Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58f33d9-1d10-4d07-ae57-7b91ec651785/8539e9b4-3185-3698-92b5-64f6331db01c.roa
File: 8539e9b4-3185-3698-92b5-64f6331db01c.roa (raw, json)
Hash identifier: q8o1SL+K9e/4z7rgZ4W2sq8JYLdvbQPE38NYOq12NMw=
Subject key identifier: F6:55:B2:01:F2:85:E4:2F:CF:C1:06:26:BC:CE:F6:43:77:AB:49:E5
Certificate issuer: /CN=b58f33d9-1d10-4d07-ae57-7b91ec651785
Certificate serial: 010D0C9F432858481C9A7B59BE886CEAB9DBE100
Authority key identifier: D6:7A:07:6B:47:B5:C4:7A:39:47:A7:AE:35:1D:AD:67:9D:7A:F3:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58f33d9-1d10-4d07-ae57-7b91ec651785.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58f33d9-1d10-4d07-ae57-7b91ec651785/8539e9b4-3185-3698-92b5-64f6331db01c.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 14618
IP address blocks: 199.184.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:7b:59:be:88:6c:ea:b9:db:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b58f33d9-1d10-4d07-ae57-7b91ec651785
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=5b8724a2-4deb-4054-9158-123390d07110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ce:a0:18:50:55:21:63:41:67:4c:e2:f8:fb:
46:08:e8:bc:41:d4:4d:c8:b8:32:b7:3b:d1:f4:99:
fe:90:86:64:50:7c:b4:f7:9a:06:fe:a2:75:65:83:
7d:6a:11:9e:e2:10:4c:a5:2c:b0:7d:f3:31:81:24:
83:9e:ea:3a:d6:d9:5c:3e:b0:3e:85:7e:b9:fb:a7:
b8:d4:e8:88:f2:11:69:2a:d8:94:89:7d:eb:b4:93:
db:27:c1:c8:eb:41:2b:d1:16:f3:91:63:37:16:bc:
16:a9:82:bd:d5:b8:5c:9b:c3:77:6a:35:a4:5b:d7:
b4:d5:b7:e8:0e:d2:46:31:a8:63:9d:5d:89:58:3e:
29:2c:fb:10:b1:dd:52:51:e0:f3:73:50:a7:86:ea:
0d:16:97:19:6c:d2:f2:6b:b4:85:de:d1:2e:73:ab:
70:c9:0b:79:49:6d:e6:ec:ea:23:2c:f3:71:5e:6f:
1c:93:18:b3:fe:0f:ed:92:0b:b4:8f:68:8f:15:70:
0f:79:e8:63:a6:8f:2c:e4:f3:74:bc:b6:e5:1c:7b:
88:f0:8c:90:a2:c0:d3:9c:e4:9b:0a:bc:e6:3c:bb:
54:ad:63:a1:9a:37:c9:8f:c2:81:c1:b6:86:19:59:
a9:03:35:53:9e:e9:1e:e0:ef:fd:d7:53:d7:75:e8:
47:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:55:B2:01:F2:85:E4:2F:CF:C1:06:26:BC:CE:F6:43:77:AB:49:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58f33d9-1d10-4d07-ae57-7b91ec651785/8539e9b4-3185-3698-92b5-64f6331db01c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58f33d9-1d10-4d07-ae57-7b91ec651785/b58f33d9-1d10-4d07-ae57-7b91ec651785.crl
X509v3 Authority Key Identifier:
keyid:D6:7A:07:6B:47:B5:C4:7A:39:47:A7:AE:35:1D:AD:67:9D:7A:F3:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58f33d9-1d10-4d07-ae57-7b91ec651785.cer
sbgp-ipAddrBlock: critical
IPv4:
