Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/b0dfcc6d-f3df-3256-be73-0e9694e8e57f.roa
File: b0dfcc6d-f3df-3256-be73-0e9694e8e57f.roa (raw, json)
Hash identifier: 4/owyBdjqNSwMiQxm8x0RzaK1vtcnZN52y7vGrCpUKM=
Subject key identifier: 67:95:F6:2B:32:BD:7E:AE:97:7E:03:DC:CA:6F:04:E6:B2:85:55:4D
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F43285848B1F62A3C172E02855C862A00
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/b0dfcc6d-f3df-3256-be73-0e9694e8e57f.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 21949
IP address blocks: 199.45.164.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:2a:3c:17:2e:02:85:5c:86:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=f17cb469-253d-4447-be19-e6ac6f9edfeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:24:e7:eb:07:c7:9d:f3:46:c0:ea:0e:61:d2:
76:c6:5e:08:29:5f:3b:69:eb:55:51:16:0a:29:80:
a1:ec:64:a3:c0:69:63:f7:0e:4d:38:b6:97:5e:f0:
a0:36:0d:3e:6e:dc:4b:76:76:9d:d5:8d:5d:be:05:
5e:90:de:93:6a:8a:b6:a6:6a:b2:c4:d6:16:4d:2c:
6a:2a:ae:8f:c8:73:3c:82:cf:2b:63:98:97:64:5b:
44:04:1a:55:1e:10:cf:08:81:a3:35:e4:6a:7e:da:
44:4b:8b:37:de:ff:88:d1:8d:c7:92:e7:2a:37:26:
d9:83:90:5a:5b:ca:0f:e9:eb:d6:3a:f7:c2:ed:cc:
35:63:ff:5e:d1:70:15:59:e4:d5:e8:e7:aa:54:6c:
6c:03:17:05:81:69:4d:8f:2a:6f:42:08:d7:94:fd:
7d:2b:df:f2:c0:21:ec:f3:20:49:30:8e:16:34:80:
8b:03:ca:25:52:9b:3b:fd:e0:eb:f4:0d:6f:3f:8f:
a8:07:cc:2d:bd:22:ee:99:87:6d:41:37:60:74:99:
77:ee:26:84:8a:65:8c:ec:36:74:c0:01:3f:f6:68:
a2:63:bd:2b:bb:47:3a:7a:1d:26:69:5a:7a:1c:1a:
d0:66:1b:bb:ce:37:ba:e2:24:f2:20:79:08:73:f2:
e9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:95:F6:2B:32:BD:7E:AE:97:7E:03:DC:CA:6F:04:E6:B2:85:55:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/b0dfcc6d-f3df-3256-be73-0e9694e8e57f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
199.45.164.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:78:77:ad:69:12:72:75:23:bb:ec:23:5e:6b:1f:ef:dc:25:
8b:e0:f0:6e:d9:3a:56:44:6a:47:8c:53:b6:05:71:7b:83:0f:
62:d9:0e:48:9a:55:79:1f:54:d4:53:0b:0c:b6:6d:9a:a3:07:
3e:3d:fb:c6:75:cf:6b:2a:5b:2e:40:c6:8f:ce:bc:9a:35:63:
8e:4f:a4:40:de:87:58:9a:d8:60:6a:0a:12:72:38:ce:fe:19:
d4:89:de:e8:b3:9e:86:c0:e1:92:65:df:16:3f:10:e4:fd:43:
04:93:1d:0a:47:5e:6f:0b:33:47:cb:a2:0f:ac:86:cb:2b:6f:
a8:00:88:8a:90:7c:d6:df:18:57:cb:96:f9:c6:8c:c1:a1:7f:
80:2b:e1:44:76:86:c1:45:8b:37:dc:e2:b6:25:e7:b0:94:24:
01:2c:67:73:19:84:3b:bd:34:7c:d7:1c:39:15:3c:64:0b:38:
40:bf:54:85:11:da:92:24:f5:7e:77:8a:9c:59:c7:07:44:86:
f3:f0:a7:9b:f6:25:76:68:7a:9a:b2:2e:a5:b1:2c:ad:0e:77:
ba:0e:b4:ef:89:a1:6e:2e:42:4d:6a:a8:8c:30:2b:dd:31:bb:
7a:5f:67:ba:a7:96:85:b2:33:02:b1:64:8f:1b:93:e0:e9:24:
14:9e:39:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9io8Fy4ChVyGKgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx
YzViMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk
ZjE3Y2I0NjktMjUzZC00NDQ3LWJlMTktZTZhYzZmOWVkZmViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyTn6wfHnfNGwOoOYdJ2xl4IKV87aetVURYK
KYCh7GSjwGlj9w5NOLaXXvCgNg0+btxLdnad1Y1dvgVekN6Taoq2pmqyxNYWTSxq
Kq6PyHM8gs8rY5iXZFtEBBpVHhDPCIGjNeRqftpES4s33v+I0Y3HkucqNybZg5Ba
W8oP6evWOvfC7cw1Y/9e0XAVWeTV6OeqVGxsAxcFgWlNjypvQgjXlP19K9/ywCHs
8yBJMI4WNICLA8olUps7/eDr9A1vP4+oB8wtvSLumYdtQTdgdJl37iaEimWM7DZ0
wAE/9miiY70ru0c6eh0maVp6HBrQZhu7zje64iTyIHkIc/LpcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGeV9isyvX6ul34D3MpvBOayhVVNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx
NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvYjBkZmNjNmQtZjNkZi0z
MjU2LWJlNzMtMGU5Njk0ZThlNTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx
MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk
MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk
MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxy2kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEJ4d61pEnJ1I7vsI15rH+/cJYvg8G7ZOlZEakeMU7YFcXuDD2LZDkia
VXkfVNRTCwy2bZqjBz49+8Z1z2sqWy5Axo/OvJo1Y45PpEDeh1ia2GBqChJyOM7+
GdSJ3uiznobA4ZJl3xY/EOT9QwSTHQpHXm8LM0fLog+shssrb6gAiIqQfNbfGFfL
lvnGjMGhf4Ar4UR2hsFFizfc4rYl57CUJAEsZ3MZhDu9NHzXHDkVPGQLOEC/VIUR
2pIk9X53ipxZxwdEhvPwp5v2JXZoepqyLqWxLK0Od7oOtO+JoW4uQk1qqIwwK90x
u3pfZ7qnloWyMwKxZI8bk+DpJBSeOfk=
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:06:35 2025 by rpki-client