Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4849f9a8-bbec-3693-84c8-f045aee6d2bf.roa
File: 4849f9a8-bbec-3693-84c8-f045aee6d2bf.roa (raw, json)
Hash identifier: 0MNIfAHghVXzCgvphgLbrM+vYpVLdzXWfN+rJHuzIQs=
Subject key identifier: 44:D9:8C:A6:90:68:3E:C8:83:DE:AE:C5:1D:BC:98:E3:E4:D0:76:D3
Certificate issuer: /CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061
Certificate serial: 010D0C9F43285848451591D556F50E6D3E304280
Authority key identifier: 21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4849f9a8-bbec-3693-84c8-f045aee6d2bf.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 14618
IP address blocks: 198.175.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:91:d5:56:f5:0e:6d:3e:30:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=dc6f7f0b-f103-48f2-a202-dbdb61a19bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d0:18:43:14:60:21:e7:c8:c3:b5:e6:9b:1e:
1d:37:f3:7a:dc:c0:b8:52:0a:a6:76:8b:04:38:de:
77:1e:46:92:6d:80:56:61:4a:1f:3b:82:a0:42:86:
cb:25:a4:cc:29:1a:9a:6c:15:8f:5a:b0:7b:15:c3:
3d:ac:eb:32:75:84:d4:55:59:8d:59:ae:4f:74:c3:
2e:8b:02:85:3e:16:99:10:96:67:23:3e:70:01:89:
6d:f6:a6:fa:ab:74:7c:af:8f:ea:29:58:f0:47:42:
16:17:0d:26:7d:b4:04:ca:8b:85:45:95:f5:79:95:
b4:1a:af:b7:06:cd:5c:05:0e:30:75:00:0e:92:da:
b7:51:52:6e:fe:17:45:57:68:53:ac:95:a5:b0:9d:
fd:a3:cd:70:b9:e5:43:93:58:2a:ff:fc:50:cf:7b:
df:14:c8:fe:cb:0f:76:80:ce:52:f7:a1:93:53:3c:
91:1f:8c:98:ab:78:fd:ad:dd:f7:da:b0:fd:df:a4:
6b:0d:8b:ec:16:22:d2:a1:8c:28:fe:2d:5e:03:10:
25:a5:77:3f:b2:4e:aa:b3:1b:e3:6c:45:23:e8:64:
ff:d6:7c:31:dc:b8:f1:cb:63:33:40:88:af:87:99:
83:d0:d0:71:c0:e0:9d:f7:4b:b4:93:6b:b5:e7:40:
52:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D9:8C:A6:90:68:3E:C8:83:DE:AE:C5:1D:BC:98:E3:E4:D0:76:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4849f9a8-bbec-3693-84c8-f045aee6d2bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl
X509v3 Authority Key Identifier:
keyid:21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer
sbgp-ipAddrBlock: critical
IPv4:
198.175.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:23:10:49:e7:1b:68:ab:6b:c6:3a:f5:65:55:1e:eb:6c:34:
c6:a2:a2:bf:eb:9f:d9:e7:b6:18:c1:1b:69:75:7d:04:4d:2f:
9c:24:7e:9a:f6:de:1c:14:e3:68:31:c9:52:fd:b3:b6:56:ad:
b6:d0:24:d2:0e:3a:06:67:66:26:12:2d:c2:fe:16:a3:cb:e4:
a7:53:0d:a8:e1:0d:e5:2a:30:ff:1a:2a:c3:e4:cc:dd:38:05:
94:e0:4e:f7:80:23:46:ab:39:bd:61:c3:f5:a1:12:7c:9a:e6:
23:60:bd:8d:b3:7b:26:fb:7d:23:6e:9f:55:2d:b6:56:fb:21:
0b:fa:6d:c0:d5:18:a8:27:b9:f8:0f:dc:16:32:16:17:ef:2e:
28:73:2d:d1:5b:84:a8:56:b2:cc:69:b3:4e:5a:74:67:7d:75:
d8:46:a5:be:bd:de:34:a2:ae:f5:6f:43:28:54:dd:a6:ca:20:
7f:3e:14:a0:f1:40:0f:e1:78:5e:90:6a:76:3a:69:88:73:11:
2f:3b:2e:65:47:4f:e0:c6:42:99:44:b8:70:cc:4e:8c:03:42:
74:22:c9:09:6d:3f:4b:a7:ba:7e:c5:23:9d:de:9f:eb:4e:fe:
13:c9:6a:00:58:fd:b7:d5:db:ac:4c:25:1b:99:83:59:1c:4a:
3d:19:3d:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhFFZHVVvUObT4wQoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU4N2MwYjMtMzgzYS00MzhjLWFhNDUtMWU1ZGYwZDBl
MDYxMB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk
ZGM2ZjdmMGItZjEwMy00OGYyLWEyMDItZGJkYjYxYTE5YmM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NAYQxRgIefIw7Xmmx4dN/N63MC4UgqmdosE
ON53HkaSbYBWYUofO4KgQobLJaTMKRqabBWPWrB7FcM9rOsydYTUVVmNWa5PdMMu
iwKFPhaZEJZnIz5wAYlt9qb6q3R8r4/qKVjwR0IWFw0mfbQEyouFRZX1eZW0Gq+3
Bs1cBQ4wdQAOktq3UVJu/hdFV2hTrJWlsJ39o81wueVDk1gq//xQz3vfFMj+yw92
gM5S96GTUzyRH4yYq3j9rd332rD936RrDYvsFiLSoYwo/i1eAxAlpXc/sk6qsxvj
bEUj6GT/1nwx3Ljxy2MzQIivh5mD0NBxwOCd90u0k2u150BS7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFETZjKaQaD7Ig96uxR28mOPk0HbTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3
YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVkZjBkMGUwNjEvNDg0OWY5YTgtYmJlYy0z
NjkzLTg0YzgtZjA0NWFlZTZkMmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGU4N2MwYjMtMzgzYS00MzhjLWFh
NDUtMWU1ZGYwZDBlMDYxLzRlODdjMGIzLTM4M2EtNDM4Yy1hYTQ1LTFlNWRmMGQw
ZTA2MS5jcmwwHwYDVR0jBBgwFoAUIbRtv8sZKo0pVPBrIIKDwhIbf9kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVk
ZjBkMGUwNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxq86MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC8jEEnnG2ira8Y69WVVHutsNMaior/rn9nnthjBG2l1fQRNL5wkfpr2
3hwU42gxyVL9s7ZWrbbQJNIOOgZnZiYSLcL+FqPL5KdTDajhDeUqMP8aKsPkzN04
BZTgTveAI0arOb1hw/WhEnya5iNgvY2zeyb7fSNun1Uttlb7IQv6bcDVGKgnufgP
3BYyFhfvLihzLdFbhKhWssxps05adGd9ddhGpb693jSirvVvQyhU3abKIH8+FKDx
QA/heF6QanY6aYhzES87LmVHT+DGQplEuHDMTowDQnQiyQltP0unun7FI53en+tO
/hPJagBY/bfV26xMJRuZg1kcSj0ZPdU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:23:05 2025 by rpki-client