Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/cb4a05db-d9d9-3a66-8b98-918d6b164822.roa
File: cb4a05db-d9d9-3a66-8b98-918d6b164822.roa (raw, json)
Hash identifier: WxcQQfbBXPJNvHEFbwbIFO2OxCTND7qvci5ynfmw/wo=
Subject key identifier: E1:D2:2D:F4:04:D4:53:81:16:06:8E:23:1B:6D:E4:2C:42:25:EA:38
Certificate issuer: /CN=f84ea5c3-3226-48ac-838b-0fdf69176854
Certificate serial: 010D0C9F432858489D05E5D182C53677382B6D00
Authority key identifier: 82:71:9E:64:EE:FB:6C:5A:E9:41:FD:EE:1D:55:A8:32:16:3B:EE:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/cb4a05db-d9d9-3a66-8b98-918d6b164822.roa
Signing time: Tue 21 Jan 2025 02:00:39 +0000
ROA not before: Tue 21 Jan 2025 02:00:39 +0000
ROA not after: Mon 21 Apr 2025 01:00:39 +0000
asID: 14362
IP address blocks: 199.33.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9d:05:e5:d1:82:c5:36:77:38:2b:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84ea5c3-3226-48ac-838b-0fdf69176854
Validity
Not Before: Jan 21 02:00:39 2025 GMT
Not After : Apr 21 01:00:39 2025 GMT
Subject: CN=591842a2-7e6d-48ba-b65a-c5c0ad80b997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e8:43:c8:7b:c5:62:c9:0a:fd:72:5f:ca:33:
1b:0f:6d:fb:de:64:05:ea:52:2d:2a:3f:75:9d:77:
6d:37:32:ee:13:ec:19:51:f7:0d:02:a8:e0:e8:c9:
8b:10:95:9e:2d:54:cb:b2:2a:e0:4f:40:c2:bf:bb:
4d:a4:ba:21:80:9d:d6:fb:ba:61:c8:46:56:c3:62:
2a:f6:d9:4d:9a:d9:51:62:93:e3:d9:8b:4c:95:a9:
cf:10:91:2e:db:4f:33:8c:24:f6:5c:0e:82:7c:0f:
f8:a5:ef:17:86:e9:74:91:02:89:3f:79:10:06:a1:
e5:8a:f5:8f:76:d6:f5:8d:79:96:1c:13:4f:ca:39:
c7:cc:47:57:7a:ef:93:d5:ee:53:cc:6a:77:92:54:
a3:94:0a:53:51:6f:fd:f4:48:cf:dd:4b:c1:45:6d:
73:4f:a2:4f:54:88:c3:17:6f:39:9d:f7:af:7d:97:
0d:fc:52:d6:4a:e0:75:da:8c:8a:52:1e:b3:4d:42:
b6:10:b6:00:c9:9f:9a:8f:01:2d:12:af:30:15:00:
17:7b:b5:d3:87:46:73:bf:80:fa:84:0c:01:f4:68:
8a:30:09:ee:f9:dc:ef:a6:66:26:a0:e3:ed:07:31:
b7:f3:0a:bd:61:62:5d:56:bb:1d:29:99:e0:93:2d:
c0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D2:2D:F4:04:D4:53:81:16:06:8E:23:1B:6D:E4:2C:42:25:EA:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/cb4a05db-d9d9-3a66-8b98-918d6b164822.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.crl
X509v3 Authority Key Identifier:
keyid:82:71:9E:64:EE:FB:6C:5A:E9:41:FD:EE:1D:55:A8:32:16:3B:EE:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer
sbgp-ipAddrBlock: critical
IPv4:
199.33.73.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:93:57:c7:72:59:ae:42:96:13:3e:4f:e5:4a:a2:56:05:0f:
47:da:bd:91:8a:22:27:51:9f:f5:84:ad:53:98:6c:c9:7e:39:
be:e9:46:b5:9a:24:96:a1:cf:46:a8:50:6c:3f:c4:b3:c2:7f:
54:27:51:49:73:1c:bd:8c:8e:dd:12:cb:ae:68:26:8e:54:c5:
5a:ac:82:ed:b4:c7:9c:37:c2:4b:34:3b:44:e6:9e:21:93:e1:
ec:de:3d:09:63:f6:44:e7:d7:6d:30:d1:82:8b:fa:2e:4f:1a:
90:b6:48:46:10:48:8d:6e:14:74:c5:1c:8c:34:65:4f:0c:43:
0f:ca:6a:28:0a:c7:e5:1b:b5:6b:3b:4d:63:be:81:78:9f:63:
cb:b7:05:96:93:8e:60:35:5c:1d:29:2d:93:14:28:98:87:6d:
d2:b2:c7:95:34:76:43:14:56:cf:89:16:45:be:4c:bd:51:5e:
7f:c2:8f:a0:fe:02:8e:fa:10:a3:9a:35:35:1c:2d:83:b7:7a:
88:fa:a4:96:cb:29:7e:b7:21:24:b9:97:26:d9:ff:6b:79:22:
54:c4:00:d9:58:71:cd:aa:7b:4b:c9:d3:85:df:a1:de:6d:a1:
62:2a:9d:1b:61:db:ad:15:94:b2:52:f0:2e:c9:8b:56:12:ee:
cd:d7:b5:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEidBeXRgsU2dzgrbQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjg0ZWE1YzMtMzIyNi00OGFjLTgzOGItMGZkZjY5MTc2
ODU0MB4XDTI1MDEyMTAyMDAzOVoXDTI1MDQyMTAxMDAzOVowLzEtMCsGA1UEAxMk
NTkxODQyYTItN2U2ZC00OGJhLWI2NWEtYzVjMGFkODBiOTk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoehDyHvFYskK/XJfyjMbD2373mQF6lItKj91
nXdtNzLuE+wZUfcNAqjg6MmLEJWeLVTLsirgT0DCv7tNpLohgJ3W+7phyEZWw2Iq
9tlNmtlRYpPj2YtMlanPEJEu208zjCT2XA6CfA/4pe8Xhul0kQKJP3kQBqHlivWP
dtb1jXmWHBNPyjnHzEdXeu+T1e5TzGp3klSjlApTUW/99EjP3UvBRW1zT6JPVIjD
F285nfevfZcN/FLWSuB12oyKUh6zTUK2ELYAyZ+ajwEtEq8wFQAXe7XTh0Zzv4D6
hAwB9GiKMAnu+dzvpmYmoOPtBzG38wq9YWJdVrsdKZngky3A+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOHSLfQE1FOBFgaOIxtt5CxCJeo4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODRl
YTVjMy0zMjI2LTQ4YWMtODM4Yi0wZmRmNjkxNzY4NTQvY2I0YTA1ZGItZDlkOS0z
YTY2LThiOTgtOTE4ZDZiMTY0ODIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg0ZWE1YzMtMzIyNi00OGFjLTgz
OGItMGZkZjY5MTc2ODU0L2Y4NGVhNWMzLTMyMjYtNDhhYy04MzhiLTBmZGY2OTE3
Njg1NC5jcmwwHwYDVR0jBBgwFoAUgnGeZO77bFrpQf3uHVWoMhY77kIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mODRlYTVjMy0zMjI2LTQ4YWMtODM4Yi0wZmRm
NjkxNzY4NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyFJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABuTV8dyWa5ClhM+T+VKolYFD0favZGKIidRn/WErVOYbMl+Ob7pRrWa
JJahz0aoUGw/xLPCf1QnUUlzHL2Mjt0Sy65oJo5UxVqsgu20x5w3wks0O0TmniGT
4ezePQlj9kTn120w0YKL+i5PGpC2SEYQSI1uFHTFHIw0ZU8MQw/KaigKx+UbtWs7
TWO+gXifY8u3BZaTjmA1XB0pLZMUKJiHbdKyx5U0dkMUVs+JFkW+TL1RXn/Cj6D+
Ao76EKOaNTUcLYO3eoj6pJbLKX63ISS5lybZ/2t5IlTEANlYcc2qe0vJ04Xfod5t
oWIqnRth260VlLJS8C7Ji1YS7s3XtXU=
-----END CERTIFICATE-----
Generated at Tue Apr 29 19:53:46 2025 by rpki-client