199.184.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:6a:41:12:d1:42:8e:c4:6c:b7:42:56:7e:f5:60:26:31:3e:
ce:ed:1e:7c:a9:0f:05:6d:ec:b5:b1:5d:44:6d:80:1f:d5:75:
36:11:dd:6a:d6:d4:4a:6a:ce:f0:b1:d4:7c:c0:be:0d:f5:30:
7a:e2:8a:ee:2c:a9:d9:a6:74:83:48:a6:e6:3f:8d:c6:1f:85:
04:09:fb:4e:40:00:a1:72:45:11:6e:2a:d9:81:27:1e:03:e0:
ab:2f:08:a9:05:27:cf:72:46:e1:07:68:d1:23:88:a9:56:3d:
54:8b:34:b9:e3:1a:b5:f3:de:cb:66:f4:e7:ea:0a:5c:cb:2b:
1c:84:8b:7c:05:cf:77:67:00:a1:18:40:c3:46:64:77:80:2b:
a3:45:8c:73:d7:dd:db:0f:4d:20:7f:29:73:09:92:2a:e0:46:
cf:3a:90:aa:6b:12:2a:4f:4a:a2:23:cb:c7:25:a2:8c:59:03:
48:12:3e:df:07:fc:31:2c:44:77:da:8d:2c:b3:63:1b:1f:f0:
f4:4d:bd:1a:e4:61:a3:c7:fd:73:6c:57:43:fc:20:2e:35:b1:
a5:46:c6:67:e3:d4:84:b6:05:5a:68:ef:71:07:18:37:6c:20:
4a:2f:e1:21:7f:5c:f8:61:74:a4:b1:17:26:be:48:f1:dc:0b:
0e:75:0e:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgcmntZvohs6rnb4QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjU4ZjMzZDktMWQxMC00ZDA3LWFlNTctN2I5MWVjNjUx
Nzg1MB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk
NWI4NzI0YTItNGRlYi00MDU0LTkxNTgtMTIzMzkwZDA3MTEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs6gGFBVIWNBZ0zi+PtGCOi8QdRNyLgytzvR
9Jn+kIZkUHy095oG/qJ1ZYN9ahGe4hBMpSywffMxgSSDnuo61tlcPrA+hX65+6e4
1OiI8hFpKtiUiX3rtJPbJ8HI60Er0RbzkWM3FrwWqYK91bhcm8N3ajWkW9e01bfo
DtJGMahjnV2JWD4pLPsQsd1SUeDzc1CnhuoNFpcZbNLya7SF3tEuc6twyQt5SW3m
7OojLPNxXm8ckxiz/g/tkgu0j2iPFXAPeehjpo8s5PN0vLblHHuI8IyQosDTnOSb
CrzmPLtUrWOhmjfJj8KBwbaGGVmpAzVTnuke4O/911PXdehHcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPZVsgHyheQvz8EGJrzO9kN3q0nlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iNThm
MzNkOS0xZDEwLTRkMDctYWU1Ny03YjkxZWM2NTE3ODUvODUzOWU5YjQtMzE4NS0z
Njk4LTkyYjUtNjRmNjMzMWRiMDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjU4ZjMzZDktMWQxMC00ZDA3LWFl
NTctN2I5MWVjNjUxNzg1L2I1OGYzM2Q5LTFkMTAtNGQwNy1hZTU3LTdiOTFlYzY1
MTc4NS5jcmwwHwYDVR0jBBgwFoAU1noHa0e1xHo5R6euNR2tZ51687owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iNThmMzNkOS0xZDEwLTRkMDctYWU1Ny03Yjkx
ZWM2NTE3ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7jPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAINqQRLRQo7EbLdCVn71YCYxPs7tHnypDwVt7LWxXURtgB/VdTYR3WrW
1EpqzvCx1HzAvg31MHriiu4sqdmmdINIpuY/jcYfhQQJ+05AAKFyRRFuKtmBJx4D
4KsvCKkFJ89yRuEHaNEjiKlWPVSLNLnjGrXz3stm9OfqClzLKxyEi3wFz3dnAKEY
QMNGZHeAK6NFjHPX3dsPTSB/KXMJkirgRs86kKprEipPSqIjy8clooxZA0gSPt8H
/DEsRHfajSyzYxsf8PRNvRrkYaPH/XNsV0P8IC41saVGxmfj1IS2BVpo73EHGDds
IEov4SF/XPhhdKSxFya+SPHcCw51DmM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:40 2025 by rpki-client