Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/69684b64-0c9e-3e32-93a1-8e77d96c41b1.roa
File: 69684b64-0c9e-3e32-93a1-8e77d96c41b1.roa (raw, json)
Hash identifier: vP30h+E+hreGknoXcjslkKOlyuhfI87Ap09HG5HbXOA=
Subject key identifier: 6B:69:3C:FC:7A:7C:A4:8E:83:B9:E7:53:63:93:7B:0A:37:AD:4C:B0
Certificate issuer: /CN=c727dab7-c852-4d24-82ff-cf171b24f2f9
Certificate serial: 010D0C9F432858484EDACA80BE426321F2B3B5C0
Authority key identifier: 61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/69684b64-0c9e-3e32-93a1-8e77d96c41b1.roa
Signing time: Tue 24 Dec 2024 02:00:38 +0000
ROA not before: Tue 24 Dec 2024 02:00:38 +0000
ROA not after: Mon 24 Mar 2025 01:00:38 +0000
asID: 394161
IP address blocks: 199.43.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4e:da:ca:80:be:42:63:21:f2:b3:b5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c727dab7-c852-4d24-82ff-cf171b24f2f9
Validity
Not Before: Dec 24 02:00:38 2024 GMT
Not After : Mar 24 01:00:38 2025 GMT
Subject: CN=72680521-ad75-4d53-aa08-4faa88b65e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b9:1b:ef:e0:05:94:03:25:3a:ba:f1:e3:e8:
5c:d9:e8:a9:f5:16:66:d6:19:fa:98:62:29:32:5f:
99:fa:b4:55:a6:b0:d9:14:92:f9:fd:f6:6a:77:e1:
d6:45:4c:35:c0:5e:d6:e5:0f:d7:99:15:66:23:26:
76:18:f4:90:87:b5:e9:9d:28:c8:37:8e:62:81:78:
9d:89:f6:da:d8:5e:a0:ef:14:47:2d:48:75:68:67:
ff:0c:4d:de:60:09:12:5c:3b:f8:b6:9a:4c:f0:ed:
ef:5e:e1:00:f4:ff:77:fa:46:a2:d5:f9:c8:b7:9e:
31:3e:50:da:40:08:1d:26:b3:a3:b2:6d:07:08:63:
9d:7b:75:7c:09:ad:57:bf:2c:fb:31:26:ec:10:e5:
4e:3c:a0:fd:75:a1:4f:1f:d5:a0:4c:56:48:8a:4d:
b2:4a:97:5f:94:69:22:9d:40:6e:cf:e9:3b:3e:72:
e3:e4:ab:1f:b4:a5:45:ae:80:92:00:cb:d4:64:5b:
64:93:58:bc:44:e8:21:80:3f:79:e5:4d:be:42:7a:
bb:38:f4:8f:ea:e2:76:ec:fa:89:06:e9:f3:e4:50:
aa:36:f5:14:40:08:60:74:f7:34:70:2c:98:09:fe:
4f:e3:51:57:5c:d9:4f:c6:f6:ab:6a:15:54:b8:47:
9d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:69:3C:FC:7A:7C:A4:8E:83:B9:E7:53:63:93:7B:0A:37:AD:4C:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/69684b64-0c9e-3e32-93a1-8e77d96c41b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.crl
X509v3 Authority Key Identifier:
keyid:61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer
sbgp-ipAddrBlock: critical
IPv4:
199.43.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:2f:b5:76:de:32:5a:cf:57:b7:bf:3a:81:20:e5:51:20:06:
f2:0b:f7:5e:cb:09:d0:aa:c7:ee:fa:ed:86:17:6e:69:f7:cc:
