Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/fa68b0de-950c-3c2b-93c2-0c01d381801f.roa
File: fa68b0de-950c-3c2b-93c2-0c01d381801f.roa (raw, json)
Hash identifier: 4+6d735DXYOVb8cJ69LDwZJz9EsTJ3ahMUJjdqipkPo=
Subject key identifier: 78:1B:69:C7:66:57:1C:07:EE:04:7E:3A:EC:5B:39:3D:8F:B4:A7:B3
Certificate issuer: /CN=1f5fe3e7-3c15-4742-a824-8c933974ab55
Certificate serial: 010D0C9F43285848222FD80AD6857B5268C2BC80
Authority key identifier: 04:16:CB:E5:BD:0C:1A:59:30:EB:0E:72:5C:7A:4E:81:7C:0E:C5:F5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/fa68b0de-950c-3c2b-93c2-0c01d381801f.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 16509
IP address blocks: 198.99.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:d8:0a:d6:85:7b:52:68:c2:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f5fe3e7-3c15-4742-a824-8c933974ab55
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=f9e09e22-6184-4da3-89e1-baabe8d8a3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:de:cc:9b:61:ea:38:69:53:2f:14:96:5e:d9:
c8:6b:bb:00:15:95:d3:ff:e6:98:37:c8:88:12:ea:
d1:08:a6:48:0c:1c:a2:e3:b9:5b:7a:18:d8:bb:ff:
64:b8:78:fd:83:21:53:92:26:3d:07:36:7c:a8:1c:
9e:19:eb:74:b2:6f:00:d2:ec:a0:b9:26:71:51:c9:
0b:94:f6:d2:53:a7:a5:14:2c:58:48:55:c3:e4:37:
85:1b:aa:5c:7c:5f:d6:5f:90:cc:01:bd:aa:cc:bb:
ab:fb:1e:05:0b:e2:ed:79:5f:cd:ce:cc:e7:2b:54:
55:3b:05:4a:33:4d:6b:85:2a:aa:4f:81:f1:bc:fa:
fc:1b:75:56:30:69:11:91:07:09:42:1b:a5:dc:3a:
fa:fa:04:8c:a5:d2:fd:c9:30:31:ee:89:81:1b:65:
09:e2:d3:cf:f6:ae:ab:6a:cc:03:f8:bf:df:c0:76:
a1:2b:d9:05:9d:44:1a:4e:52:eb:0b:92:49:fb:5d:
2c:4a:c5:36:cc:39:2f:bd:8e:81:6a:d2:7b:d8:13:
74:28:5d:65:37:8a:f9:a0:c0:bf:17:90:de:21:04:
88:d8:17:62:b4:a4:40:32:b8:e1:b4:08:3a:70:34:
20:50:79:06:46:a7:9e:57:a1:a6:0d:7d:b2:f7:55:
e6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1B:69:C7:66:57:1C:07:EE:04:7E:3A:EC:5B:39:3D:8F:B4:A7:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/fa68b0de-950c-3c2b-93c2-0c01d381801f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/1f5fe3e7-3c15-4742-a824-8c933974ab55.crl
X509v3 Authority Key Identifier:
keyid:04:16:CB:E5:BD:0C:1A:59:30:EB:0E:72:5C:7A:4E:81:7C:0E:C5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:23:d4:93:0e:6a:2a:a6:d4:d2:18:f8:6e:b4:2c:74:ba:8c:
eb:7f:d8:37:3b:4f:d7:20:f8:87:ba:6c:af:9d:cd:4c:fb:7f:
ba:73:1e:0a:99:30:08:dd:26:3a:bb:63:60:4a:cb:63:c5:e4:
