Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/2deced11-ff81-3e5b-bcfa-9a3e47768c60.roa
File: 2deced11-ff81-3e5b-bcfa-9a3e47768c60.roa (raw, json)
Hash identifier: aGYfF29l/0dOWH+blEA2IpmKzw6VJZ2s6z9WV5UKNkQ=
Subject key identifier: 64:A1:5B:C5:F6:5A:E7:A6:E3:65:CE:7A:34:3E:51:A5:CF:29:61:96
Certificate issuer: /CN=687c869a-fd9c-4db9-8dab-54b737103513
Certificate serial: 010D0C9F432858485F9AE74C019D834E30BDD480
Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/2deced11-ff81-3e5b-bcfa-9a3e47768c60.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 33392
IP address blocks: 199.101.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:e7:4c:01:9d:83:4e:30:bd:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=3b291bb1-822a-4434-a057-ce011985f0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a8:5f:05:94:d8:27:d1:a1:d3:a7:6f:47:b4:
81:c8:43:79:9a:a8:1d:84:2f:d5:77:96:53:42:ac:
32:e9:10:08:18:3d:07:3d:3a:6c:b3:70:4c:9e:29:
36:2c:2f:d3:08:2e:10:4e:39:4a:6f:e8:d0:54:ad:
75:f2:2b:c6:e6:b4:d8:2b:64:49:cb:80:52:56:04:
7a:98:28:eb:6c:89:95:25:ca:3a:38:bb:f7:43:77:
37:f3:a6:63:bd:2c:7b:8e:76:9e:19:ad:01:78:f7:
8c:d5:21:e1:13:0b:41:6f:49:57:1d:59:0c:89:30:
dc:d1:ae:c1:c9:98:ee:d5:0c:01:7d:a7:71:7d:20:
c6:02:55:93:fd:33:aa:e3:13:00:51:46:9c:3b:b4:
3f:2a:48:a0:ab:bb:3f:1d:8a:d2:37:02:ce:64:c4:
9b:20:14:93:90:9a:aa:08:dc:9c:21:d0:1b:ae:47:
fc:87:7e:ce:d6:89:54:3f:f2:b3:5f:4f:79:5f:00:
cf:13:29:40:a5:6a:7a:a3:50:82:ce:49:bb:8c:4f:
9a:fc:a7:2e:ce:81:58:de:ea:16:ff:f8:85:42:a5:
05:fb:e9:04:c9:64:fa:97:12:54:19:51:ef:e1:e2:
cd:a1:97:fb:77:4a:ad:c9:f1:6a:a9:d5:76:c2:76:
0f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A1:5B:C5:F6:5A:E7:A6:E3:65:CE:7A:34:3E:51:A5:CF:29:61:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/2deced11-ff81-3e5b-bcfa-9a3e47768c60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl
X509v3 Authority Key Identifier:
keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
sbgp-ipAddrBlock: critical
IPv4:
199.101.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:ce:ff:5c:a2:ef:f1:c9:55:f7:72:61:99:e0:72:7b:2e:2a:
5b:a4:dc:f2:fb:da:7d:05:71:20:99:c4:7e:88:9d:05:0b:89:
ea:2a:41:a5:fd:78:0e:9b:a8:dc:81:63:2c:d8:dd:91:c2:e2:
74:e2:3a:51:40:d5:32:3d:2d:c7:c6:57:33:d1:a5:38:1e:ec:
b4:49:ac:bf:c6:38:ec:61:c4:8e:11:b1:58:37:24:5f:05:6c:
34:b4:19:2d:ae:ec:d4:d4:c1:cd:45:54:ca:bd:76:5a:13:12:
35:6a:57:57:17:39:6c:27:68:31:cd:a6:b2:07:89:c8:9c:b0:
32:94:ef:97:2c:4f:d1:33:72:37:af:22:0e:a2:d1:cf:ab:4c:
df:f4:1e:53:66:7e:c7:11:20:af:be:fb:ec:9a:61:0d:5d:10:
cb:83:1f:78:42:ad:98:9a:6f:f5:f6:7d:1d:2b:47:a6:cf:5c:
03:06:83:35:fc:b0:db:ce:22:42:e0:e5:65:c2:79:4f:43:ef:
b8:8f:c7:48:60:5e:df:32:d8:18:dc:80:da:05:41:33:4e:6f:
80:02:84:7a:77:96:65:89:c8:9f:23:68:f7:e0:f1:79:32:5e:
2b:f0:9c:62:26:af:d1:33:67:e1:20:17:af:84:ce:6b:6f:ca:
f2:a8:9c:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhfmudMAZ2DTjC91IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjg3Yzg2OWEtZmQ5Yy00ZGI5LThkYWItNTRiNzM3MTAz
NTEzMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk
M2IyOTFiYjEtODIyYS00NDM0LWEwNTctY2UwMTE5ODVmMGM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6hfBZTYJ9Gh06dvR7SByEN5mqgdhC/Vd5ZT
Qqwy6RAIGD0HPTpss3BMnik2LC/TCC4QTjlKb+jQVK118ivG5rTYK2RJy4BSVgR6
mCjrbImVJco6OLv3Q3c386ZjvSx7jnaeGa0BePeM1SHhEwtBb0lXHVkMiTDc0a7B
yZju1QwBfadxfSDGAlWT/TOq4xMAUUacO7Q/Kkigq7s/HYrSNwLOZMSbIBSTkJqq
CNycIdAbrkf8h37O1olUP/KzX095XwDPEylApWp6o1CCzkm7jE+a/KcuzoFY3uoW
//iFQqUF++kEyWT6lxJUGVHv4eLNoZf7d0qtyfFqqdV2wnYPRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGShW8X2Wuem42XOejQ+UaXPKWGWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ODdj
ODY5YS1mZDljLTRkYjktOGRhYi01NGI3MzcxMDM1MTMvMmRlY2VkMTEtZmY4MS0z
ZTViLWJjZmEtOWEzZTQ3NzY4YzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjg3Yzg2OWEtZmQ5Yy00ZGI5LThk
YWItNTRiNzM3MTAzNTEzLzY4N2M4NjlhLWZkOWMtNGRiOS04ZGFiLTU0YjczNzEw
MzUxMy5jcmwwHwYDVR0jBBgwFoAU4uiNCUXNrgKVNNtusLIBOCL3Hl4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82ODdjODY5YS1mZDljLTRkYjktOGRhYi01NGI3
MzcxMDM1MTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2W/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADrO/1yi7/HJVfdyYZngcnsuKluk3PL72n0FcSCZxH6InQULieoqQaX9
eA6bqNyBYyzY3ZHC4nTiOlFA1TI9LcfGVzPRpTge7LRJrL/GOOxhxI4RsVg3JF8F
bDS0GS2u7NTUwc1FVMq9dloTEjVqV1cXOWwnaDHNprIHicicsDKU75csT9Ezcjev
Ig6i0c+rTN/0HlNmfscRIK++++yaYQ1dEMuDH3hCrZiab/X2fR0rR6bPXAMGgzX8
sNvOIkLg5WXCeU9D77iPx0hgXt8y2BjcgNoFQTNOb4AChHp3lmWJyJ8jaPfg8Xky
XivwnGImr9EzZ+EgF6+EzmtvyvKonGE=
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:37:02 2025 by rpki-client