Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/b9f42ee3-fbfd-327c-aa7b-b8de90e5b75d.roa
File: b9f42ee3-fbfd-327c-aa7b-b8de90e5b75d.roa (raw, json)
Hash identifier: zFhFtVGGRotCNXmXUS9Du7sJhtSjgE19dGJxvAiFxFc=
Subject key identifier: 95:19:B9:91:6A:1F:6D:90:32:C2:5B:ED:DE:0D:31:6D:C2:22:D6:50
Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial: 010D0C9F43285848573AD5CE1F230BF930BC4F00
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/b9f42ee3-fbfd-327c-aa7b-b8de90e5b75d.roa
Signing time: Fri 27 Dec 2024 02:00:40 +0000
ROA not before: Fri 27 Dec 2024 02:00:40 +0000
ROA not after: Thu 27 Mar 2025 01:00:40 +0000
asID: 2559
IP address blocks: 198.217.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:57:3a:d5:ce:1f:23:0b:f9:30:bc:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Validity
Not Before: Dec 27 02:00:40 2024 GMT
Not After : Mar 27 01:00:40 2025 GMT
Subject: CN=8cb39129-0b39-4ec8-ac4d-1a075f79209f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3b:4d:0c:12:d3:a7:93:c6:0e:54:f8:86:38:
0e:53:a0:4b:f9:61:51:5d:72:7d:34:0d:c8:5f:12:
7a:de:df:f8:2d:73:34:37:11:3b:57:e5:40:79:f6:
f9:40:b9:94:c1:4c:35:7f:6a:ac:55:f3:81:18:2c:
ff:b6:d3:7a:05:f2:52:5f:82:aa:8c:00:be:9e:cc:
3d:70:d0:17:15:dc:a0:01:3d:46:d4:3a:f4:e5:18:
34:ae:34:04:61:d2:df:97:88:ed:0e:ab:e4:36:7e:
b3:23:fd:45:af:31:28:da:ae:ba:af:8e:b1:53:16:
81:55:88:69:d7:e1:83:cc:72:ce:03:bd:3e:a1:3f:
e0:24:59:95:ec:d3:ef:f4:2b:95:34:79:4e:5b:13:
09:0c:f5:43:ff:17:bd:79:1a:20:03:27:48:36:c6:
34:f2:f2:79:0a:a6:ac:62:83:4b:67:88:d7:0e:31:
47:10:9b:88:c9:49:8a:10:ff:fd:e6:45:99:e5:5c:
a1:24:70:1e:7b:5a:be:58:61:7b:6a:33:4f:d6:b3:
59:86:6c:53:6f:33:53:97:e1:87:3f:d6:a6:b8:87:
cf:b8:eb:54:29:14:9a:22:35:95:67:73:c0:b3:2a:
72:32:c5:bd:c5:fc:7b:67:9e:bd:ad:b6:a8:cf:a7:
d2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:19:B9:91:6A:1F:6D:90:32:C2:5B:ED:DE:0D:31:6D:C2:22:D6:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/b9f42ee3-fbfd-327c-aa7b-b8de90e5b75d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
X509v3 Authority Key Identifier:
keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
sbgp-ipAddrBlock: critical
IPv4:
198.217.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:aa:d4:22:50:28:89:e6:c6:f5:bb:7b:af:9e:40:de:2b:86:
fc:21:a8:2d:f0:8c:e9:43:e0:3d:67:79:0b:9d:6f:50:0a:b1:
ce:32:d0:82:f0:be:db:1b:1c:98:b5:b1:d5:57:b8:da:aa:00:
95:03:ae:36:b6:1a:ee:be:97:0c:d1:ed:ea:ba:c2:12:0b:98:
d3:0f:1a:1d:d6:26:9a:3e:6b:f8:e9:5b:65:19:85:22:24:61:
b1:b0:eb:13:79:9d:ac:78:5f:4a:6f:20:98:04:96:ab:ac:b0:
28:13:53:11:46:05:63:09:c5:ce:09:a1:44:9d:fd:ac:58:77:
b1:58:2f:f3:c5:58:e7:d7:1c:84:2b:c0:8e:e1:1a:c7:e6:18:
8c:c9:5c:df:6e:ef:65:40:a3:61:42:48:93:6f:89:9d:68:c4:
0a:09:44:32:71:c0:f5:5e:a1:0a:1d:95:57:e8:e9:a5:57:9b:
0b:ee:61:29:77:df:a3:7b:b4:a1:1b:69:a4:1b:28:ed:45:54:
17:1a:07:46:35:24:b7:fc:f4:34:9c:5c:5c:46:95:59:9f:91:
a1:d6:e7:7b:59:32:75:85:ad:ac:e8:4d:ba:e5:b0:3f:22:59:
9a:58:bb:49:04:8d:29:70:ae:d3:01:92:30:b6:f3:f1:59:2d:
da:f5:e1:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhXOtXOHyML+TC8TwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx
ODQyMB4XDTI0MTIyNzAyMDA0MFoXDTI1MDMyNzAxMDA0MFowLzEtMCsGA1UEAxMk
OGNiMzkxMjktMGIzOS00ZWM4LWFjNGQtMWEwNzVmNzkyMDlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTtNDBLTp5PGDlT4hjgOU6BL+WFRXXJ9NA3I
XxJ63t/4LXM0NxE7V+VAefb5QLmUwUw1f2qsVfOBGCz/ttN6BfJSX4KqjAC+nsw9
cNAXFdygAT1G1Dr05Rg0rjQEYdLfl4jtDqvkNn6zI/1FrzEo2q66r46xUxaBVYhp
1+GDzHLOA70+oT/gJFmV7NPv9CuVNHlOWxMJDPVD/xe9eRogAydINsY08vJ5Cqas
YoNLZ4jXDjFHEJuIyUmKEP/95kWZ5VyhJHAee1q+WGF7ajNP1rNZhmxTbzNTl+GH
P9amuIfPuOtUKRSaIjWVZ3PAsypyMsW9xfx7Z569rbaoz6fSiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJUZuZFqH22QMsJb7d4NMW3CItZQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2
NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvYjlmNDJlZTMtZmJmZC0z
MjdjLWFhN2ItYjhkZTkwZTViNzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1
ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1
MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl
NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxtniMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIOq1CJQKInmxvW7e6+eQN4rhvwhqC3wjOlD4D1neQudb1AKsc4y0ILw
vtsbHJi1sdVXuNqqAJUDrja2Gu6+lwzR7eq6whILmNMPGh3WJpo+a/jpW2UZhSIk
YbGw6xN5nax4X0pvIJgElqussCgTUxFGBWMJxc4JoUSd/axYd7FYL/PFWOfXHIQr
wI7hGsfmGIzJXN9u72VAo2FCSJNviZ1oxAoJRDJxwPVeoQodlVfo6aVXmwvuYSl3
36N7tKEbaaQbKO1FVBcaB0Y1JLf89DScXFxGlVmfkaHW53tZMnWFrazoTbrlsD8i
WZpYu0kEjSlwrtMBkjC28/FZLdr14bg=
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:47:48 2025 by rpki-client