47:48:08:c7:2c:4e:99:58:d0:6e:37:02:c5:8a:73:0a:e6:8c:
75:5b:04:35:b5:6d:a4:a0:52:3f:2f:d4:59:a9:b4:c0:b5:01:
26:e6:28:4b:fb:6a:c9:93:53:8f:af:2c:8e:f0:11:2e:b1:9d:
f7:a9:02:89:70:64:e2:ce:69:84:9d:b9:57:b2:8b:0f:92:e0:
e4:13:ae:f1:6f:9a:66:37:98:7f:69:fd:df:72:50:98:88:d8:
0b:ed:4a:3d:46:ac:99:61:6e:86:f4:56:a3:cb:33:63:ad:f0:
8c:1c:31:8b:85:08:7f:f9:51:60:0f:11:69:c5:cd:db:7b:7c:
73:15:c4:1c:2b:a8:42:f8:f5:e9:73:51:0f:58:ff:2b:4b:3c:
9a:e2:5d:eb:f5:43:eb:9b:7d:47:1c:8e:1c:58:85:28:f7:b7:
7c:63:29:9f:a8:85:65:56:f7:26:87:db:1e:9b:46:15:cd:a5:
bd:5b:ad:e8:1f:2f:aa:56:f9:ed:72:54:75:dd:9c:19:50:32:
ab:23:34:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgiL9gK1oV7UmjCvIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWY1ZmUzZTctM2MxNS00NzQyLWE4MjQtOGM5MzM5NzRh
YjU1MB4XDTI0MTIwODAyMDAzOVoXDTI1MDMwODAyMDAzOVowLzEtMCsGA1UEAxMk
ZjllMDllMjItNjE4NC00ZGEzLTg5ZTEtYmFhYmU4ZDhhM2I5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3t7Mm2HqOGlTLxSWXtnIa7sAFZXT/+aYN8iI
EurRCKZIDByi47lbehjYu/9kuHj9gyFTkiY9BzZ8qByeGet0sm8A0uyguSZxUckL
lPbSU6elFCxYSFXD5DeFG6pcfF/WX5DMAb2qzLur+x4FC+LteV/NzsznK1RVOwVK
M01rhSqqT4HxvPr8G3VWMGkRkQcJQhul3Dr6+gSMpdL9yTAx7omBG2UJ4tPP9q6r
aswD+L/fwHahK9kFnUQaTlLrC5JJ+10sSsU2zDkvvY6BatJ72BN0KF1lN4r5oMC/
F5DeIQSI2BditKRAMrjhtAg6cDQgUHkGRqeeV6GmDX2y91XmawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHgbacdmVxwH7gR+OuxbOT2PtKezMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZjVm
ZTNlNy0zYzE1LTQ3NDItYTgyNC04YzkzMzk3NGFiNTUvZmE2OGIwZGUtOTUwYy0z
YzJiLTkzYzItMGMwMWQzODE4MDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWY1ZmUzZTctM2MxNS00NzQyLWE4
MjQtOGM5MzM5NzRhYjU1LzFmNWZlM2U3LTNjMTUtNDc0Mi1hODI0LThjOTMzOTc0
YWI1NS5jcmwwHwYDVR0jBBgwFoAUBBbL5b0MGlkw6w5yXHpOgXwOxfUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xZjVmZTNlNy0zYzE1LTQ3NDItYTgyNC04Yzkz
Mzk3NGFiNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmN7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJoj1JMOaiqm1NIY+G60LHS6jOt/2Dc7T9cg+Ie6bK+dzUz7f7pzHgqZ
MAjdJjq7Y2BKy2PF5EdICMcsTplY0G43AsWKcwrmjHVbBDW1baSgUj8v1FmptMC1
ASbmKEv7asmTU4+vLI7wES6xnfepAolwZOLOaYSduVeyiw+S4OQTrvFvmmY3mH9p
/d9yUJiI2AvtSj1GrJlhbob0VqPLM2Ot8IwcMYuFCH/5UWAPEWnFzdt7fHMVxBwr
qEL49elzUQ9Y/ytLPJriXev1Q+ubfUccjhxYhSj3t3xjKZ+ohWVW9yaH2x6bRhXN
pb1bregfL6pW+e1yVHXdnBlQMqsjNGE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:34:46 2025 by rpki-client