8b:1d:47:b6:10:d2:42:bd:b4:0a:b1:7f:a2:d6:5f:93:a7:72:
54:f5:aa:47:27:92:36:35:70:df:a3:8e:c8:57:4e:02:26:03:
29:fb:1a:0a:8d:e4:fe:36:f8:4e:d2:21:95:49:13:05:98:79:
73:a5:95:9e:af:fd:2f:97:b4:39:95:db:f7:1e:2b:ea:04:02:
0c:03:bf:06:c8:18:b7:82:ea:84:6e:8a:4b:e1:23:78:a9:3b:
62:70:86:ba:ac:c7:35:7f:ec:03:e8:65:14:26:eb:49:8d:3b:
75:14:41:73:f5:ce:c1:7b:08:0e:71:dd:d6:ea:8b:40:21:91:
85:39:b9:b6:37:2a:72:de:bb:64:45:9b:d7:02:b5:da:e7:12:
ef:45:67:32:b9:7b:da:b5:1f:b5:55:ff:c7:e7:0d:d4:95:4f:
1d:92:0a:65:bb:72:76:9a:25:8c:8a:6b:57:c9:e4:26:c3:6b:
a7:12:fe:40:89:0b:62:66:cb:5e:8d:86:8c:f6:9e:d8:00:60:
d0:2e:4b:41:bf:f1:e9:af:71:f1:61:7b:36:c3:99:bf:46:00:
41:90:c1:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhO2sqAvkJjIfKztcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzcyN2RhYjctYzg1Mi00ZDI0LTgyZmYtY2YxNzFiMjRm
MmY5MB4XDTI0MTIyNDAyMDAzOFoXDTI1MDMyNDAxMDAzOFowLzEtMCsGA1UEAxMk
NzI2ODA1MjEtYWQ3NS00ZDUzLWFhMDgtNGZhYTg4YjY1ZTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrkb7+AFlAMlOrrx4+hc2eip9RZm1hn6mGIp
Ml+Z+rRVprDZFJL5/fZqd+HWRUw1wF7W5Q/XmRVmIyZ2GPSQh7XpnSjIN45igXid
ifba2F6g7xRHLUh1aGf/DE3eYAkSXDv4tppM8O3vXuEA9P93+kai1fnIt54xPlDa
QAgdJrOjsm0HCGOde3V8Ca1Xvyz7MSbsEOVOPKD9daFPH9WgTFZIik2ySpdflGki
nUBuz+k7PnLj5KsftKVFroCSAMvUZFtkk1i8ROghgD955U2+Qnq7OPSP6uJ27PqJ
Bunz5FCqNvUUQAhgdPc0cCyYCf5P41FXXNlPxvarahVUuEed9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGtpPPx6fKSOg7nnU2OTewo3rUywMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jNzI3
ZGFiNy1jODUyLTRkMjQtODJmZi1jZjE3MWIyNGYyZjkvNjk2ODRiNjQtMGM5ZS0z
ZTMyLTkzYTEtOGU3N2Q5NmM0MWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzcyN2RhYjctYzg1Mi00ZDI0LTgy
ZmYtY2YxNzFiMjRmMmY5L2M3MjdkYWI3LWM4NTItNGQyNC04MmZmLWNmMTcxYjI0
ZjJmOS5jcmwwHwYDVR0jBBgwFoAUYR9aXxdV/dXQo04gjdSMzB2vaRowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jNzI3ZGFiNy1jODUyLTRkMjQtODJmZi1jZjE3
MWIyNGYyZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyv/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABIvtXbeMlrPV7e/OoEg5VEgBvIL917LCdCqx+767YYXbmn3zIsdR7YQ
0kK9tAqxf6LWX5OnclT1qkcnkjY1cN+jjshXTgImAyn7GgqN5P42+E7SIZVJEwWY
eXOllZ6v/S+XtDmV2/ceK+oEAgwDvwbIGLeC6oRuikvhI3ipO2JwhrqsxzV/7APo
ZRQm60mNO3UUQXP1zsF7CA5x3dbqi0AhkYU5ubY3KnLeu2RFm9cCtdrnEu9FZzK5
e9q1H7VV/8fnDdSVTx2SCmW7cnaaJYyKa1fJ5CbDa6cS/kCJC2Jmy16Nhoz2ntgA
YNAuS0G/8emvcfFhezbDmb9GAEGQwWc=
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:09:58 2025 by rpki-client