Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de/ce91baa4-4505-349d-a0fb-18653fe49913.roa
File: ce91baa4-4505-349d-a0fb-18653fe49913.roa (raw, json)
Hash identifier: kYVStMhpcx+8VyqLrrfL9OJu+iPmdVXVxMGaOth4PZs=
Subject key identifier: D1:6C:5E:58:5E:0F:25:37:75:8C:70:4B:D9:96:8E:2A:A5:8C:B6:26
Certificate issuer: /CN=da839ff9-2f32-4c6b-ad01-c0b5bda9b0de
Certificate serial: 010D0C9F43285847F84F7983C11409F210FB2C80
Authority key identifier: C6:C9:37:5C:37:E0:05:0F:93:5E:4B:9B:61:92:67:4D:EA:FD:75:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de/ce91baa4-4505-349d-a0fb-18653fe49913.roa
Signing time: Sat 23 Nov 2024 02:00:28 +0000
ROA not before: Sat 23 Nov 2024 02:00:28 +0000
ROA not after: Fri 21 Feb 2025 02:00:28 +0000
asID: 8075
IP address blocks: 199.88.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f8:4f:79:83:c1:14:09:f2:10:fb:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da839ff9-2f32-4c6b-ad01-c0b5bda9b0de
Validity
Not Before: Nov 23 02:00:28 2024 GMT
Not After : Feb 21 02:00:28 2025 GMT
Subject: CN=c8d0914b-d1dd-40cd-abf5-cd4ea7d0e67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c3:eb:50:df:76:39:a9:47:b0:c9:4e:6b:d0:
18:e6:12:1e:d6:04:bd:83:13:8e:04:99:c2:33:58:
26:86:c1:d8:4b:16:f9:9d:f5:69:68:0a:c1:d8:04:
c1:13:cc:37:c5:39:31:5f:3a:57:c2:88:a5:53:d7:
41:6f:a5:2d:37:6d:d7:c2:f3:2f:41:91:74:b5:41:
b9:c5:ad:75:11:0b:22:0a:4d:23:08:06:0b:ab:d2:
78:d3:78:62:31:cc:48:7b:33:5f:42:93:25:95:6a:
e7:95:45:20:fb:63:d0:fb:1a:ac:6e:39:3c:18:83:
3e:5a:75:c2:db:f8:69:38:b5:b0:e3:34:75:6c:33:
4d:3c:23:fe:d5:f4:76:1f:a0:bb:02:1c:13:fc:03:
5c:81:a0:25:18:54:30:c7:2e:ac:b9:86:4a:01:82:
c1:54:f5:cc:0f:f9:a2:79:ef:59:a5:6c:16:62:b9:
4a:50:79:df:72:41:ec:0c:cb:ad:6b:ec:89:b2:b7:
d1:8e:2d:81:69:cb:45:fd:11:80:ff:48:61:66:da:
ab:e4:25:e9:05:83:40:77:97:2c:97:47:6f:6c:30:
77:b3:e3:9c:60:bf:71:ab:b5:d9:75:a6:d9:2a:cc:
0b:96:a5:e5:c8:4f:ef:bb:cc:eb:51:b5:40:ea:33:
d3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6C:5E:58:5E:0F:25:37:75:8C:70:4B:D9:96:8E:2A:A5:8C:B6:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de/ce91baa4-4505-349d-a0fb-18653fe49913.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.crl
X509v3 Authority Key Identifier:
keyid:C6:C9:37:5C:37:E0:05:0F:93:5E:4B:9B:61:92:67:4D:EA:FD:75:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.cer
sbgp-ipAddrBlock: critical
IPv4:
199.88.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:14:35:4a:c5:a4:75:0b:28:a9:2b:a9:4d:e4:95:67:b5:be:
38:14:36:1c:ce:3f:7a:83:d0:b7:03:c9:3e:ec:e8:37:f2:bc:
d1:17:2b:71:06:37:90:37:45:ff:9e:c3:4e:81:a9:09:66:87:
d1:09:34:3f:25:5a:65:34:e7:5f:db:e6:29:32:39:ca:d7:72:
18:ab:19:a6:d0:12:2c:99:e5:91:db:a0:94:63:83:c3:4c:bd:
b2:e9:9b:87:d7:86:57:c4:0e:ce:8d:d4:db:08:3c:da:d7:38:
ac:50:17:6b:ae:c4:63:4d:09:d6:1c:25:15:72:4a:36:d5:36:
fc:98:51:49:60:f3:df:3d:a2:75:59:95:80:49:fb:42:21:d9:
c1:81:ac:ce:6d:dc:38:da:cd:72:ba:ce:c7:6f:a4:2d:6e:2d:
d5:b8:de:f2:d3:35:96:3c:ee:89:23:46:49:a0:c7:44:1a:18:
34:89:37:8b:ad:9c:81:f9:84:65:36:1d:19:f2:52:81:f4:de:
e1:1d:d5:70:11:57:ae:83:93:5d:ab:cf:0e:22:17:ae:a8:b0:
45:0d:37:6a:dd:e8:54:99:4d:95:d1:e8:6c:ca:a8:02:e1:a7:
bb:97:e1:d7:e9:1a:eb:e6:4a:fc:d2:fb:e0:03:f3:f0:90:56:
31:7a:26:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf4T3mDwRQJ8hD7LIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGE4MzlmZjktMmYzMi00YzZiLWFkMDEtYzBiNWJkYTli
MGRlMB4XDTI0MTEyMzAyMDAyOFoXDTI1MDIyMTAyMDAyOFowLzEtMCsGA1UEAxMk
YzhkMDkxNGItZDFkZC00MGNkLWFiZjUtY2Q0ZWE3ZDBlNjdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucPrUN92OalHsMlOa9AY5hIe1gS9gxOOBJnC
M1gmhsHYSxb5nfVpaArB2ATBE8w3xTkxXzpXwoilU9dBb6UtN23XwvMvQZF0tUG5
xa11EQsiCk0jCAYLq9J403hiMcxIezNfQpMllWrnlUUg+2PQ+xqsbjk8GIM+WnXC
2/hpOLWw4zR1bDNNPCP+1fR2H6C7AhwT/ANcgaAlGFQwxy6suYZKAYLBVPXMD/mi
ee9ZpWwWYrlKUHnfckHsDMuta+yJsrfRji2BactF/RGA/0hhZtqr5CXpBYNAd5cs
l0dvbDB3s+OcYL9xq7XZdabZKswLlqXlyE/vu8zrUbVA6jPTWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNFsXlheDyU3dYxwS9mWjiqljLYmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kYTgz
OWZmOS0yZjMyLTRjNmItYWQwMS1jMGI1YmRhOWIwZGUvY2U5MWJhYTQtNDUwNS0z
NDlkLWEwZmItMTg2NTNmZTQ5OTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGE4MzlmZjktMmYzMi00YzZiLWFk
MDEtYzBiNWJkYTliMGRlL2RhODM5ZmY5LTJmMzItNGM2Yi1hZDAxLWMwYjViZGE5
YjBkZS5jcmwwHwYDVR0jBBgwFoAUxsk3XDfgBQ+TXkubYZJnTer9dQIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9kYTgzOWZmOS0yZjMyLTRjNmItYWQwMS1jMGI1
YmRhOWIwZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1iYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL4UNUrFpHULKKkrqU3klWe1vjgUNhzOP3qD0LcDyT7s6DfyvNEXK3EG
N5A3Rf+ew06BqQlmh9EJND8lWmU051/b5ikyOcrXchirGabQEiyZ5ZHboJRjg8NM
vbLpm4fXhlfEDs6N1NsIPNrXOKxQF2uuxGNNCdYcJRVySjbVNvyYUUlg8989onVZ
lYBJ+0Ih2cGBrM5t3DjazXK6zsdvpC1uLdW43vLTNZY87okjRkmgx0QaGDSJN4ut
nIH5hGU2HRnyUoH03uEd1XARV66Dk12rzw4iF66osEUNN2rd6FSZTZXR6GzKqALh
p7uX4dfpGuvmSvzS++AD8/CQVjF6Ji8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:09 2025 by rpki-client