Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/2a09daeb-2ab1-3c62-9d92-99d6784da46e.roa
File: 2a09daeb-2ab1-3c62-9d92-99d6784da46e.roa (raw, json)
Hash identifier: 6jVCRZ2F2fZtyCv+fC1n7stXSM9q4HhyV8yTtfHlAkw=
Subject key identifier: A1:29:14:9D:05:E2:43:07:3B:16:EB:DD:6A:1D:B5:20:65:36:BF:9C
Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial: 010D0C9F432858488AE0A7906A868916CDC53400
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/2a09daeb-2ab1-3c62-9d92-99d6784da46e.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 30103
IP address blocks: 161.199.136.0/23 maxlen: 24
198.251.240.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:a7:90:6a:86:89:16:cd:c5:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=b0d5f176-e7c7-4fe1-b087-3987e14df69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:f9:68:1d:e6:43:8c:62:e3:d5:30:a9:42:
fe:fa:13:ee:f3:fc:c5:6f:89:38:be:5b:3d:4f:9e:
a7:45:b4:b3:79:4b:4f:5e:de:4b:7d:48:9d:a5:89:
ef:87:ab:01:a9:30:7c:f7:e3:c3:42:6c:08:43:a6:
f8:5f:61:7e:af:d4:b9:88:16:41:20:97:5d:e6:38:
f1:48:75:22:f5:cf:09:f9:30:f2:63:8e:87:52:61:
6a:b4:05:cf:12:5f:78:df:5a:80:d7:05:36:5f:fa:
66:92:6e:66:ac:e7:bc:87:ac:dd:89:ea:73:4c:73:
91:9f:6c:ec:7f:fd:6c:54:84:0c:40:93:29:62:45:
53:bf:5c:a4:eb:d7:2c:89:82:c4:60:34:56:f9:b5:
8a:4f:80:c2:9b:20:00:12:3f:f8:bf:cf:cc:d2:b6:
1e:25:c6:4a:c8:8d:59:bc:a1:8a:81:7a:5e:30:81:
ff:a3:af:53:17:c4:5c:ef:05:61:91:b5:2e:2d:e6:
2c:22:53:ec:24:35:09:9d:a4:09:0a:ba:66:44:d8:
aa:5f:09:67:90:37:98:e4:cf:f8:a0:a4:4c:f6:be:
ad:3c:4b:52:fe:ed:6e:29:30:fc:2f:30:41:7c:76:
fd:8e:f9:ac:b8:6a:29:c3:68:c8:9b:42:60:df:c0:
e1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:29:14:9D:05:E2:43:07:3B:16:EB:DD:6A:1D:B5:20:65:36:BF:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/2a09daeb-2ab1-3c62-9d92-99d6784da46e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
X509v3 Authority Key Identifier:
keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
sbgp-ipAddrBlock: critical
IPv4:
161.199.136.0/23
198.251.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:6f:3c:7b:ba:96:75:22:53:12:20:91:dc:b0:f9:13:47:99:
37:52:19:53:c0:44:c3:f1:96:00:28:ba:ff:3c:af:4d:3b:c4:
81:7b:0b:10:3d:e8:63:4b:5a:db:57:e2:75:af:f9:4b:fa:6c:
76:43:27:cd:6f:47:2d:30:87:2c:30:c6:d9:f8:dc:cd:aa:e0:
d6:30:20:7c:99:14:d4:b8:3c:4c:ad:3d:7f:2f:21:54:e4:bf:
40:70:43:43:fc:ed:95:45:09:c0:88:8d:bc:cb:14:71:82:7d:
f0:4a:41:61:88:37:65:5a:76:e6:17:d5:fd:0b:95:4b:d1:65:
44:9a:be:7e:dc:14:3f:ed:c2:7b:83:65:46:5d:43:ea:2b:9e:
03:78:aa:43:3b:78:09:f4:0b:da:db:ea:5e:71:23:cb:fb:0a:
75:6a:52:45:f9:0f:f5:98:f9:75:d8:12:9c:84:c6:57:67:31:
2a:fd:6a:5b:d5:9e:c6:9a:b4:35:51:30:9a:93:7c:cd:09:e5:
2d:64:eb:20:00:e6:a2:13:7a:12:e8:45:ab:d2:74:7c:72:85:
35:06:01:3e:2b:43:8d:27:75:9e:47:97:18:eb:c7:98:fc:ac:
33:4b:fd:12:25:00:78:7c:7b:e2:c3:93:79:54:62:99:00:9c:
f6:73:73:fd
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEiK4KeQaoaJFs3FNAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk
YjBkNWYxNzYtZTdjNy00ZmUxLWIwODctMzk4N2UxNGRmNjlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth75aB3mQ4xi49UwqUL++hPu8/zFb4k4vls9
T56nRbSzeUtPXt5LfUidpYnvh6sBqTB89+PDQmwIQ6b4X2F+r9S5iBZBIJdd5jjx
SHUi9c8J+TDyY46HUmFqtAXPEl9431qA1wU2X/pmkm5mrOe8h6zdiepzTHORn2zs
f/1sVIQMQJMpYkVTv1yk69csiYLEYDRW+bWKT4DCmyAAEj/4v8/M0rYeJcZKyI1Z
vKGKgXpeMIH/o69TF8Rc7wVhkbUuLeYsIlPsJDUJnaQJCrpmRNiqXwlnkDeY5M/4
oKRM9r6tPEtS/u1uKTD8LzBBfHb9jvmsuGopw2jIm0Jg38DhIwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFKEpFJ0F4kMHOxbr3WodtSBlNr+cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMmEwOWRhZWItMmFiMS0z
YzYyLTlkOTItOTlkNjc4NGRhNDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBoceIAwQD
xvvwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGRvPHu6lnUiUxIgkdyw+RNHmTdSGVPARMPxlgAouv88r007
xIF7CxA96GNLWttX4nWv+Uv6bHZDJ81vRy0whywwxtn43M2q4NYwIHyZFNS4PEyt
PX8vIVTkv0BwQ0P87ZVFCcCIjbzLFHGCffBKQWGIN2VaduYX1f0LlUvRZUSavn7c
FD/twnuDZUZdQ+orngN4qkM7eAn0C9rb6l5xI8v7CnVqUkX5D/WY+XXYEpyExldn
MSr9alvVnsaatDVRMJqTfM0J5S1k6yAA5qITehLoRavSdHxyhTUGAT4rQ40ndZ5H
lxjrx5j8rDNL/RIlAHh8e+LDk3lUYpkAnPZzc/0=
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:18:25 2025 by rpki-client