:b8:d9:e8:32:
0d:d4:20:3b:c7:c4:c9:fe:e9:31:a4:4f:7c:ac:66:5d:5f:f7:
61:04:04:77:50:18:ea:4d:ca:9e:c9:06:2f:ac:c6:9a:c1:18:
cf:b2:37:79:c3:e1:af:e8:4e:10:df:a3:32:10:2e:d8:4b:81:
68:84:5d:a9:68:d3:76:8c:45:44:90:bd:06:38:53:53:09:6b:
0e:36:dd:b2:f0:bd:e2:b3:f0:65:71:9b:43:6e:78:7a:08:a4:
c9:79:34:61:ab:ca:f0:40:91:ce:fb:9d:7a:db:b0:3f:be:b7:
ac:09:45:42:3d:57:44:90:81:95:c5:a3:ba:7c:3f:c8:1c:b9:
fc:f1:6e:20:1e:3b:1b:ab:3b:f9:b4:58:bc:0b:1d:ac:bc:90:
04:4f:ce:b3:27:13:cf:57:1a:f6:9e:bb:75:ed:a2:1a:0e:96:
76:b1:b9:9d:e1:cb:de:fc:d3:20:47:42:7c:90:05:32:67:02:
08:19:45:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgZz+K/gTnX3qeSL/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNThkNDQwZTgtOTU5Zi00M2FiLWE0MTAtMzcxYTU5OWNl
NTUyMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
MzAxOTY1OTYtOTg5YS00YWFmLTliMmEtM2UxOTg2YTM3MTgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZAHh0VSxCarsOQz3ap8mlH+rDqFS1+FBba6
JB1Ei8eLv6/sJFeMqMvXqwEv8ddRQDsxP7YQGgiifxa2qeTkbeOxauKozpyyK7Du
mcA9KGQsdbLwCRC/P0344EKC/9beNg/kXgxSDS+91zUK+3s+clTDI9yz6ufKI292
GC4YLnXV/6tN5YeKt5Suel0FVSC6YKa0ec+iD9Dn0ZV5MAgMWqLU8Vq6l4XSmkHH
qFfpcbCw9R+1v5QitMED0pSkWPeoiMMyy7oTQrgJk3sbmBsT3C+F3gwVXda6qL5r
8tKF94LmNp/j7g8FrNAAhBsoRogWjpJa2x/mO5R/7D1ZmYRlUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBPFJySI4FOlqKU7o1B1hVfZ3Z5qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81OGQ0
NDBlOC05NTlmLTQzYWItYTQxMC0zNzFhNTk5Y2U1NTIvM2RiY2JhZWUtYTJhNi0z
Y2EwLWI5ZjctZDI1ODQ2MzU2ZGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNThkNDQwZTgtOTU5Zi00M2FiLWE0
MTAtMzcxYTU5OWNlNTUyLzU4ZDQ0MGU4LTk1OWYtNDNhYi1hNDEwLTM3MWE1OTlj
ZTU1Mi5jcmwwHwYDVR0jBBgwFoAU+o/TvOByBEZ4B0MbQZDqQMFu+IMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81OGQ0NDBlOC05NTlmLTQzYWItYTQxMC0zNzFh
NTk5Y2U1NTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqkVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEUD+SxPx7nu1wBvsPEA+ZElR+hlCvKPnog31iZ3nCG8/IclSMRAk2vC
wpOxWjsi858cFi7nqbY5/Ga2XzJ7VFL0Wg0QuNnoMg3UIDvHxMn+6TGkT3ysZl1f
92EEBHdQGOpNyp7JBi+sxprBGM+yN3nD4a/oThDfozIQLthLgWiEXalo03aMRUSQ
vQY4U1MJaw423bLwveKz8GVxm0NueHoIpMl5NGGryvBAkc77nXrbsD++t6wJRUI9
V0SQgZXFo7p8P8gcufzxbiAeOxurO/m0WLwLHay8kARPzrMnE89XGvaeu3XtohoO
lnaxuZ3hy9780yBHQnyQBTJnAggZRbA=
-----END CERTIFICATE-----
Generated at Tue May 6 12:59:21 2025 by rpki-client